Privacy Policy
Last updated: 04 April 2025

Protecting your personal data is important to us. This privacy policy explains what data we collect on the website kvarnviksgard.com, how we use it, and what rights you have under the GDPR.

§ 1 Data Controller

The data controllers for this website are:

Christian Laubenstein & Axel Börner
Ängslättsvägen 55–44
SE-231 98 Klagstorp, Sweden
Email: christian@kvarnviksgard.com

§ 2 Automatically Collected Data

When you visit our website, certain technical data is automatically transmitted by your browser and temporarily stored in server log files. This includes:

• IP address (anonymised when possible)
• Date and time of access
• Browser type and version
• Operating system used
• Referrer URL
• Pages visited

This data is necessary for the technical operation of the site, ensuring security, and for statistical analysis. We do not merge this data with other data sources.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

§ 3 Contacting Us

When you contact us via contact form or email, we process the personal data you provide voluntarily, such as your name, email address, and message. We use this data solely to respond to your inquiry.
Legal basis: Art. 6(1)(b) GDPR (contract initiation or fulfilment)

§ 4 Use of Cookies

Our website uses cookies to enhance user experience, analyse usage, and display personalised content or ads where applicable. Upon your first visit, you will be asked to consent to the use of non-essential cookies via a cookie banner.

This banner is managed by the CookieYes plugin, which collects the following information:

• Anonymised IP address
• Timestamp and consent status
• Browser and device type

Legal basis: Art. 6(1)(a) GDPR (your consent)

Provider: CookieYes Limited, UK
More info: www.cookieyes.com/privacy-policy

§ 5 Bookings via Lodgify

We use Lodgify as our online booking platform. When you make a booking through the embedded booking form on our site, your data is transmitted directly to Lodgify and processed there. The following information is collected:

• First and last name
• Email address
• Phone number (if provided)
• Address details
• Booking information (e.g. travel dates, accommodation type, special requests)
• Payment information (encrypted, depending on payment method)

This data is used exclusively to manage your reservation and provide you with relevant communication.
Legal basis: Art. 6(1)(b) GDPR (contract fulfilment)

Provider: Codebay Solutions S.L. (Lodgify), Barcelona, Spain
Lodgify is GDPR-compliant and stores data on servers within the EU.
More info: Lodgify Privacy Policy

§ 6 Services and Plugins That Process Personal Data

1. Google Site Kit
This plugin integrates services like Google Analytics to analyse visitor behaviour. It may collect anonymised IP addresses and track interactions like page views or time spent.
Provider: Google LLC, USA
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner)
Standard Contractual Clauses apply.

2. Rank Math SEO
This plugin helps improve search engine visibility. It only processes anonymous data (e.g. page views), and no personal data is stored.
Provider: Rank Math, India
Privacy policy: rankmath.com/privacy-policy

3. Login Lockdown
To prevent brute-force login attacks, this plugin stores:

• IP address during failed login attempts
• Time of the attempt
• Username used

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in site security)

4. one.com Spam Protection
This plugin protects our contact forms from spam by checking submitted IP addresses, emails, and browser data against known spam patterns.
Provider: one.com, Denmark
Legal basis: Art. 6(1)(f) GDPR

§ 7 Data Sharing

We only share your data if:

• you have explicitly given consent,
• it is necessary for fulfilling a contract, or
• we are legally required to do so.

Our service providers (e.g. hosting providers) are contractually bound to comply with the GDPR.

§ 8 Your Rights

Under the GDPR, you have the following rights:

• Right to access your data
• Right to rectify incorrect data
• Right to delete your data (if no legal obligations apply)
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise your rights or if you have any questions, you can contact us at any time via:
Email: christian@kvarnviksgard.com

§ 9 Data Retention

We only store personal data for as long as necessary to fulfil the purposes stated above or to meet legal retention requirements.

§ 10 Data Security

We use appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access. This includes access controls and regular security updates.

§ 11 Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect legal changes or improvements to our website. The latest version is always available on our website.