Integritetspolicy

Stureplans Resor respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding your data. We ensure that your personal data is processed securely and in accordance with applicable laws, including the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller responsible for processing your personal data is:

Stureplans Affärsresebyrå AB
affarsresor@stureplans.se
08 - 665 10 00

For any questions regarding your data, please contact us at affarsresor@stureplans.se

‍

3. What Data We Collect

Stureplans Resor collects personal data in the following ways:

• When you book a service through our platforms (name, contact details, travel preferences, payment information).
• When you sign up for newsletters or other marketing communications (email, name, company, phone number).
• If you contact us via email, phone, social media, or website forms.
• When you visit our website and interact with our content (IP address, device type, browser type, location, browsing behavior).
• Through cookies and similar technologies (see Section 7 for details).
  ‍

Some personal data is collected with explicit consent, such as when subscribing to newsletters. Other data is collected under legitimate interest, such as website analytics to improve our services.

‍

4. How We Use Your Data

We process your personal data for the following purposes:

1. To provide and manage travel services – including booking, customer support, and fulfilling agreements.
2. To communicate with you – responding to inquiries, sending confirmations, and providing travel-related information.
3. For marketing purposes – including sending relevant offers, newsletters, and personalized advertisements based on interests.
4. For analytics and service improvements – understanding how users interact with our website to enhance user experience.
5. For security and legal compliance – preventing fraud, ensuring compliance with legal obligations, and protecting our business.

‍

5. Sharing and Transfers of Data

We may share your personal data with third parties under strict security measures, including:

• Travel service providers (e.g., airlines, hotels, transportation companies) to fulfill bookings.
• Marketing and analytics providers for advertising and website optimization.
• CRM and email service providers for customer relationship management and communication.
• Legal and regulatory authorities when required by law.
  ‍

If data is transferred outside the EU/EEA, we ensure compliance with GDPR by using Standard Contractual Clauses (SCCs) or other appropriate safeguards.

‍

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

• Customer and booking information: stored for as long as legally required for accounting and regulatory compliance.
• Marketing and analytics data: deleted or anonymized after 3 years of inactivity.
• Cookies and online identifiers: stored according to our cookie policy (see Section 7).

You can request deletion of your personal data at any time (see Section 8 for details).

‍

7. Cookies and Tracking Technologies

When you visit our website, we use cookies and similar tracking technologies to:

• Enhance website functionality.
• Analyze website traffic and improve user experience.
• Deliver targeted advertisements.

We only place non-essential cookies (e.g., marketing cookies) with your explicit opt-in consent via our cookie banner. You can withdraw consent or change your preferences anytime in our Cookie Settings.

For full details, please see our [Cookie Policy].

‍

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to access – Request a copy of your personal data.
• Right to rectification – Correct inaccurate or incomplete data.
• Right to erasure (‘right to be forgotten’) – Request deletion of personal data no longer needed.
• Right to restriction of processing – Request limited use of your data.
• Right to data portability – Receive your data in a structured format for transfer.
• Right to object – Object to processing for marketing or profiling purposes.
• Right to withdraw consent – If processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at [affarsresor@stureplans.se********]. If you believe your rights are not being respected, you can file a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten, IMY) at https://www.imy.se/

‍

9. Third-Party Links

Our website may contain links to third-party websites. Stureplans Resor is not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal data.

‍

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our data processing practices. The latest version will always be available on our website.

This policy was last updated on 2024-02-13.

‍

For any questions or concerns regarding this policy, please contact us at:

Stureplans Affärsresebyrå AB
affarsresor@stureplans.se
08 - 665 10 00