Privacy Policy

Data Controller

The data controller is Christian Due, Slätthult, Sexdrega, Sweden. You can reach us at info@slatthult.com.

Data We Collect

When you make a booking, we collect: your name, email address, phone number (optional), number of guests, check-in and check-out dates, any notes you provide, and your expected arrival time. We also record the booking price and your preferred language.

Why We Process Your Data

We process your data to fulfil your cabin booking (GDPR Article 6(1)(b) — performance of a contract) and to comply with Swedish accounting obligations under Bokföringslagen (GDPR Article 6(1)(c) — legal obligation).

How Long We Keep Your Data

Booking data is retained for 7 years after your stay to comply with Swedish accounting law (Bokföringslagen). After 7 years, personal data is automatically anonymized. Booking records for cancelled requests that never resulted in a stay follow the same retention period.

Third Parties

We share your data with the following processors: our email provider (for sending booking confirmations) and Cloudflare (Turnstile bot protection, which processes browser metadata during form submission). No data is sold or shared for marketing purposes.

Cookies

We use a single cookie ("locale") to remember your language preference. This is a strictly necessary functional cookie and does not require consent under the ePrivacy Directive.

Anonymous Analytics

We collect anonymous usage statistics to understand how our website is used. This includes: pages visited, country-level geographic location (derived from your IP address), device type, browser, and preferred language. Your IP address is never stored — it is immediately hashed with a daily rotating key and cannot be traced back to you. No cookies are used for analytics. This data is automatically deleted after 90 days. The legal basis for this processing is our legitimate interest in improving the website (GDPR Article 6(1)(f)).

Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing of, and receive a portable copy of your personal data. You also have the right to object to processing. Note that we may retain data required by Swedish accounting law even after a deletion request.

To exercise your rights, send an email to info@slatthult.com with your request. We will respond within 30 days.

Complaints

If you believe your data protection rights have been violated, you have the right to file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.