KUST HOTELL & SPA I PITEÅ AB PRIVACY POLICY

Within KUST Hotell & Spa i Piteå AB (company reg. no. 559020-5851) and all companies within the Skoogs Handels AB Group (company reg. no. 556635-8353) collect and we process personal data of employees, suppliers, guests, and other users who use our services. The Skoogs Handels AB Group consists of KUST Hotell & Spa i Piteå AB, Tage Restaurang AB, Skoogs Bränsle AB, Skelleftebränslen AB and Skoogs Fastigheter i Piteå AB.

We take measures to protect the privacy and personal integrity of each person and comply with the currently applicable legislation aimed at protecting you as an individual. KUST Hotell & Spa i Piteå AB is referred to “KUST Hotell & Spa” below.
KUST Hotell & Spa is the data controller with respect to the services. “Personal Data” refers to all information that can be linked directly or indirectly to a living person. We strive to maintain a high level of protection for your privacy and use personal data primarily for the purpose of managing, providing, developing and maintaining our services.
By submitting your personal data to us and accepting the applicable terms and conditions, you consent that your personal data will be processed in accord with the respective service and in accordance with our Privacy Policy. Changes to our Privacy Policy are announced by publishing the new Terms and Conditions on the KUST Hotell & Spa website, and we recommend that you regularly review these.

1. Collection and processing of personal data
KUST Hotell & Spa collects and processes your personal data, i.e. information that can identify you as an individual only to the extent as permitted by law. Collection and processing may occur when making a reservation, signing up for a newsletter subscription, leaving a guest questionnaire, signing a contract, etc. In situations where it is required by law, a separate consent will be obtained from you.

2. The information we collect and how we use your personal data
We only collect personal data that is relevant to the purposes described in the special terms and conditions of each service and our Privacy Policy. The information we collect includes, for instance, details such as name, address, telephone number, e-mail address, IP address, user history, information about your traveling companions, booking references, payments, employer, contacts in emergency situations, special dietary requirements, personal preferences, and other information that you have chosen to submit to us.
The primary purpose with our collection and processing of personal data is so that we at KUST Hotell & Spa can fulfil our commitments agreement you have entered into with us, along with being able to improve the experience for you individually.

KUST Hotell & Spa uses Personal Data to:
• manage, provide, further develop and maintain the services,
• process your bookings and orders of the Services (in accordance with the booking terms and conditions)
o Once you have made a reservation with us, we use your Personal Data to send out a booking confirmation, important information about your upcoming stay, and special offers related to the stay. Such mailings will be made to the e-mail address you provided in connection with your booking.
o during your stay with us, we may send out information via e-mail/SMS to the e-mail address and/or mobile number provided in connection with the booking. Such information may be, for instance, about available SPA times, important information prior to your stay, or simply a reminder of your reservations at the restaurant.
o It may also occur that after the stay we send you a questionnaire, where we ask you to answer questions about your stay; this is in order to assist us in making our services even better. We may also send an e-mail where we thank you for your stay with us, and send out (within the following 120 days) to market special offers and services that we think you might be interested in.
• manage and register the purchase of gift certificates and vouchers
• diagnose faults/problems, optimise the technology and contact you in case of problems with a booking or provision of the Services,
• analyse and improve the quality of – and experience with– our Services, individualise the communications with you regarding our Services e.g. by creating a profile for you and sending special offers that fits in with your profile as a user of our Services,
• analyse statistics and user behaviour concerning our Services,
• increase your benefit from and experience with of our Services in other ways that we think you would appreciate, or promote services and products, directly or not, including behavioural marketing.
• Send out e-mail in the form of newsletters and special offers, to those who have provided a separate own consent via https://www.hotellkust.se/nyhedsbrev or at the time of booking.

3. Retention and transfer of personal data
Your personal data will be retained for the period of time required in order to fulfil the objectives and purposes as specified in this Privacy Policy. KUST Hotell & Spa deletes personal data in accordance with applicable law, and deletes or removes or identifying information from personal data when the purpose of the processing of the personal data is no longer present. In the determination of the period during which your personal data will be retained, we will in consider in particular the requirements for retention periods as required by law, recommendations of public authorities, standard industry practices and possible guarantee/warranty commitments. If you have provided consent for a subscription to our newsletter, your contact information will be retained as long as you yourself choose to continue receiving the newsletter. However, the data will not be retained longer than is necessary taking the purpose of the processing into account..
KUST Hotell & Spa retains personal data in accordance with our Privacy Policy and applicable legislation. In some cases, we may need to share your personal data with other companies within the Skoogs Handels Group in order for us to be able to provide the Services and to fulfil our commitments to you. KUST Hotell & Spa ensures that other companies within the Skoogs Handels Group obtain clear guidelines for processing personal data and define the purposes for which the personal data may be used.

KUST Hotell & Spa uses subcontractors, for instance for computer operations and in such instances personal data may be transferred to these subcontractors. Our subcontracted data processors process your personal data only on behalf of KUST Hotell & Spa in accordance with our instructions and after signing a personal data processing agreement. KUST Hotell & Spa may otherwise disclose your information to third parties such as the police or other public authority in the event of an investigation of a crime or if KUST Hotell & Spa is otherwise required to provide such information by law or decision of a government authority.

As a general rule, KUST Hotell & Spa does not ordinarily transfer Personal Data to countries outside of the EU/EEA however if we, for instance, have a subcontractor in a country outside the EU/EEA or it becomes necessary in order for use to be able to perform our contractual obligations towards you, it may occur that we transfer Personal Data outside of the EU/EEA. In order to ensure a high level of protection of your Personal Data in such situations along with compliance with EU/EEA rules, KUST Hotell & Spa enters into personal data processing agreements with such subcontracted data processors. Such personal data processing agreements govern the processing of personal data by subcontracted data processors and, where applicable, the transfer of personal data in accordance with applicable EU/EEA rules concerning the protection of Personal Data. The agreements contain the terms and conditions required by the EU Commission and comply with the requirements of the applicable law in order to protect the transferred Personal Data.

4. Security, protection and deletion of personal data
KUST Hotell & Spa has taken appropriate technical and organisational measures so as to protect your Personal Data against loss, manipulation or unauthorised access. We continuously adapt our security measures to ongoing technical developments.

5. Other applications / websites
The services may contain links to other applications and/or websites that are not controlled by KUST Hotell & Spa. We are not responsible for the contents of linked applications/websites and the collection/processing that may occur by owners or operators of such linked websites.

6. Cookies
It may occur that KUST Hotell & Spa collects information on our digital services via the use of cookies. Cookies are simple text files stored on your computer or mobile device by a website’s server. Read more about what cookies we use in our Cookies Policy. Under Settings on your web browser, you can read how to clear, block, and manage your cookies. If you choose to block cookies, it may result in that certain sections of the website are inaccessible or do not work properly.

7. Change, delete and review your personal data
KUST Hotell & Spa will correct or delete incorrect or incomplete information, either upon your request or if KUST Hotell & Spa itself detects such a situation.

If your personal data changes, please inform us by sending an e-mail to gdpr@skoogs.se – write “Personal Data” in the subject line.

You are entitled to request, at any time you want and without charge, that KUST Hotell & Spa not process your Personal Data for marketing purposes or withdraw your consent to this. The e-mail marketing currently done allows you to unsubscribe at any time. By clicking on the Unsubscribe link found in the footer of all marketing messages sent via e-mail, you will prevent future mailings to the e-mail address where you are the recipient. You can also unsubscribe by contacting us by sending an e-mail to gdpr@skoogs.se – write “Personal data” in the subject line.

You also have the right to receive, without charge, a registry extract or transcript that shows the personal data about you that is being processed. The request is to be made in writing to the address under item 9. The note must contain your name, postal address, telephone number, e-mail address (which has been used in communications with KUST Hotell & Spa, as well as a photocopy of your ID card. The extract/transcript will be sent to your address as registered in the civil population registry. At any time you want, you may withdraw your consent to further personal processing (however this is non-retroactive). Withdrawn consent does not affect such information that may be processed without consent, i.e., where we have a legal basis.

8. Transfer
If we sell, reorganise or otherwise transfer/assign all or part of our business activities, your Personal Data may be transferred at the same time.

9. Contact
If you have questions, comments or want to file a complaint regarding the processing of your personal data and compliance with the provisions in the Privacy Policy or applicable law concerning data protection, please send a letter to KUST Hotell & Spa i Piteå AB, Data Protection Officer, Box 717, SE-941 28. Pitea.

Last uppdated: 21 May, 2018