Data protection

Privacy policy & GDPR

---

Last updated: May 2026

At Hotel Nämforsen we respect your privacy. This policy describes how we collect, use and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679) and applicable Swedish data protection legislation.

1. Data controller

2. What we collect

We only process the personal data we need in order to provide our services:

• Name, address, email and phone number when you book or send us an enquiry.
• Booking information (dates, number of guests, special requests).
• Payment details (handled by our payment provider — we do not store card data).
• Correspondence when you contact us by email or phone.
• Technical information when visiting the site (see the cookies section below).

3. Purpose and legal basis

• Performance of contract — to manage bookings, your stay and invoicing.
• Legal obligation — accounting (Swedish Accounting Act) and tax requirements.
• Legitimate interest — security, customer care and improving our services.
• Consent — newsletters and optional marketing (can be withdrawn at any time).

4. Retention period

Booking data is kept for as long as the contractual relationship exists and thereafter for up to 7 years according to the Swedish Accounting Act (1999:1078). Marketing consents are stored until you withdraw them. Other data is deleted once the purpose has been fulfilled.

5. Recipients of the data

We only share data with trusted parties that need it to deliver our services, e.g. booking systems, payment provider, IT providers and, where required, public authorities. All providers are bound by data processing agreements. We do not transfer personal data outside the EU/EEA without a valid legal basis.

6. Your rights under GDPR

• Request access to the data we hold about you.
• Request rectification of inaccurate data.
• Request erasure ("right to be forgotten") where the law allows.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability — receive your data in a structured format.
• Withdraw your consent at any time.

To exercise your rights, contact info@namforsen.se. We respond within one month.

7. Cookies

This website currently uses only strictly necessary cookies required for the site to function. We do not use tracking or marketing cookies without your consent. You can clear cookies at any time via your browser settings.

8. Complaints

If you believe we are processing your personal data incorrectly, you have the right to lodge a complaint with the supervisory authority The Swedish Authority for Privacy Protection (IMY).

9. Changes to this policy

We may update this policy. The most recent version is always available on this page with the date of the latest update.

← Back to home