Privacy Policy
Your privacy is important to us. This policy describes how Starby Spa, Hotell & Konferens (org. no. 556493-7463, Ödeshögsvägen 2, 592 40 Vadstena, "Starby", "we") collects, uses, and protects your personal information.
Data Controller
Starby Hotell AB (org. no. 556493-7463), Ödeshögsvägen 2, 592 40 Vadstena, is the data controller for the processing described below. Please contact us at starby@starbyhotell.se or 0143-751 00 if you have any questions.
How We Process Your Data, Categorized by Situation
Reservations and Stay
Name, contact information, payment information, reservation details, and any requests (e.g., special dietary needs, accessibility) are processed to manage your reservation and provide you with excellent service during your stay. Legal basis: performance of a contract. Guest information is retained for up to 2 years after the last visit (unchanged from the current policy).
When paying by card, the card transaction is processed by our payment provider, NETS. Payment information associated with the reservation is stored for up to 6 months, after which it is deleted (unchanged from the current policy).
Website Visits
We use Google Analytics 4 (GA4) to track website usage statistics, as well as Google Ads and Meta (Facebook/Instagram) for marketing, if you have consented to it. See our cookie policy. Legal basis: consent for non-essential cookies.
Newsletters and Offers
If you subscribe, we will process your email address for the purpose of sending out newsletters. Legal basis: consent. You can unsubscribe at any time via the link in each newsletter. Subscription information is deleted upon unsubscription (unchanged from the current policy).
Gift Cards and Online Purchases
Name, contact information, and payment details are processed to handle the purchase and any complaints.
Customer Service and Complaints
Information you provide when you contact us is processed so that we can assist you and follow up on your inquiry.
Job Applications
Information you provide in a job application is processed to carry out the recruitment process. Information regarding candidates who are not hired is deleted once the process is complete (unchanged from the current policy).
Video Surveillance
För att skapa en trygg och säker miljö för våra gäster och medarbetare använder Starby kameraövervakning i hotellets gemensamma utrymmen. Syftet är att förebygga, upptäcka och utreda brott samt att hantera eventuella säkerhetsincidenter. Behandlingen sker med stöd av vårt berättigade intresse av att upprätthålla säkerheten på anläggningen. Inspelat material är endast tillgängligt för behöriga personer och sparas i högst 30 dagar innan det raderas automatiskt. Vid en inträffad incident kan relevant material sparas längre så länge det behövs för att utreda händelsen eller överlämnas till exempelvis Polismyndigheten.
Who We Share Information With
In order to manage reservations, payments, communications, and our services, we process personal data in our own systems and, in certain cases, share data with carefully selected vendors and partners.
For example, these could include:
- VisBook and BookVisit for booking and managing stays
- Nets for Payments
- Lynes for Telephony and Communications
- Loyco for customer databases and newsletter mailings
- Our proprietary CRM system for managing customer relationships and guest information
- Nonius for TV services and related technology at the hotel
- EY for Accounting and Financial Management
- Third parties, such as Booking.com and Expedia, when a reservation is made or managed through their booking channels
When a vendor processes personal data on our behalf, the vendor is our data processor and may only handle the data in accordance with our instructions and the applicable data processing agreement. Certain external booking channels and payment providers may act as independent data controllers for parts of the processing. In such cases, their privacy policies also apply.
We may also disclose personal information to government authorities if we are required to do so by law. We never sell your personal information to third parties. In the event of a sale or restructuring of the business, personal information may be transferred to a new owner in accordance with applicable law.
Your Rights
You have the right to request a copy of your personal data, to have it corrected or deleted, to restrict its processing, and to object to certain types of processing. If you have given your consent, you may withdraw it at any time. You have the right to file a complaint with the Swedish Data Protection Authority (IMY), imy.se.
Changes to the Policy
We may update this policy. Any significant changes will be clearly communicated on the website.