Privacy Policy

At Selma Spa, we process your personal data in various contexts – for example, when you order services, stay at our hotel, utilize our facilities, or interact with us in other ways. In this privacy policy, you will find information regarding our processing of personal data. Below, you will also find contact details should you have questions or wish to request access to your information.

We process your personal data in accordance with the prevailing Swedish Data Protection Regulation and the General Data Protection Regulation (GDPR).

1. Data Controller

Our company, Selma Spa (Org. nr: 556588-3336, Box 500, phone +46 (0)565-166 00, email: info@selmaspa.se), is the data controller for the processing of personal data within our systems for booking, invoicing, and hotel operations. We are further responsible for our marketing and email communications to our customers and other contacts.

2. Processing of Personal

Data in Connection with Bookings and StaysIn connection with bookings made by you or by others on your behalf, we process the personal data required to fulfill the contract for the booking and purchase of services. This pertains to information provided directly to us or via a travel agency or agent. We process, for example, identity information, contact details, and payment information. In certain cases, we store your passport number.Furthermore, we process other information you may have provided that is relevant to your stay. This may include information regarding allergies or specific requests. We register all purchases and orders made with us (e.g., spa, restaurant, room service) to deliver these services and facilitate payment.

We process this data for as long as necessary to fulfill the booking agreement, and for as long as required by applicable laws and regulations.

For security purposes and crime prevention, we log key card usage; these logs are stored for 21 days.

3. Processing of Personal Data for Marketing Purposes

When you subscribe to our newsletter, we store and use your email address to send news and offers.

We also use your email address or phone number to send communications based on existing customer relationships, in accordance with the Marketing Act.

We may contact you via social media following your consent or based on existing customer relationships. To use social media as a communication channel, we must provide your email address or phone number to the respective platform. The legal basis for this is consent or legitimate interest.

You may withdraw your consent or opt-out of marketing communications at any time by contacting us at info@selmaspa.se.

4. Development, Troubleshooting, and Security

We process data, including personal data, to perform troubleshooting and error correction, to improve our services and technology, and to analyze user behavior.

We also process data to verify your identity, including during the use of our digital services. To the extent possible, we anonymize data for statistical purposes.

5. Other Purposes

If you contact our customer service or otherwise reach out with inquiries, we process the personal data provided to the extent necessary to respond to and log your request. The legal basis for this is legitimate interest, the fulfillment of a contract, or responding to your inquiries.

We may also be required to process personal data when applicable regulations, authority orders, or court decisions mandate or permit us to do so.

6. Disclosure of Personal Data

We do not disclose your personal data to third parties without your consent, or unless permitted or required by applicable laws, including GDPR, authority orders, or court decisions.

Data processing performed by our service providers for our own internal purposes is not considered disclosure to a third party.

7. Your Rights

As a natural person, you have several rights under the General Data Protection Regulation (GDPR).You have the right to request access to, rectification, and erasure of the personal data we process regarding you. Furthermore, you have the right to request the restriction of processing, the right to object to the processing, and the right to data portability.To exercise your rights, please visit the following page: https://www.strawberry.se/generelle-betingelser/allmanna-villkor/begaran-om-information/. We will respond to your request as soon as possible, and no later than within 30 days.We will require you to confirm your identity or provide additional information before we allow you to exercise your rights. We do this to ensure that we only disclose your personal data to you, and not to someone else portraying themselves as you.

8. Data Protection Officer

We have our own Data Protection Officer (DPO) at Strawberry. The DPO manages all our companies and all personal data we process in the countries where we operate.

The DPO serves as our point of contact for the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY).

The officer provides Strawberry, our data processors, and our employees with advice and guidance regarding the processing of personal data and applicable regulations. The officer monitors our compliance with data protection rules and our internal guidelines.

Our DPO can also assist you in exercising your rights or help answer questions regarding your personal data with us.

You can contact our DPO at privacy@strawberry.no.

If you believe that our processing of personal data does not comply with the description provided here or otherwise violates data protection laws, you may lodge a complaint with IMY or the supervisory authority in the country where the hotel you stayed at is located. Information on how to contact IMY can be found on their website: www.imy.se.

9. Cookies

We use cookies to improve the user experience on our websites.

A cookie is a small text file saved on your device (e.g., smartphone, computer, tablet). Cookies help identify which pages are visited on our website. The information stored via cookies may include how you use the website, the browser you use, and which pages you have visited.

A permanent cookie remains on your device for a predetermined period. A session cookie is stored temporarily in your device’s memory while you are browsing our website and is deleted when the browser is closed. We use both permanent and session cookies. Strawberry may also utilize third-party cookies.

If you do not wish for our websites to store cookies on your device, you can disable cookies in your browser settings. Please note that disabling cookies will reduce the functionality of our websites.

10. Personalized Stays

At Selma Spa, we aim to offer our customers the best possible hotel experience, tailored to the individual guest’s preferences and purchase history.

Based on legitimate interests, we wish to use information received from you regarding room preferences (e.g., ”window facing the water,” ”quiet room requested”) and information regarding your purchases with us (e.g., ”sparkling water” instead of ”still water”) to provide a customized stay.

This information is collected based on the purchases you make and the requests you have communicated to our staff.

Additionally, we may occasionally collect information from open sources, such as the internet and social media, limited to information relevant to offering you a personalized stay. The legal basis for this is legitimate interest.

This information is not disclosed to third parties.

You may object to the use of your data for the personalization of your stay by sending an email to info@selmaspa.se.

11. Changes to the Privacy Policy or Processing

We continuously work on developing and improving the services we offer our customers. This may change the methods or scope of our personal data processing. The information provided in this privacy policy will therefore be modified and updated periodically. We will also update the policy in accordance with new regulations or changes in administrative practice.

AI Chatbot

Selma Spa uses an AI chatbot to provide you with quick and easy access to information about our hotel. The chatbot collects information about your interactions with it, including your questions and responses. This information is used to improve the chatbot’s performance and to provide you with a more personalized experience. You can choose not to interact with the chatbot at any time.