PRIVACY POLICY
1. General Information
We take the protection of your personal data seriously. This website processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.
This policy explains what data is collected, how it is used, and what rights you have.
2. Data Controller
The responsible party for data processing on this website is:
Mattias Andrén / AUMNITY
Åsmark Norrgård 10
56392 GRÄNNA
SWEDEN
mattias@aumnity.org
3. Data We Collect
We may collect and process the following types of personal data:
a) When you contact us
If you contact us via email, contact form, or booking request, we may collect:
• Name
• Email address
• Phone number (if provided)
• Message content
This data is used solely to respond to your inquiry.
b) When you join the interest list / newsletter
If you sign up for updates, we may collect:
• Name (optional)
• Email address
This data is used to send updates about offerings, events, and relevant information.
You can unsubscribe at any time.
c) Website usage data
When you visit this website, certain technical data may be collected automatically:
• IP address
• Browser type
• Device type
• Pages visited
• Date and time of access
This data helps ensure the website functions properly and improves user experience.
4. Purpose of Data Processing
Your data is processed for the following purposes:
• responding to inquiries
• managing bookings or requests
• sending updates (if you opted in)
• improving the website and user experience
We only process your data when there is a legal basis to do so (Art. 6 GDPR).
5. Legal Basis
We process personal data based on:
• Consent (Art. 6(1)(a) GDPR) – e.g. newsletter signup
• Contractual necessity (Art. 6(1)(b)) – e.g. booking inquiries
• Legitimate interest (Art. 6(1)(f)) – e.g. website functionality
6. Data Sharing
Your personal data will not be sold or shared with third parties, except:
• when required by law
• when necessary for service providers (e.g. email or hosting providers)
Any third-party providers are GDPR-compliant.
7. Data Storage
Your data is stored only as long as necessary:
• inquiries: until processed and resolved
• emails/newsletter: until you unsubscribe
• legal obligations may require longer storage
8. Your Rights (GDPR)
You have the right to:
• access your data (Art. 15 GDPR)
• correct inaccurate data (Art. 16 GDPR)
• request deletion (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent at any time (Art. 7(3) GDPR)
• lodge a complaint with a supervisory authority
9. Cookies
This website may use cookies to improve functionality and user experience.
You can control or disable cookies through your browser settings.
10. Data Security
We take appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access.
11. Changes to This Policy
This privacy policy may be updated to reflect legal or technical changes.
The current version is always available on this website.