Ahlgrens Hotell
How Ahlgrens Hotell processes personal data for contact enquiries, bookings, payments and website operation.
Ahlgrens Hotell AB, corporate registration number 559209-1598, is the controller for the processing of personal data handled in connection with the hotel business.
We process personal data to run the hotel business, handle bookings and respond to your enquiries.
When you contact us via our contact form system, we process your name, telephone number, email address and the content of your message. The information you submit is sent to the hotel's email so that your enquiry can be answered, and a contact record is also stored in our contact form system. The purpose is to handle and respond to your enquiry and provide you with service.
Legal basis: Legitimate interest in answering enquiries and providing service to our guests.
If you provide information ahead of a booking, we process the information needed to receive and prepare your reservation.
Legal basis: Steps at the data subject's request before a contract is concluded.
When you book a room and stay at the hotel, we process the information needed to fulfil the booking and your stay, such as contact details and booking information.
Legal basis: Performance of a contract.
We process relevant payment and transaction information needed to carry out the payment for your booking and stay.
Legal basis: Performance of a contract.
We process information necessary for accounting and statutory reporting in connection with the hotel business.
Legal basis: Legal obligation for necessary accounting and statutory reporting.
We process certain information necessary for the website to function technically and to maintain the security of our systems.
Legal basis: Legitimate interest, with a clearly described purpose of technical operation and security.
The platform that hosts and publishes our website automatically collects visitor statistics. This includes session and event identifiers, timestamps, the page address, page title, referring address, browser information and the measured time the page has been visible. The statistics are used to measure visits and use of the website.
This statistics collection is handled by the platform and cannot be blocked from the website. See our Cookie Policy for details.
To provide our services, we share data with certain providers:
Booking engine: Sirvoy is used as an embedded booking engine on the website. When you make a booking via Sirvoy, your data is processed by Sirvoy as the provider of the booking service.
External booking channel: Booking.com is an external booking channel that we link to. Bookings made via Booking.com are handled by Booking.com under their own terms.
Payment method: Swish is shown as a payment method on the website.
Map: Google Maps can be shown as an optional embedded map on the contact page. The map is only loaded after you actively choose to load it.
Contact form system provider: The provider of our contact form system processes the information submitted through the contact form.
Technical administration, hosting and email: Providers of hosting, technical administration and email services may receive data in connection with operation and technical handling.
Website platform: The platform that hosts and publishes our website collects visitor statistics, including session and event identifiers, timestamps, the page address, page title, referring address, browser information and the measured time the page has been visible.
The contact record created via our contact form is automatically deleted from our contact form system 180 days after the form was submitted. The deletion does not cover messages that have already been sent to the hotel's email. Data in email correspondence, bookings and accounting records is handled separately. You can contact us at info@ahlgrenshotell.se to request the deletion of your personal data. We assess your request under GDPR; certain data may need to be retained due to legal obligations.
Under GDPR, you have the following rights. The rights apply subject to their respective conditions; some rights apply only in certain situations and may be limited by legal obligations.
Access — to receive information about what data we process about you and a copy of your personal data.
Rectification — to ask us to correct inaccurate data.
Erasure — to request that your data be deleted.
Restriction — to request that the processing of your data be restricted.
Objection — to object to certain processing of your data.
Data portability — in certain cases, to receive your data in a structured format.
Withdrawal of consent — where processing is based on your consent, you may withdraw it at any time.
Some of our providers may process personal data outside the EU/EEA. When this occurs, a legal basis for the transfer is required, such as an adequacy decision or appropriate safeguards agreed with the provider.
If you believe we process your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY): https://www.imy.se/
Read also our Cookie Policy.