Privacy Policy

Gotland Hotels & Properties AB / Visby Gustavsvik
Last updated: 2026-02-24

1. Introduction

At Gotland Hotels & Properties AB, we value your personal privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

Gotland Hotels & Properties AB
Organization number 556141-1009
Adres: Färjeleden 3
Email: info@visbygustavsvik.se
Phone: +46 498 20 12 60

3. Personal Data We Collect

We may collect the following information:

• Name
• Personal identity number (when required, e.g. for invoicing)
• Address
• Telephone number
• Email address
• Payment information
• Booking details (stay dates, room selection, special requests)
• IP address and technical information collected via our website

4. How We Collect Data

We collect personal data when you:

• Book a room via our website, telephone, or email
• Check in at the hotel
• Subscribe to our newsletter
• Contact our customer service
• Use our website (cookies)

5. Purpose and Legal Basis

We process your personal data in order to:

• Administer bookings and payments (performance of a contract)
• Comply with legal obligations (e.g. accounting legislation)
• Manage customer service matters (legitimate interest)
• Send marketing communications (consent)

6. Storage of Personal Data

We retain your personal data for as long as necessary for the purpose for which it was collected or as required by law (e.g. 7 years under Swedish accounting legislation for financial data).

7. Sharing of Personal Data

We may share personal data with:

• Payment service providers
• IT and booking system providers
• Authorities when required by law
• We never sell your personal data to third parties.

8. Cookies

Our website uses cookies to improve the user experience. You can adjust your cookie settings in your web browser.

9. Your Rights

You have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure (“the right to be forgotten”)
• Request restriction of processing
• Object to processing
• Receive your data in a structured format (data portability)
• To exercise your rights, please contact us by email.

10. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or alteration.

11. Complaints

If you believe that we are processing your personal data incorrectly, you have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection.

12. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.