Social media and other contact before a booking, purchase or Stay/Visit
This policy describes how we at ESS Hotel Group AB and the destination you are in contact with (“ESS”, “we”, “our” and ”us”) process your personal data during our contact on social media or when you contact us before a booking, purchase or stay. We will process your personal data to:
Here you can find all our privacy policies which describe how we process personal data in other situations, e.g. if you visit our website, make a purchase, booking or otherwise are in contact with us.
Which company is responsible for the processing of your personal data?
The company who run the destination you communicate with is responsible for the processing of your personal data together with ESS Hotel Group AB (Swedish registration number 556710-8047). You can find information about our destinations here.
If you only contact ESS Hotel Group AB and no specific destination, only ESS Hotel Group AB is responsible for the processing of your personal data.
If you wish to know more about how personal data is shared within our corporate group, you can find more information here.
Please contact us via our e-mail address privacy@essgroup.se, or give us a call on +46 775-553 553 if you have any questions regarding our processing of your personal data or if you wish to exercise any of your rights. Our postal address is ESS Hotel Group AB, Drakegatan 10, 412 50 Gothenburg, Sweden.
Detailed description of how we process your personal data
We will process your personal data which you yourself provide to us and information from your social media account (if you use such account to communicate).
When contacting us through a social media platform, we suggest you also familiarise yourself with the privacy information of that platform.
To communicate before you make a booking/purchase or stay/visit
What processing we perform
What personal data we process
Our lawful basis for the processing
- Communicate, e.g. via e-mail, phone or chat
- Communicate via social media, e.g. if you make a comment on our site or our wall
- Answer your questions and give you the best service
- Information you provide to us (e.g. name and contact information)
If you visit our social media sites (e.g. our Instagram) we also process:
- Information from your profile on the social media in question (user name and any picture you have chosen for your account)
- Other information regarding the matter for which you contact us
Legitimate interest
The personal data will be processed based on our legitimate interest to communicate with you who have contacted us.
By carrying out a balancing of interests assessment concerning our processing of your personal data, we have concluded that our legitimate interest for the processing outweighs your interests or rights which require the protection of your personal data.
If you want more information in relation to our balancing of interests assessments, please do not hesitate to contact us.
Storage period: We will delete your personal data regularly.
- Communication with us via our websites, phone, chat or in e-mails will be stored for a period of one year after the matter have been resolved, in order for us to give you the best service.
- Your comments and communication with us on social media can be deleted by you at any time. We will remove posts or comments which are in breach of the rules of the platform or in conflict with legislation as soon as possible.
To share your posts on social media
What processing we perform
What personal data we process
Our lawful basis for the processing
- Share posts you have uploaded on social media, if you want us to do so
- Information from your profile (user name and the picture you have chosen for your account)
- Other information in the post you have shared
Consent
The personal data will be processed based on your consent. You can withdraw such consent at any time.
Storage period: Your posts will be shared on our social media until we delete the post or you yourself ask us to remove it.
Who can gain access to your personal data and why?
Your personal data is initially collected and processed by us as controllers and we do not sell your personal data. This means that your personal data will be handled by our employees, but only personnel who need such access to conduct their work.
We also use processors that carry out processing on our behalf to conduct our business, such as suppliers and partners which therefore will process your personal data. We are responsible for any sharing of your personal data to such suppliers or partners and to make sure your personal data is safe when shared with third parties as set out below. We only use processors providing sufficient guarantees that the processing will meet all legal requirements and ensure the protection of the rights of the data subject.
- If you interact with us or visit our social media accounts, the social media platform will process personal data about you as a user.
- We will share your personal data with our IT suppliers who will process these on our behalf and on our instructions to ensure good and secure IT operations. We only share your personal data with our IT suppliers if it is necessary for them to fulfil their obligations towards us according to the contract that we have with them.
Where are your personal data processed?
As a main rule we only process your personal data in the EU/EEA and choose suppliers based within the EU/EEA. The use of our suppliers will however in some instances mean that your personal data is transferred outside of the EU/EEA.
If you communicate with us via social media as Snapchat, Facebook, Pinterest and LinkedIn your personal data will be transferred outside of the EU/EEA since these parties use your personal data in the United States.
We only transfer your personal data outside of the EU/EEA if we can make the transfer according to the data protection rules. This means that the transfer either is governed by an adequacy decision or that we rely on Standard Contractual Clauses and supplementary measures to provide a safe transfer of your personal data.
If you want to know more about who we share your personal data with, please feel free to contact us. Our contact information can be found at the beginning of this privacy policy.
What are your rights when we process your personal data?
You have certain rights that you can exercise to affect how we process your personal data. You can read about what those rights are below. Contact us if you want to exercise any of your rights.
- Right to lodge a complaint with a supervisory authority
You always have the right to lodge a complaint with a supervisory authority. You may do this in the EU/EEA member state where you live, work or where an infringement of applicable data protection laws is alleged to have occurred.
- Right to withdraw your consent and object to processing
You have a right to withdraw any consent you have given us, partly or completely.You also have a right to object to our processing of your personal data when the processing is based on the lawful basis “legitimate interest”.
- Right to information and access
You have the right to obtain confirmation as to whether we are processing personal data about you or not. If we do process your personal data, you also have a right to obtain a copy of the personal data processed by us as well as information about how we process your personal data.
- Right to rectification
You have a right to correct any inaccurate personal data concerning you that we may be processing and to ask us to have incomplete personal data completed.
- Right to erasure (“the right to be forgotten”) and restriction of processing
You have a right to request that we delete your personal data. We will delete the personal data for example if you have withdrawn your consent and there is no other lawful basis for processing.You also have a right to request that we restrict our processing of your personal data. We will do so for example when the accuracy of the personal data is contested by you, or the processing is unlawful, and you do not want us to delete your personal data but instead you request that we restrict our use of them.
- Right to data portability
Under certain circumstances, you have a right to receive your personal data from us in a structured, commonly used and machine-readable format and, where technically feasible, have your personal data transferred to another company (“data portability”). This applies to personal data that you have provided to us in a structured, commonly used and machine-readable format, if our processing of your personal data is carried out by automated means and the lawful basis for our processing is based on your consent.
This policy was adopted on 2022-06-21.
Last updated 2023-04-18.
Privacy policy
Social media and other contact before a booking, purchase or Stay/Visit
This policy describes how we at ESS Hotel Group AB and the destination you are in contact with (“ESS”, “we”, “our” and ”us”) process your personal data during our contact on social media or when you contact us before a booking, purchase or stay. We will process your personal data to:
Here you can find all our privacy policies which describe how we process personal data in other situations, e.g. if you visit our website, make a purchase, booking or otherwise are in contact with us.
Below you can read more about:
Which company is responsible for the processing of your personal data?
Detailed description of how we process your personal data
Who can gain access to your personal data and why?
Where are your personal data processed?
What are your rights when we process your personal data?
Which company is responsible for the processing of your personal data?
The company who run the destination you communicate with is responsible for the processing of your personal data together with ESS Hotel Group AB (Swedish registration number 556710-8047). You can find information about our destinations here.
If you only contact ESS Hotel Group AB and no specific destination, only ESS Hotel Group AB is responsible for the processing of your personal data.
If you wish to know more about how personal data is shared within our corporate group, you can find more information here.
Please contact us via our e-mail address privacy@essgroup.se, or give us a call on +46 775-553 553 if you have any questions regarding our processing of your personal data or if you wish to exercise any of your rights. Our postal address is ESS Hotel Group AB, Drakegatan 10, 412 50 Gothenburg, Sweden.
Detailed description of how we process your personal data
We will process your personal data which you yourself provide to us and information from your social media account (if you use such account to communicate).
When contacting us through a social media platform, we suggest you also familiarise yourself with the privacy information of that platform.
To communicate before you make a booking/purchase or stay/visit
What processing we perform
What personal data we process
Our lawful basis for the processing
If you visit our social media sites (e.g. our Instagram) we also process:
Legitimate interest
The personal data will be processed based on our legitimate interest to communicate with you who have contacted us.
By carrying out a balancing of interests assessment concerning our processing of your personal data, we have concluded that our legitimate interest for the processing outweighs your interests or rights which require the protection of your personal data.
If you want more information in relation to our balancing of interests assessments, please do not hesitate to contact us.
Storage period: We will delete your personal data regularly.
To share your posts on social media
What processing we perform
What personal data we process
Our lawful basis for the processing
Consent
The personal data will be processed based on your consent. You can withdraw such consent at any time.
Storage period: Your posts will be shared on our social media until we delete the post or you yourself ask us to remove it.
Who can gain access to your personal data and why?
Your personal data is initially collected and processed by us as controllers and we do not sell your personal data. This means that your personal data will be handled by our employees, but only personnel who need such access to conduct their work.
We also use processors that carry out processing on our behalf to conduct our business, such as suppliers and partners which therefore will process your personal data. We are responsible for any sharing of your personal data to such suppliers or partners and to make sure your personal data is safe when shared with third parties as set out below. We only use processors providing sufficient guarantees that the processing will meet all legal requirements and ensure the protection of the rights of the data subject.
Where are your personal data processed?
As a main rule we only process your personal data in the EU/EEA and choose suppliers based within the EU/EEA. The use of our suppliers will however in some instances mean that your personal data is transferred outside of the EU/EEA.
If you communicate with us via social media as Snapchat, Facebook, Pinterest and LinkedIn your personal data will be transferred outside of the EU/EEA since these parties use your personal data in the United States.
We only transfer your personal data outside of the EU/EEA if we can make the transfer according to the data protection rules. This means that the transfer either is governed by an adequacy decision or that we rely on Standard Contractual Clauses and supplementary measures to provide a safe transfer of your personal data.
If you want to know more about who we share your personal data with, please feel free to contact us. Our contact information can be found at the beginning of this privacy policy.
What are your rights when we process your personal data?
You have certain rights that you can exercise to affect how we process your personal data. You can read about what those rights are below. Contact us if you want to exercise any of your rights.
You always have the right to lodge a complaint with a supervisory authority. You may do this in the EU/EEA member state where you live, work or where an infringement of applicable data protection laws is alleged to have occurred.
You have a right to withdraw any consent you have given us, partly or completely.You also have a right to object to our processing of your personal data when the processing is based on the lawful basis “legitimate interest”.
You have the right to obtain confirmation as to whether we are processing personal data about you or not. If we do process your personal data, you also have a right to obtain a copy of the personal data processed by us as well as information about how we process your personal data.
You have a right to correct any inaccurate personal data concerning you that we may be processing and to ask us to have incomplete personal data completed.
You have a right to request that we delete your personal data. We will delete the personal data for example if you have withdrawn your consent and there is no other lawful basis for processing.You also have a right to request that we restrict our processing of your personal data. We will do so for example when the accuracy of the personal data is contested by you, or the processing is unlawful, and you do not want us to delete your personal data but instead you request that we restrict our use of them.
Under certain circumstances, you have a right to receive your personal data from us in a structured, commonly used and machine-readable format and, where technically feasible, have your personal data transferred to another company (“data portability”). This applies to personal data that you have provided to us in a structured, commonly used and machine-readable format, if our processing of your personal data is carried out by automated means and the lawful basis for our processing is based on your consent.
This policy was adopted on 2022-06-21.
Last updated 2023-04-18.