Privacy policy

Kusthotellet Styrsö, currently operated through the company Hotel Legacy Group AB, reg. no. 559347-4082, hereinafter referred to as “we”, “our” or “Kusthotellet”, is responsible for the processing of personal data in accordance with the principles described on this page. Kusthotellet is the data controller for the processing of personal data that occurs, among other things, when we provide digital marketing services, when visiting the website kusthotelletstyrso.se, our recruitment page, and in our newsletter.

In this privacy policy, we explain when and how personal data is processed, the legal basis for the processing, and how we approach the storage and protection of this data. When personal data is processed so that you can use our websites, purchase our digital marketing services, attend our events, subscribe to our newsletter, or contact us, we need to process personal data about you. Kusthotellet collects and processes personal data about you when you visit one of our websites, attend an event we organize, subscribe to our newsletter, enter into an agreement with us regarding the services we provide, or otherwise contact us. This information is collected to enable us to enter into and fulfill agreements, and to provide services, offers, and information. In some cases, we may also collect and update existing address details via third-party address update services.


What Personal Data is Processed When You Visit Our Website:

Kusthotellet collects information when you visit our website. This is done to understand how the website is used and to improve its content and design. The information collected is primarily non-identifiable information typically sent by browsers when visiting a website. Your IP address may in some cases be considered personally identifiable information, which we process in order to analyze the usage of our services.


Data that may be processed includes:

  • Browser type
  • Operating system
  • IP address
  • Language preference
  • Referring website
  • Time of visit

If you use forms on the website to contact us or subscribe to our newsletter, we also need to process:

  • Name
  • Email address and/or phone number
  • Your activity on our website


For You as a Customer:

Kusthotellet processes information about you as a customer in order to fulfill agreements, enable delivery, and maintain communication.


The data processed may include:

  • Customer number
  • Company name
  • Registration number
  • Address
  • Phone number
  • Email address
  • Offers, agreements, and products you are associated with
  • Issued invoices and payment status


Typically, we have several contact persons within your organization. In such cases, we also process the following personal data about these contacts:

  • Name
  • Position/title
  • Email address
  • Phone number
  • Address
  • Reports the person is a recipient of


Legal Grounds for Processing Your Personal Data

Kusthotellet bases the processing of your personal data on several legal grounds:

Performance of a Contract:
We process your personal data when it is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract. This includes, for example, sending the correct reports to appropriate recipients, invoicing, and communicating with parties involved in a project. We also use your data to follow up on agreements and business matters.er.

Legitimate Interest:
We may process your personal data based on our legitimate interests, provided that your interests or fundamental rights and freedoms are not overridden. This legal basis is used, for example, when we contact you with relevant offers, carry out sales activities, or follow up after a contract has ended.
Legal Obligation:
In certain situations, we are legally required to process your personal data to comply with applicable laws. For instance, we must retain certain data in accordance with the Swedish Accounting Act (1999:1078).

Content: In specific cases, we process your personal data based on your explicit consent. This may occur, for example, when we publish images or videos on our social media platforms in connection with events where you are identifiable, when you subscribe to our newsletter, or when you contact us via the contact form on our website. You may withdraw your consent at any time, and such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

Who May Access Your Personal Data:
Your personal data will be processed by Kusthotellet. In addition, your data may be shared with trusted third parties who process personal data on our behalf. These companies act as data processors.

How We Protect Your Personal Data:
Kusthotellet continuously implements security measures to protect your personal data. We secure databases and internal systems with firewalls, passwords, and, where applicable, two-factor authentication. Only a limited number of users have direct access to the databases, and we monitor internal systems for signs of intrusion attempts or similar threats.

How Long We Store Your Data:
Kusthotellet’s default policy is not to retain your personal data longer than necessary for the purposes for which it was collected. Exceptions apply if the data needs to be retained to comply with legal requirements or to safeguard our legal interests.

Your Rights:
As a data subject, you have, under certain conditions, the right to request the deletion or correction of your data. You also have the right to object to Kusthotellet’s processing and withdraw any consent you have provided. To exercise your rights, please use the contact form on our website under “Contact Us.”

Changes to the Privacy Policy:
Kusthotellet may update this privacy policy at any time and will provide reasonable notice in the event of any changes. If you do not accept the changes, you have the right to terminate your agreement with Kusthotellet before the changes take effect.

Any Questions?
Feel free to contact us at: hello@kusthotelletstyrso.se