Privacy Policy

This privacy policy explains how Grobruket AB collects and processes personal data when you visit our website or booking page, buy an experience gift voucher, book an experience, contact us, sign up for our newsletter, or otherwise interact with us.

Data controller: Grobruket AB, Växthusvägen 5, 234 56 Alnarp, Sweden. Email: info@grobruket.se. Phone: 010 - 168 68 67.

What personal data we collect

Depending on how you interact with us, we may process the following categories of personal data:

• Contact details, such as name, address, email address and telephone number.

• Booking and purchase information, such as selected experience, date, number of participants, gift voucher details and order confirmation details.

• Payment-related information needed to complete and document a transaction. Card details are handled by our payment provider and are not stored by Grobruket AB.

• Technical information from your device and browser, such as IP address, device type, browser type, approximate location, visit duration, pages visited, preferences and information about how you use the website or booking page.

• Newsletter preferences and consent records, where applicable.

Why we process personal data and legal basis

We process personal data for the following purposes and legal bases under the GDPR:

• To administer bookings, purchases, gift vouchers, order confirmations, customer service and important information before or after an experience. Legal basis: performance of a contract or steps prior to entering into a contract.

• To comply with legal obligations, including accounting and tax requirements. Legal basis: legal obligation.

• To operate, secure and improve our website, booking page and customer communication. Legal basis: legitimate interest, where this does not override your rights and freedoms.

• To send newsletters or other marketing communications when you have actively signed up. Legal basis: consent. You can withdraw your consent at any time.

• To use non-essential cookies, analytics or marketing tracking where required. Legal basis: consent.

Website, cookies and analytics

Grobruket AB uses cookies and similar technologies to make the website and booking page work, improve the user experience and, where you have consented, analyse traffic and measure marketing. Non-essential cookies are only used where required consent has been given. You can change or withdraw cookie consent where the website provides this option, and you can also delete or block cookies in your browser settings.

Booking system, Understory and third-party providers

We use Understory as a technical booking and software provider for experience bookings. Understory and other service providers may process personal data on our behalf for booking administration, payments, email delivery, customer support, analytics, security and similar business purposes.

Where a provider processes personal data on behalf of Grobruket AB, they may only process the data according to our instructions and applicable data protection rules. Some providers may also act as independent controllers for parts of their services, for example payment processing. We do not sell your personal data.

Data retention

We retain personal data only for as long as necessary for the purposes described above and as permitted or required by law. Booking and purchase information may need to be retained for accounting and tax purposes. Newsletter data is retained until you unsubscribe or withdraw consent, unless we have another legal basis for retaining limited information.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction and disclosure. Our booking and payment flows use secure encrypted connections where applicable. If you pay by card, card details are processed in encrypted form by the relevant payment provider.

Your rights

You have the right to request access to the personal data we process about you. You may also request correction, deletion, restriction of processing, data portability, or object to certain processing where applicable. If processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

If you wish to exercise your rights or have questions about how we process your data, contact Niklas Hjelm, Grobruket AB, Växthusvägen 5, 234 56 Alnarp, Sweden. Email: info@grobruket.se. Phone: 010 - 168 68 67.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or another competent supervisory authority within the EU/EEA.