Last updated 20 October 2026
Who is responsible
Sjöbastun Drevviken AB is the controller of the personal data we handle about you. If you have questions about how we handle your data, contact us at info@sjobastun.se.
When you book
Bookings and payments are made through boka.se. We receive your name, email address, phone number and details of the booking, such as date, time and number of guests. Card details are handled by boka.se and their payment provider, and we never see them.
We use this information to carry out your booking: to send the booking confirmation, practical information and a reminder before your visit, to reach you if anything changes, and to send a thank-you email afterwards. The legal basis is performing our contract with you. The thank-you email, in which we ask for a review, is based on our legitimate interest, and you can ask us not to send it at any time.
We keep booking details for as long as the booking and its follow-up require, and accounting records for as long as Swedish accounting law requires.
When you contact us
If you write to us by email, text message or WhatsApp, we keep the message and your contact details so we can reply and keep track of the conversation. The legal basis is our legitimate interest in answering questions and enquiries.
When you visit the website
sjobastun.se uses no cookies and stores nothing in your browser. We count visits and clicks on the booking button per source, such as Google or Instagram, to understand how people find us. These statistics contain no names, IP addresses or other information that identifies you.
The website is hosted by Vercel, which may temporarily log technical data such as IP addresses for operations and security.
Service providers
We only share data with providers that help us run the business, and only as much as they need: boka.se (bookings and payments), Google (email and our internal booking overview), Resend (sending booking emails) and Vercel (website hosting). We never sell your data or use it for advertising.
Some of these providers may process data outside the EU/EEA. When they do, it is covered by the European Commission's standard contractual clauses or an adequacy decision.
Google data in our internal overview
We have an internal booking overview that only we can access. Using Google APIs, it reads booking notifications and enquiries in our own inbox, and search statistics for sjobastun.se from Google Search Console. This data is used only to show booking and enquiry statistics for our own business. It is not shared with anyone, not used for advertising and not used to train AI models.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your rights
You have the right to know what data we hold about you, to have incorrect data corrected and to have your data deleted when we no longer need it. You can also object to processing based on our legitimate interest. Contact us at info@sjobastun.se.
If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (imy.se).