This Privacy Policy provides information about the personal data we collect in order to be able to perform our services. We are acting as a Controller when we collect this data and are obliged by law to furnish you with information about us, about why and how we use your data, and about the rights you have in respect of your data. It is important for us that you feel comfortable about how we process your personal data.

Who are we?
We are Ett Hem Sverige AB. Our address is Sköldungagatan 2, SE-114 27 Stockholm, Sweden. You can contact us by post at the above address, by email at privacy@etthem.se or by telephone on +46 (0)8 200590.
We do not need to have a Data Protection Officer, so all enquiries about our use of your personal data should be addressed to the contact details above.

How we use your information

• When you use our website
• When you book a hotel room, a meal or an event with us
• When you are one of our suppliers
• When you are applying for a job
• When you are employed by us
• When we are marketing ourselves
• What information do we collect about you? What legal power do we have to collect information about you?
• How long do we keep information about you?
• Third parties with whom we share information to be able to perform our services
• Your rights as a data subject
• Your right to complain
• Automated decisions
• Updates of this Privacy Policy
  
  

When you use our website
When you use our website to read about our products and services and see the information we have made available, a number of cookies are used by us and by third parties to allow the website to function, to collect useful information about visitors and to help improve your user experience.
Some of the cookies we use are absolutely vital for our website to function, and we do not ask for your consent to store these on your computer. These cookies are shown below:

Name of cookie	Purpose	Further information
CookieConsent	Stores the user’s cookies consent for the domain in question	Provider: Ett Hem Type: http Expiry: 1 year
Local_storage_support_test	This cookie is used in the context of the local storage function on the web browser. This function enables the website to load more rapidly by pre-installing certain procedures.	Provider: twitter.com Type: html Expiry: continuous

However, we will always request your consent for cookies that are useful but not absolutely necessary before you store them. These are:

Name of cookie	Purpose	Further information
_ga	Registers a unique ID which is used to generate statistical data about how the visitor uses the website.	Provider: Ett Hem Type: http Expiry: 2 years
_gat	Used by Google Analytics to limit the request level.	Provider: Ett Hem Type: http Expiry: 1 day
_gid	Registers a unique ID which is used to generate statistical data about how the visitor uses the website.	Provider: Ett Hem Type: http Expiry: 1 day

In addition to the cookies we use, various third parties also store cookies on your computer, again following your consent. These are shown below.

Name of cookie	Purpose	Further information
Collect	Used to send data to Google Analytics about the visitor’s unit and behaviour. Tracks the visitor over units and marketing channels	Provider: google-analytics.com Type: pixel Expiry: session
r/collect	This cookie is used to send data to Google Analytics about the visitor’s unit and behaviour. It tracks the visitor over units and marketing channels	Provider: doubleclick.net Type: pixel Expiry: session
__widgetsettings	Pending	Provider: twitter.com Type: html Expiry: continuous

When you book a hotel room, a meal or an event with us

How can you book a hotel room?
You can book a hotel room via the booking engine on our website, by phone or email or at the hotel.
Small Luxury Hotels’ booking engine is used when you book a hotel room on the Internet via a travel agent or Small Luxury Hotels and is consequently the Controller at the time of booking for the information you thereby disclose. See Small Luxury Hotels’ Privacy Policy here: https://www.slh.com/about-us/privacy-policy/
The transfer of the information to Ett Hem is regulated by a Processor Agreement. Ett Hem, as Controller, is responsible for all processing following transfer.
Ett Hem is responsible, as Controller, if you book with us directly by phone, email, at the hotel or on our website, and also for all information we collect and process following the booking.
You use a third party booking engine if you book via our website. This is regulated by a Processor Agreement with the third party.
If you book on behalf of another person, you are responsible for being authorised to do so and for permitting us to use the personal data in accordance with this Privacy Policy.

How can you book a meal or an event?
You can book a meal or an event by phone, email or at our hotel.

Why do we collect information about you?
During the booking process, we collect the basic personal data required to process your booking, regardless of whether this involves a hotel room, an event or a meal. Additional information is collected during your visit to ensure your identity and to document various charges, services, etc.
Historical data about visits is stored to enable us to better ensure your needs if you visit the hotel in the future and to ensure a high level of service.

How we use the information about you?
The information we collect when you have booked a hotel room at our hotel is used to respond to your questions, provide you with all information requested about our products and services and also to fully perform our services. We may also email you several times following your enquiry to follow up your interests and ensure that we have answered your question to your satisfaction.

When you are one of our suppliers

How do we collect information about you as a supplier?
Via contacts or references in the industry, Internet searches, emails, telephone calls, business cards or visits on site.

Why do we collect information about you as a supplier?
To be able to run the hotel operation and perform our commitments for our guests and employees.

How do we use the information about you?
To be able to contact you, pay for your services, evaluate quality when necessary, and also to ensure compliance with statutory requirements.

What information do we collect about you? What legal power do we have to collect information about you?

Processing	Category	Legal power
Bookings and visits	name and title, number of children and age, accompanying guests’ names, email address, home address, telephone number, company details (company address, corporate/organisation ID number, telephone number, name of contact person, the company’s email address), membership information, freetext in booking system (personal preferences such as: health information, pets, allergies, requests, etc.), personal identity (ID) number, consent details, ID document number, pictures from telephone camera on front door, date of departure, date of arrival, flight information, gender, nationality, profession, purpose of visit, daily visit agenda, restaurant notes, invoice documentation, quotations, credit card number, home country, credit card information, personal assessments, business card	To protect the interests of the individual, consent, legitimate interest, contract
Suppliers	name, email address, telephone number, contact details, Work Permit Information in paper form, personal identity (ID) number, pictures from telephone camera on front door, personal assessments, business card	Consent, contract
Job applications	name, personal identity (ID) number, address, email address, telephone number, pictures, nationality, gender, names of referees, profession, CV information	Consent
Instagram	name, profession, pictures of employees and guests, name of suppliers, business card	Consent
Website	Pictures of staff, cookies	Legitimate interest, consent
Mailings	name, address, profession, email address	Legitimate interest

How long do we keep the information about you?

Bookings and visits:
We keep personal data collected for up to three years following the last activity with us in order to be able to recognise you on repeated visits and ensure a consistent delivery of services according to your requests.
We must save certain information for up to ten years in accordance with Swedish law.
With your consent, we may retain your information for a longer period for marketing.

Suppliers:
We retain the information for as long as you are one of our suppliers. When this relationship comes to an end, we retain it for up to three years for possible complaints, guarantee matters or similar commitments that remain after this has ended.

Job applications:
We retain the information for up to two months for applications. In the case of employment, the information is saved in accordance with the Contract of Employment.

Instagram:
We keep the information for five years. You can ask us to remove information at any time by sending an email to privacy@etthem.se

Website:
As regards staff pictures, this is regulated in the Contract of Employment.

Third parties with whom we share information to be able to perform our services:

The processing of personal data by third parties is regulated through processor agreements.

IT-related services
Gibon Stockholm AB (Hosting provider, Internet provider)BankerWessel AB (Website services)
Crazyswedes (Website services)
Dropbox (Cloud based storage provider)
Microsoft (Cloud based e-mail services provider)

Booking-related services
Hotsoft (Cloud based hotel system)
Waiteraid (Cloud based restaurant booking system)
Trivec (Invoice system)
Small luxury hotels (Cloud based booking engine)

Finance-related services
Caspeco (Cloud based human resources services provider)
Fridebo bokföring (Accounting firm)
Hogia (Accounting software)

Telephone and access control system-related services
Telekompaniet (Phone system provider)
Telia (IP based phone system)
El och ljusdesign (Access control systems)

Your rights as the data subject

By law you can ask us what information we have concerning you, and you can ask us to rectify details that are incorrect. If we have requested your consent to process your personal data, you can revoke this consent at any time.

If we process your personal data as a result of consent or to perform a contract, you can ask us to provide you with a copy of the information in a machine-readable format so that you can transfer this to another provider.

If we process your personal data as a result of consent or a legitimate interest, you can ask for your data to be erased.

You are entitled to ask us to stop using your information for a period of time if you believe that we are not doing this lawfully.

Finally, in certain cases you can ask us not to reach a decision that affects you by means of automated processing or profiling.

Please use the contact information provided above in the Who are we? section of this Policy to submit a request regarding your personal data by email or telephone.

Your right to complain

If you have a complaint about our use of your information, we would prefer you to contact us directly in the first instance so that we can deal with your complaint. You can also contact the Swedish Data Protection Authority directly at datainspektionen@datainspektionen.se or on telephone +46 (0)8-657 61 00.

Automated decisions

We do not use the information you provide to us to make any automated decisions that may affect you.

Updates of this Privacy Policy

We regularly review and, when necessary, update this Privacy Policy from time to time as our services and use of personal data evolves. If we want to use your personal data in a way that we have not previously identified, we will contact you to provide information about this and, if necessary, ask for your consent.

We will update the version number and date of this document each time it is changed