Privacy policy

Hajk Sweden AB, 559345-3474, is a privately owned company in the hospitality industry in Skåne. The brand name is Hajk. We provide all-inclusive trekking trips and accommodation. Hajk Sweden AB (also referred to as “we” or “us”) is committed to protecting your privacy and this privacy policy sets out how we do this.
The policy has the following content:

1. background and purpose
2. your rights
3. in what situations do we need to process your personal data?
4. How do we get information about you?
5. How do we use information about you?
6. How long is the information stored?
7. Who might we share your information with?
8. contact details

Under current data protection legislation, personal data may only be collected for “specified, explicit and legitimate purposes”. The collector may not subsequently process the data in a way that is incompatible with these purposes. In addition, the collector must have a legal basis for processing the data.
Our processing of your personal data is based on one or more of the following legal grounds:
– the processing is necessary for the performance of our contract with you (“contract”),
– the processing is necessary for us to comply with an obligation we have under another law (“legal obligation”),
– the processing is necessary for our legitimate interests and your interests in the protection of your personal data are not overridden (“balancing of interests”); or
– in certain specific cases, after you have given your consent to the processing in question (“consent”).
In the vast majority of cases, the legal basis is a contract, a legal obligation or a balance of interests. However, in some cases our processing requires your consent. In such cases, we will obtain your consent for the processing in question before it starts. You can always contact us if you have any questions about privacy and data protection rules by sending us an e-mail at info@hajksweden.se. Below we explain the “legitimate purposes” for which we collect your personal data and the legal basis on which we do so.

Your rights
Under current data protection legislation, you have the right to be informed about when and how we process your personal data. You also have the right, in certain cases, to access your personal data or to have it moved, corrected or deleted.
More information on your rights can be found here:
1. right to information
2. correct data
3. right to erasure (“right to be forgotten”)
4. right to restriction of processing
5. data portability 6. right to object
7. complaints
8. Compensation for damages

Right to information
You have the right to receive, free of charge, information about the personal data we process about you (a so-called register extract). The request for such an extract must be made in writing and signed by you. Please note that we only disclose information that we know for sure belongs to you. We are also not allowed to disclose information that violates someone else’s rights. You can send such a request to the address below. Mark the envelope “Data Protection”.
Hajk Sweden AB
RIBERSBORGSGATAN 14 A
217 53 Malmö.

To make sure that the register extract is not sent to the wrong person, we send them to your registered address.

Correct data
We constantly strive to ensure that your personal data is accurate and up to date. If we discover inaccurate or incomplete information, we try to correct it or remove it. If data is corrected after your request, we must inform those with whom we have shared your information of the correction. However, this does not apply if it proves impossible or too burdensome for us. Your right to information means that you have the right to know who we have shared your information with.

The right to be forgotten
Your personal data will be stored in the booking system for 2 years from the end of the booking. As a customer, you always have the right to contact us and ask for your personal data to be deleted. We are obliged to delete the data in the following cases:
– If the data is no longer needed for the purposes for which it was collected
– If the processing is based on your consent and you withdraw your consent
– If the processing is for direct marketing purposes and you object to the processing
– If the individual objects to personal data processing that is carried out after a balancing of interests and there are no legitimate grounds that outweigh your interest
– If the personal data has been processed illegally
– If erasure is necessary to comply with a legal obligation
If data is deleted following your request, we must inform those to whom we have disclosed data of the deletion. However, this does not apply if it proves impossible or too burdensome for us. You also have the right to request information about to whom data has been disclosed.

Restricted access
In some cases, you may have the right to request that the processing of your personal data be restricted. Restriction means that the data is marked in our systems so that it can only be processed for certain limited purposes in the future. The right to restriction applies, among other things, when you believe that the data is inaccurate and have requested rectification. In such cases, you may also request that the processing of the data be restricted while the accuracy of the data is being investigated. When the restriction ends, you should be informed.

Data portability
In some cases, individuals who have provided their personal data have the right to obtain and use their personal data elsewhere (data portability). The recipient of the personal data is obliged to facilitate such a transfer of personal data. Data portability requires that the recipient processes the personal data on the basis of your consent or in order to fulfill a contract with you, and only for personal data that you have provided yourself.

Complaints
If you believe that we are processing your personal data in breach of applicable data protection regulation, you are encouraged to notify us as soon as possible. You can also contact the Data Protection Authority directly to lodge your complaint.

Compensation for damages
A person who has suffered damage because his or her personal data has been processed in breach of the GDPR may be entitled to compensation from the controller or controllers involved in the processing. Individuals can claim damages from the controller or processor or bring an action for damages in court.

When do we need to process your personal data?
We may process your personal data in the following situations:
1. the provision of our products and services:
1. booking of accommodation
2 Ev. booked activity related to the accommodation
3. customer support case
4. Information security and combating misuse
5. communication about products and services
6. development of products and services
7. marketing
8. visits to our websites
9. Newsletters
10. Safety and performance. Contact via social media

Provision of our products or services
In order for us to provide our products and services to you, in many situations we need to process your personal data, specifically about you:
– Have booked an accommodation or activity through us
– Have booked accommodation with us through a retailer
– been in contact with our Customer Service

Customer of a retailer or partner of ours
If you have purchased your accommodation from a retailer or partner of ours, we will process your personal data to the extent necessary to enable us to:
– identify you as a customer,
– fulfilling our contract with you for the supply of products and services
– to handle complaints and claims,
– otherwise to enforce our rights and fulfill our obligations under our contract with you.
The data we may process are contact details (name, address, e-mail address and telephone number). The processing operations described above are necessary for us to provide the product or service you have purchased. The legal basis for the processing is therefore the performance of the contract with you. We will process your personal data 2 years after the end date of the booking.

Showed interest in our products or services
In order for us to offer our products and services to you, in many situations we need to process your personal data, specifically about you:
– requested information about our products or services via website, social media, email or phone.
– provided your information to us in connection with an event organized or attended by us or one of our retailers or partners.
The data we may process is the data you provide to us in connection with the contact, usually contact details (name, address, e-mail address and telephone number). In order for us to be able to market our products and services, we assume that our interest in processing your personal data outweighs your interest in not being subject to our processing. The legal basis for the processing operations is therefore the balancing of interests.
If you have requested/received a quote, we will keep your data for six months from the date of your request. If you have provided your data when making enquiries via the website or in connection with events, we will keep your data for 6 months from the date you provided it to us.

Customer service issues
If you contact our Customer Service, we need to be able to identify you as a customer and in many cases we will need your booking details to handle complaints, claims and queries. The information we may process is the information you provide to us in connection with the contact, such as contact information such as name, address, e-mail address, telephone number and booking number.
If we receive a complaint from someone, we create a case file containing information about the complaint. The file normally contains the identity of the guest as well as the identity of the other persons concerned by the complaint.
We usually have to disclose the identity of the complainant to the person against whom the complaint is made. This is inevitable when the accuracy of a person’s conduct is the subject of a complaint. If a complainant does not want information that identifies him or her to be disclosed, we will try to respect this. However, it may not be possible to process a complaint on an anonymous basis.
The processing operations described above are necessary for us to provide you with information about the product or service you have purchased or to correct errors. Our obligation to remedy defects may be contractual or legal, including consumer protection legislation. The legal basis for processing can therefore be both performance of a contract and a legal obligation.

Information security and prosecution of misuse
We process personal data for the purpose of ensuring the security of all our products and services, to detect or prevent various types of unlawful use or use that otherwise violates the terms of the services we provide. We also process this data to detect and prevent fraud. The data that may be processed for this purpose include IP addresses and information about your computer or mobile device.
The processing described above is a prerequisite for us to be able to provide the services, so the legal basis is performance of contract.

Communication about products and services
We may process personal data when we need to communicate with you to provide service information or updates to the products and services we contractually provide to you. We also process personal data when you contact our customer service.
We may also process data that we separately collect from you from time to time, for example, if you have chosen to respond to a customer survey that we have sent to you.
Our legitimate interests for this processing are to keep you as a customer informed about our products and services and its availability and to improve our products and services. In the course of such processing, we may use your contact details (name, email address, telephone number) and information about the products and services you use.
We will process your personal data for the above purposes 2 years after the last booking.

Development of products and services
We process personal data to develop our business in the form of our products and services. For such purposes, we may compile statistics for analysis purposes.
Our legitimate interests for such processing are to optimize our products and services for our customers. For technical purposes, we may use contact details such as name, e-mail address and telephone number. We will also process data about your computer or mobile device, such as version and model.
We will process your personal data for the above purposes 2 years after the last booking.

Marketing and promotion
We process different types of personal data in order to market our products and services directly to you. For these purposes, we may communicate with you by, for example, letter, text message, telephone, email, Facebook, Instagram and via our website.
In order to allow you to unsubscribe from a particular newsletter or similar mailing, there will be instructions in each mailing on how to opt out of future communications.
Our legitimate interests for such processing are to promote our existing or new products or services. We may therefore use your contact details (name, address, telephone number and email address) as well as demographic data (gender, age and postal code) and information about the products or services you have booked.
We will process your personal data for the above purposes 2 years after the last booking.

Visiting our websites
When someone visits our website, www.hajksweden.se, we use third-party service(s) to collect information and details about visitor behavior patterns. We do this to find out the number of visitors to the different parts of the website. This information is processed without identifying anyone. We do not make any attempt to find out the identity of those who visit our website, nor do we allow third party services to do so. If we wish to collect personally identifiable information through our website, we will inform you of this in advance. We will then explain when we will collect personal data and what we will do with it.
You can read more about how we use cookies in our Cookie Policy.

Newsletters
We collect statistics on the opening of emails and this helps us to monitor and improve our newsletter. The data we may process is your email address. If you are a customer, the legal basis for our mailing may be a balance of interests. You may also have given your consent to receive newsletters in the context of an event or other contact with us or one of our retailers or partners. Regardless of the legal basis on which our processing is based, you have the right to refuse further mailings at any time by notifying us.
Your e-mail address will be processed for the above purpose until you unsubscribe from future mailings.

Social media
If you send us a message via social media, the message will be stored for 1 year. The message will not be shared with any other companies or organizations.

How do we get information about you?
Information you share with us
We collect personal data from you in several different ways. This can happen, for example, when you provide your details when booking accommodation or activities, contact our customer service or contact us via social media. We may collect the following personal data from you:
– contact details (name, address, email address, phone number)

Information we collect about you
When you use our services, we may collect the following personal data:
– contact details (name, address, email address and phone number)
– Information on services used – Historical information (your purchase history, etc.)
– Information about how you interact with us (how you use our services, including page response time, download file, how you reached and left the service, as well as delivery notifications when we contact you).
– information about your computer or mobile device (such as IP address, language settings, browser settings, time zone, operating system, platform and screen resolution)

Sensitive information
We do not normally collect information relating to sensitive personal data (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, personal data concerning health or sex life). In connection with the sale of grocery bags, we may collect information on food allergies. This information is only stored until the reservation is passed. Personal identification numbers do not constitute sensitive personal data under current legislation, but to the extent that personal identification numbers are stored by us, we treat them as requiring special protection.

Who might we share your information with?
In order to safeguard your rights when we share your information with our partners or suppliers or other business partners, all sharing is done in accordance with written agreements that regulate the recipient’s rights and obligations regarding the processing of your personal data.
We will never sell your personal data to third parties unless we have your consent to do so. We will also not share your personal data with third parties for their marketing purposes unless we have your consent. As with unsolicited mailings from us, you have a legal right to object to future marketing communications from a third party to whom we have disclosed your personal data with your consent. However, you must contact this third party directly if you wish to object to the continued processing of your personal data for this purpose. We may share your personal data with the following parties:
1. Our suppliers
2. Our business partners

Our suppliers
We may share your personal data with our suppliers and third parties in relation to you. In order to perform the services we purchase or to develop our products and services, our suppliers need to process your personal data in several situations.
The contracts we enter into with our suppliers contain clear provisions on how they may process your personal data that we share with them. However, we and the suppliers are separate legal entities. Therefore, we cannot normally be held responsible if they do not comply with the applicable legislation. If you have questions regarding a supplier’s use of your personal data, you can contact us at info@hajksweden.se to obtain information about which suppliers processed your personal data.

Our business partners
We may share your personal data with our other business partners who may constitute third parties in relation to you. Such sharing is done to allow them to send offers about their products and services.
By “business partners” we mean companies that offer services relating to the addition of activities, services or products to your accommodation with us.
The agreements we enter into with such other business partners contain clear provisions on how they may process your personal data that we share with them. However, we and the business partners are separate legal entities. Therefore, we cannot normally be held liable if they do not comply with the applicable legislation. If you have any questions regarding such other business partners’ use of your personal data, you can contact us at info@hajk.se, to obtain information about which business partners processed your personal data.

Where do we process your personal data?
We will mainly process your personal data in Sweden. However, we cannot comment on where your personal data is processed when you use apps or other software-based services linked to your stay provided by third parties (third-party applications). Therefore, if you have any questions regarding this, please contact such party directly.

Contact us
Hajk Sweden AB is registered with the Swedish Companies Registration Office under corporate identity number 559345-3474 and has its registered office at RIBERSBORGSGATAN 14 A, 217 53 Malmö. Hajk Sweden AB is the data controller for the processing of your personal data as described above and complies with Swedish data protection legislation.
Our customer service is well versed in data protection issues. You can always ask your questions about our processing of your personal data at info@hajksweden.se.

Amendments
Hajk Sweden AB reserves the right to update this policy as necessary. The privacy policy was last updated on 2023-08-30