NATURGUIDEN PRIVACY POLICY (GDPR Compliant)
This Privacy Policy explains how Naturguiden on ice in Sweden AB (“Naturguiden”) collects, processes, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) (EU 2016/679) and applicable Swedish data protection laws. Your privacy is of high importance to us, and we are committed to open and transparent data handling.
1. Controller of Personal Data
Naturguiden on ice in Sweden AB (Org. No. 559489-0237, phone: +46 76-341 23 22) is the Data Controller responsible for the processing of your personal data.
- Contact for Data Protection Matters: info@naturguiden.com
2. Personal Data Collected and Processed
We collect and process the following categories of personal data:
| Category | Examples of Data |
|---|---|
| Contact and Identity | Name, telephone number, email address. |
| Booking and Contract | Tour dates, number of participants, company details (if applicable). |
| Safety and Health | Year of birth, shoe size, dietary preferences/allergies, and medical conditions (where necessary for tour safety). |
| Correspondence | Content of personal emails, requests, and quotations (stored for a limited time). |
3. Lawful Basis and Purpose of Processing
We process your data only when we have a legal basis to do so under GDPR.
| Purpose of Processing | Lawful Basis (GDPR Article 6) | Retention Period |
|---|---|---|
| Fulfilling Contracts (Booking, Invoicing, Tour Provision) | Performance of a contract | Up to 7 years (per Swedish accounting law) post-contract |
| Safety and Risk Management (Allergies, Medical Conditions) | Vital interests or explicit consent | Retained only for the duration of the tour |
| Direct Marketing (Newsletters, Campaigns) | Legitimate interest or consent | Until you unsubscribe/withdraw consent |
| Legal Obligations (Accounting, Tax requirements) | Compliance with a legal obligation | As required by law (typically 7 years) |
4. Data Security and Sharing
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Your data is stored securely and handled only by authorized personnel.
Sharing with Third Parties
Your personal data will not be shared with parties outside our organization except in the following limited and necessary situations:
- Service Providers: We may share data with trusted third parties (e.g., transport companies, accommodation providers, or payment processors) strictly to process your order, arrange local transport, or fulfil the service contract. These third parties act as our Data Processors and are bound by confidentiality agreements.
- Legal Requirement: If required by law, court order, or governmental regulation.
Note: We do not transfer personal data outside the EU/EEA unless adequate safeguards are in place (e.g., standard contractual clauses).
5. Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal data:
- Right to Access: You have the right to request access to the personal data we hold about you.
- Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected.
- Right to Erasure (“Right to be Forgotten”): You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to any legal obligations (e.g., accounting law) that require us to retain data.
- Right to Restriction of Processing: You have the right to request that we temporarily limit the processing of your data under certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another controller.
- Right to Object: You have the right to object to processing based on legitimate interest (such as direct marketing).
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Direct marketing consent can be withdrawn via the “Unsubscribe” link in every mailshot.
To exercise any of these rights, please contact us at info@naturguiden.com.
6. Information Collected Automatically and Cookies
Automatically Collected Data
We may collect information about your device and browsing activity that is generic in nature and is not personally identifiable (e.g., type of internet browser, operating system, pages viewed).
Cookies
Naturguiden uses cookies to enhance and customize your user experience, analyze our traffic, and personalize content and ads.
- Third-Party Cookies: We share information about your use of our site with our social media, advertising, and analytics partners (such as Google Analytics). These partners may combine this information with other data you have provided to them or that they have collected from your use of their services.
- Managing Cookies: You have the option to block or remove cookies using the settings in your web browser. However, please be aware that blocking cookies may impair the functionality and user experience of the website.
7. Right to Lodge a Complaint
If you believe that Naturguiden is processing your personal data incorrectly or is failing to comply with GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY).
Policy Updates
The content of this policy may be changed periodically. The latest version will always be published on our website.