Website visits
Do you visit any of our websites?
www.ysb.se, www.strandbaden.se, www.koketfalkenberg.se, www.mjs.life, www.hotelpigalle.se, www.hotellbellora.se, www.steamhotel.se, www.fyriresort.com, www.marienlyst.dk, www.ellerybeachhouse.com, www.villastrandvägen.se, www.orenasslott.com, www.hjortviken.se, www.kokpunkten.se, www.jacyzhotel.com and www.maryhillestate.se
If you do, and have consented in the cookiebanner, we at ESS Hotel Group AB and the company who run the website you visit (”ESS”, “we”, ”our” and ”us”) will process your personal data in order to:
Here you can find all our privacy policies which describe how we process personal data in other situations, e.g. if you visit us, have a complaint or otherwise are in contact with us.
Below you can read more about:
Which company is responsible for the processing of your personal data?
Detailed description of how we process your personal data
Who can gain access to your personal data and why?
Which company is responsible for the processing of your personal data?
The company who run the destination behind the website you visit is responsible for the processing of your personal data together with ESS Hotel Group AB (Swedish registration number 556710-8047). You can find information about our destinations here.
If you wish to know more about how personal data is shared within our corporate group, you can find more information here.
Please contact us via our e-mail address privacy@essgroup.se, or give us a call on +46 775-553 553 if you have any questions regarding our processing of your personal data or if you wish to exercise any of your rights. Our postal address is ESS Hotel Group AB, , Drakegatan 10, 412 50 Gothenburg, Sweden
Detailed description of how we process your personal data
To protect your privacy, we have taken measures to avoid identifying you when you visit any of our websites. For instance, we only store an encrypted version of your IP-address to reduce the risk of being able to identify you.
When you visit our website, and have consented, we will gather your personal data from your device and from the companies we cooperate with (see below). Such companies will also use information they have about you since before in order to show you interesting offers.
When you use our website, we will gather personal data by using cookies. How we do this is described in our text about cookies which you find here.
To analyse how our websites are used
What processing we perform
What personal data we process
Our lawful basis for the processing
If you give your consent:
- Analyse how you use our website to improve our website and services. To do this we use the analytic service from Google Analytics
The analytic service means that we place a random ID on your device to distinguish your device from other visitors and to acknowledge patterns in how our websites are used. We will however not know who you are
The personal data we gather will be used e.g. to optimize functions and to adapt the websites to suit our visitors
- An encrypted version of your IP- address which we at ESS can’t connect to you as an individual
- Information about your device/browser (which area in the country you use our website from and which screen resolution you have)
- Information about your activities on the website
- Other information Google have about you, e.g. information about from which site you found us
Consent
The personal data will be processed based on your consent. You can withdraw such consent at any time.
You can prevent Google Analytics to use your personal data by downloading and install this browser add on.
Storage period:
We will store your personal data for a period of one year after your visit to our website.
Google will continue to store your personal data for their own purposes and Google will inform you separately about such storing.
To show you and your friends relevant marketing from us
What processing we perform
What personal data we process
Our lawful basis for the processing
If you give your consent:
- Market our services by showing you offers we believe you are interested in.
We show you such marketing on Google (including YouTube), Snapchat, Facebook (including Instagram), Pinterest and/or LinkedIn. You see marketing based on information that these companies have about you beforehand (so called profiling*) - Share information about you with Google (including YouTube), Snapchat, Facebook (including Instagram), Pinterest and/or LinkedIn so these marketing services will have information about which type of visitors are interested in us
- An encrypted version of your IP- address which we at ESS can’t connect to you as an individual
- E-mail address
Thereafter you will see search results and ads based on:
- An analyse of how you use our website
- Information that the marketing services we use have about you since before, e.g. information about from which site you found us
Storage period: You will see marketing from us for a period of one year after your visit to our website.
Google (including YouTube), Snapchat, Facebook (including Instagram), Pinterest and/or LinkedIn will continue to process your personal data as independently responsible. Information on how long they store your personal data is found in their respective information texts.
* Profiling: We use so called profiling to be able to show you offers that are relevant to you and to provide you with customized marketing. We use profiling because without it, you would instead see offers and information which you are probably not interested in. You have the right to object to profiling as described below under the section explaining your rights.
Who can gain access to your personal data and why?
Your personal data is initially collected and processed by us as controllers and we do not sell your personal data. This means that your personal data will be handled by our employees, but only personnel who need such access to conduct their work.
We also use processors that carry out processing on our behalf to conduct our business, such as suppliers and partners which therefore will process your personal data. We are responsible for any sharing of your personal data to such suppliers or partners and to make sure your personal data is safe when shared with third parties as set out below. We only use processors providing sufficient guarantees that the processing will meet all legal requirements and ensure the protection of the rights of the data subject.
When you use any of our websites and consent to us doing so, we will also share your personal data with:
Where are your personal data processed?
As a main rule we only process your personal data in the EU/EEA and choose suppliers based within the EU/EEA. The use of our suppliers will however in some instances mean that your personal data is transferred outside of the EU/EEA.
If you use any of our websites and have consented to us using Google, Snapchat, Facebook, Pinterest and LinkedIn there is a risk that your personal data is transferred outside of the EU/EEA. These parties may transfer your personal data to the United States since they are located there. We have anonymised your personal data as far as possible to avoid your personal data being transferred outside the EU/EEA.
We only transfer your personal data outside of the EU/EEA if we can make the transfer according to the data protection rules. This means that the transfer either is governed by an adequacy decision or that we rely on Standard Contractual Clauses and supplementary measures to provide a safe transfer of your personal data. Google, Snapchat, Facebook, Pinterest and LinkedIn rely on Standard Contractual Clauses for the transfer of personal data outside of EU/EEA. Standard Contractual Clauses are one effort to provide a safe transfer of your personal data.
If you want to know more about who we share your personal data with, please feel free to contact us. Our contact information can be found at the beginning of this privacy policy.
What are your rights when we process your personal data?
You have certain rights that you can exercise to affect how we process your personal data when visiting our website. You can read about these rights below.
- Right to lodge a complaint with a supervisory authority
You always have the right to lodge a complaint with a supervisory authority. You may do this in the EU/EEA member state where you live, work or where an infringement of applicable data protection laws is alleged to have occurred.- The supervisory authority in Sweden is the Swedish Data Protection Authority (Integritetsskyddsmyndigheten, the IMY).
- The supervisory authority in Denmark is the Danish Data Protection Agency (Datatilsynet).
- The supervisory authority in Norway is the Norwegian Data Protection Authority (Datatilsynet).
- Right to withdraw your consent and object to processing
You have a right to withdraw any consent you have given us, partly or completely. You always have a right to object to our processing of your personal data when the processing is performed for marketing and profiling purposes. You can read more about profiling in the chart above.
- Right to information and access
You have the right to obtain confirmation as to whether we are processing personal data about you or not. If we do process your personal data, you also have a right to obtain a copy of the personal data processed by us as well as information about how we process your personal data.
- Right to rectification
You have a right to correct any inaccurate personal data concerning you that we may be processing and to ask us to have incomplete personal data completed.
- Right to erasure (“the right to be forgotten”) and restriction of processing
You have a right to request that we delete your personal data. We will delete the personal data for example if you have withdrawn your consent and there is no other lawful basis for processing.You also have a right to request that we restrict our processing of your personal data. We will do so for example when the accuracy of the personal data is contested by you, or the processing is unlawful, and you do not want us to delete your personal data but instead you request that we restrict our use of them.
- Right to data portability
Under certain circumstances, you have a right to receive your personal data from us in a structured, commonly used and machine-readable format and, where technically feasible, have your personal data transferred to another company (“data portability”). This applies to personal data that you have provided to us in a structured, commonly used and machine-readable format, if our processing of your personal data is carried out by automated means and the lawful basis for our processing is based on your consent.
This policy was adopted on 2022-06-21.
Last updated 2023-04-18.
