Our Privacy Policy

Effective from 2018-05-25

Winterviken Festvåning – Café – Konferens AB – Corporate Identity No. – 556616-1070, Vinterviksvägen 60, 117 65 Stockholm, is the data controller and is responsible for the processing of personal data in accordance with the General Data Protection Regulation (also known as GDPR). This policy applies from May 25, 2018, when the General Data Protection Regulation enters into force.

The regulation strengthens your rights regarding personal privacy. It is important that you feel secure in the processing of your personal data.

Personal Data and Processing of Personal Data

We process personal data for customers, guests, staff, and suppliers. Our purpose for processing personal data is primarily to fulfill our commitments to customers/guests/staff in connection with our assignments. The legal basis for the processing is the performance of a contract.

We also have data processing agreements with partners who handle personal data for which we are responsible. We primarily collect our data from the customer/guest/staff member themselves and, in some cases, also from public entities such as authorities and credit reporting agencies.

The data we collect primarily concerns contact details, billing and payment information, personal identity numbers and corporate identity numbers, as well as other information relevant or necessary for the execution of our assignments for customers, guests, and staff. In cases where we store data for statistical purposes, these will be anonymized via Google Analytics.

Retention Periods

We only intend to store personal data that is relevant to the fulfillment of our commitment and will delete the data when it is no longer needed for the business and in accordance with the General Data Protection Regulation – GDPR.

In cases where we believe it may be beneficial for both customers/guests and us as a supplier to save provided information, we will ask for written approval to do so. If approval is not granted, the data will be deleted.

Security

To keep the personal data we process in safe custody, we have taken several security measures: We have implemented security routines, technical and organizational measures to protect your personal data.

Furthermore, we have appropriate firewalls and antivirus software to protect and prevent unauthorized access to the network. Access to the areas where personal data is stored is restricted, and employees are required to be identified for access.

Your Rights

You have the right to know which of your personal data we handle and for what purposes. This is done by requesting a so-called register extract.

We are obliged to provide information about personal data concerning you free of charge upon request.

You can request that your personal data be corrected, known as the “Right to rectification,” if the data is incorrect.

You have the right to request previously provided personal data in a structured, commonly used, and machine-readable format.

You also have the right to demand that we delete your personal data from all systems.
In the law, this is called the “Right to be forgotten.”

The contact person for questions regarding our policy is Erika Michael at info@winterviken.se