Privacy policy

Your privacy is important to us at Åre Destination AB. We are committed to storing and processing the personal information you provide in a secure and responsible manner, in accordance with the General Data Protection Regulation (GDPR).

This Privacy Policy explains how Åre Destination collects, stores, and processes your personal data. It applies if you have an agreement with us or interact with us by email, phone, meetings, or other forms of communication. It also applies when you use any of our applications or engage with us through our social media channels.

Please read this information carefully. If you have any questions, you are welcome to contact us using the details below.

Who is responsible for your personal data?

Åre Destination AB (Company Registration No. 556171-5961) is the data controller under the General Data Protection Regulation (GDPR). Throughout this policy, you or your company are referred to as the user or customer.

Åre Destination is responsible for the personal data you provide when interacting with us, whether through our website, by phone, email, chat, or during meetings, trade shows, or other events. We are responsible for ensuring that the personal data we process is accurate and up to date.

Åre Destination maintains a record of all processing activities for which we act as the data controller. As a user or customer, you have the right to request a copy of your personal data once per year.

You can contact Åre Destination at:

Mail: Åre Destination AB, Årevägen 55, Produkthuset, 837 52 Åre

Email: [email protected]

What is personal data?

Personal data is any information that can identify you as a living individual, either on its own or in combination with other information. This may include your name, personal identity number, email address, or telephone number.

We only process personal data that is necessary and justified for the specific purpose of the processing. We therefore strive to minimize the amount of personal data we collect and use.

What data does Åre Destination collect and how is it processed?

The primary purpose of processing your personal data is to enable Åre Destination to fulfill its commitments to you as a user or customer. We also collect personal data from individuals who are not yet customers but have requested to be contacted by us.

Åre Destination acts as the data controller for the internal systems we operate and is responsible for ensuring that personal data is processed in accordance with the GDPR.
We do not process sensitive personal data unless we have your explicit consent to do so. Your personal data is retained only for as long as necessary to fulfill the purpose for which it was collected or for as long as required by applicable law.

Security

Åre Destination protects your personal data through a combination of technical and organizational security measures. Access controls are in place across all systems that process personal data to ensure that unauthorized individuals cannot access your information. Employees of Åre Destination, as well as our data processors and sub-processors, are required to comply with our internal information security policy.

Personal data sent to Åre Destination without being requested will not be stored for longer than one month. The only exceptions are unsolicited job applications and matters relating to agreements or contracts.

Åre Destination as a data processor

In some cases, Åre Destination acts as a data processor on behalf of our customers. When this applies, a Data Processing Agreement (DPA) between you and Åre Destination may be required. We can provide a standard agreement upon request, or you may choose to use your own. Åre Destination will process personal data in accordance with the applicable Data Processing Agreement.

Sub-processors

Åre Destination uses sub-processors to provide many of our services. We ensure that Data Processing Agreements are in place with all relevant sub-processors and require them to comply not only with the GDPR but also with Åre Destination's standards for privacy, availability, and information security in accordance with our internal information security policy.

About cookies

Åre Destination uses cookies to improve your experience on www.aresweden.com and to provide access to certain website features. Our cookies do not store personal information such as your name or other personally identifiable data. A cookie is a small text file stored on your computer or device by the website you visit. Cookies make it possible to:

• Understand how visitors use and interact with the website
• Enable various services and website features

Åre Destination uses cookies primarily for two purposes:

• Website analysis
• Improving the user experience

We use Google Analytics and Hotjar to better understand how visitors use our website. Our cookies do not store personal information.

How is personal data used for direct marketing?

Åre Destination uses direct marketing to provide relevant news, inspiration, and updates about Åre as a destination.

Transfer of information

Åre Destination and its sub-processors store information within the European Union. Accounting data is stored in Sweden or in another country approved by the Swedish Tax Agency. We never sell customer information to third parties.

Changes to this Privacy Policy

Any updates or changes to this Privacy Policy will be published on this page.

Your rights

As a data subject, you have the following rights under the GDPR:

• You have the right to know what personal data we process, why we process it, the legal basis for the processing, and how long your data is retained.
• You have the right to request a copy of the personal data we hold about you once per year.
• You have the right to request that inaccurate or incomplete personal data be corrected.
• You have the right to request that your personal data be erased under the following circumstances:
• If the data is processed based on your consent and you withdraw that consent.
• If the processing is based on a legitimate interest and there are no overriding legitimate grounds for continuing the processing.
• If your personal data has been processed unlawfully.
• If you object to processing for direct marketing purposes.

Please note that the right to erasure does not apply where we are legally required to retain your information, for example under Swedish accounting legislation.

• You have the right to data portability, meaning you may request that your personal data be transferred to you or another organization, provided the processing is based on your consent or a contract. This applies only to personal data relating to you that you have provided yourself or that has been generated through your activities.
• You have the right to request that the processing of your personal data be restricted. However, this may not be possible if the processing is necessary for us to provide a product or service.
• You have the right to object to the processing of your personal data. If you do, Åre Destination will suspend the processing while your objection is being reviewed.
• You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe we have processed your personal data unlawfully.

If you wish to exercise any of your rights, please contact us at [email protected]