StartVind huisjesMijn favorietenMijn berichtenMijn boekingenAdverteren

Privacy Policy

Scope

This Privacy Policy describes how we collect, use, store, disclose, and protect your personal data. It applies to Stugknuten’s website and to all related websites, applications, services and tools where this Privacy Policy is referenced, regardless of how you access or use them. In this Privacy Policy, we use the term “personal data” to refer to information that directly or indirectly can identify a natural person. In this Privacy Policy we describe how we, in accordance with the GDPR, collect, use, disclose, and store your personal data. This is outlined in this Privacy Policy and in our terms and conditions.

Data Controller

Stugknuten uthyrning AB, 556681-8238 (hereinafter referred to as "Stugknuten"), is the data controller. Stugknuten is responsible for the processing of your personal data and for providing the services to be delivered under the terms and conditions and within the framework of and in accordance with the principles outlined in this Privacy Policy.

Collection of Personal Data

When you register an account or send a message to a landlord via our site, we store your personal data in accordance with the agreement we may have with you. Before an agreement is in place, we store your personal data based on the legal ground of legitimate interest for such storage. Your personal data may be stored outside the EU/EEA area.

We collect and store information that you provide on our websites or that you submit to us in connection with the use of our websites, applications, services, or tools.
This includes:

information you provide to us when registering an account or through the contact form on the site, including email address, phone number, mobile phone number, personal identification number, date of birth, address, nationality, and (depending on the service used) financial information such as bank account numbers;
information provided in connection with discussions with other users, dispute resolution, correspondence through our websites, or correspondence sent to us; and
additional documents we may request from you to verify your identity or if we suspect you are violating our rules. For example, we may ask you to send us proof of identity or other documentation to confirm your identity or address, or answer other questions to verify your identity.

Automated processing

Stugknuten may analyse content on the platform that contains personal data, including messages between users, using automated systems such as artificial intelligence. The purpose of this processing is to improve the functionality and user experience of the service, identify patterns and trends, prevent misuse, fraud, or behaviours that violate our terms of use, and enable relevant and tailored marketing of our services. The Legal basis for this processing is both Legitimate interest and the Consent you provide by accepting our terms of use. The automated analysis is not used to make decisions that have legal or otherwise significant consequences for you as a user, nor does it involve automated profiling. Stugknuten conducts impact assessments before processing sensitive personal data or other high-risk data. Data used to improve the service or identify trends is processed exclusively in aggregated and anonymized form, with appropriate technical and organizational safeguards to ensure your privacy.

Use of Personal Data

Our purpose in collecting personal data is to provide you access to our websites and/or enable your use of our services, applications, and tools, provide customer service and supply you with relevant information about your account and our services, as well as to offer a secure, seamless, efficient, and tailored experience. Through this Privacy Policy, we want to outline our purpose in storing your personal data. Our purposes include:

target marketing to you by sending promotional material about Stugknuten’s products and online services, Legal basis is Consent, and you may withdraw this consent at any time through the opt-out link in the email or by contacting us;
provide you with access to our websites and the services and customer support you request, Legal basis is Contract and Legitimate Interest;
prevent, detect, and investigate fraud, security incidents, potentially prohibited or illegal activities, and to enforce our terms, Legal basis is Legitimate Interest;
customise, measure, and improve our services, content, and advertisements via cookies;
contact you via email or phone to resolve customer service issues, disputes, collect fees, resolve problems with your account or our websites, services, applications, or tools, Legal basis is Contract and Legitimate Interest;
contact you via email or phone to inform you of changes, Legal basis is Contract and Legitimate Interest;

Disclosure of Personal Data

We disclose personal data to fulfil legal obligations, enforce our policies, respond to claims that an advertisement or other content infringes on the rights of others, and protect the rights, property, or safety of third parties. Such information will only be disclosed in accordance with applicable laws and regulations.

We may share your personal data with

Supervisory authorities, police authorities, or other authorised third parties, to respond to inquiries in connection with a criminal investigation or alleged illegal activity or other activity that may expose us, you, or any other user to liability. In such cases, and to the extent permitted by applicable law, we will disclose only information that is relevant and necessary for the investigation, such as name, personal identity number, city, state or province, postal address, telephone number, email address, username history, IP address, and reports of fraud. We will also disclose any information requested by a Tax Authority concerning rentals conducted via Stugknuten’s booking service.

Access, Review and Modification of your Personal Data

You can view, review and modify most of your personal data by logging into Stugknuten. You can update your personal data under "My Profile." You must immediately update your personal data if it changes or is incorrect. If you post something on the website, you may, in some cases, not be able to modify or delete it. However, we will comply with the rights you may have under the law regarding the ability to request correction or deletion of your personal data.

Transfer of Personal Data

We store and process your personal data on our servers outside the EU/EEA area. We use physical, technical, and organisational security measures, proportionate to the volume and sensitivity of personal data, to prevent unauthorized processing, including but not limited to unauthorized access, acquisition, use, loss, deletion, or damage to the user’s personal data. For the transfer of personal data to countries outside the EU/EEA, we implement the required technical and organisational safeguards, such as encryption, firewalls, access control, and risk assessments in accordance with applicable data protection legislation.

Account Termination and Retention of Personal Data

Upon your request and in accordance with the provisions of this section, we will terminate your account and delete your personal data as soon as possible so that it is not visible to other users. Data deletion will be based on your account status and in accordance with applicable law. We may also close or deactivate accounts that are unused or accounts that are used in violation of our terms and conditions. Typically, personal data associated with closed or inactive accounts will be deleted or anonymized as soon as possible after the account has been closed or deactivated. We may retain personal data associated with closed or inactive accounts if:

we have a Legitimate Interest and it is not prohibited by law, such as collecting outstanding fees, handling dispute resolution, or enforcing our terms; or
we are legally obligated to retain the data to comply with legal obligations such as local compliance, fraud and anti-money laundering regulations, or to take other actions permitted by law.

Under such circumstances, personal data will be handled securely and only for as long as necessary.

Results of automated analysis containing personal data are stored only as long as necessary for the purpose of the processing. The information is anonymized or deleted as soon as there is no longer a need.

The results of automated analysis containing personal data are stored only for as long as necessary for the purpose of the processing. The information is anonymized or deleted as soon as it is no longer needed.

Your Rights

Subject to the limitations imposed by data protection legislation within the EEA, you have certain rights regarding your personal data. You have the right to access, rectification, restriction, objection, deletion, and data portability. You also have the right to receive information about whether your personal data has been processed using automated methods, including AI. You have the right to object to such automated processing and request manual review if you believe the processing has significantly affected you. We kindly ask you to contact us if you wish to exercise any of these rights. Please note that information that is part of a business transaction, such as a rental agreement, will not be deleted. Messages you have sent to other users on the site are considered to be owned by both you and the counterparty and will not be deleted unless both users delete their accounts.

If you wish to request access to all personal data we have about you, please note that photo identification will be required to prove your identity. You also have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe we are processing your personal data incorrectly. You can read more about this on the Swedish Authority for Privacy Protection website www.imy.se (formerly the Data Protection Authority)..