Privacy policy

At Copperhill Mountain Lodge, we process your personal data in various contexts, such as when you order services from us, stay at our hotels, use the services we provide and in other contexts. In our privacy policy you will find information about our processing of personal data. You will also find contact details below if you have any questions or if you want to request access to information.

We process your personal data in accordance with the Swedish General Data Protection Regulation, hereinafter referred to as GDPR.

1. the controller of your personal data

Our company Copperhill Drift AB, org.nr 556694-6371, Box 19, 837 97 Åre, tel. +46 647 143 00, e-mail: info@copperhill.se, is responsible for the processing of personal data in our systems for booking, invoicing and hotel operation. We are also responsible for processing our marketing and sending e-mails to our customers and other contacts.

2. processing of personal data in connection with the booking of accommodation and stay

In connection with the bookings that you make yourself or that others make on your behalf, we process personal data that we need to be able to fulfill the contract for booking and purchase of services. This refers to data that you have provided to us directly or that you have provided to us via a travel agency or an agent. For example, we process information relating to your identity, your contact details and your payment information. In some cases, we keep your passport number.

 

In addition, we process other information you may have provided that is relevant to your stay with us. This may include information about allergies or special requests regarding your stay. We record all purchases and orders you make with us, e.g. spa, restaurant, room service, so that we can deliver these services and so that you can pay for them.

 

We process this data for as long as it is necessary to fulfill the booking contract with you, and also for as long as applicable laws and regulations require us to do so.

 

We use key cards to log into our hotels. We do this to prevent and solve crime and for security reasons, including fire safety. We keep the logins for 21 days.

3. processing of personal data for marketing purposes

When you subscribe to our newsletter, we save and use your email address to send you news and offers from us. We also use your e-mail address or phone number to send you news and offers in accordance with the rules on existing customer relationships. Our basis for this is the Marketing Act.

 

We may contact you via social media with your consent or in accordance with existing customer relationships. In order to use social media as a communication channel, we need to disclose your email address or phone number to the social media platform. Our basis for this is consent or legitimate interests.

 

You can withdraw any consent you have previously given us at any time. You can also opt out of receiving marketing according to existing customer relationships. You can do this by sending an e-mail to info@copperhill.se.

4. processing of personal data for development, troubleshooting and security purposes

We process data, including personal data, to troubleshoot and correct errors, to improve our services and the technology we use, and to analyze users and user behavior.

 

In addition, we process personal data to verify your identity, including verifying identity when using our digital services.

 

We anonymize data and produce statistics as far as possible, but we also need to process personal data for development, troubleshooting, statistical or security purposes.

5. processing of personal data for other purposes

If you contact our customer service or otherwise contact us with inquiries, we process personal data you provide to the extent necessary to respond to and log your inquiry. The basis for this is legitimate interests, to be able to fulfill agreements with you, or to respond to your requests.

 

In addition to processing described in our Privacy Policy or based on your consent, we may in some cases be required to process personal data when applicable regulations, including the General Data Protection Regulation and the GDPR, valid government order or court order requires or authorizes us to do so.

6. Disclosure of personal data and statutory processing

We will not disclose your personal data to third parties without your consent, or unless we are authorized or required to do so by applicable laws, including the General Data Protection Regulation (GDPR), a valid government order or a court order.

 

For the avoidance of doubt, we would like to clarify that our data processing for our own purposes is not considered as disclosure.

7. your rights

As a natural person, you have a number of rights under the GDPR You have the right to request information, rectification and erasure of personal data we process about you. You also have the right to request restriction of processing, the right to object to processing and the right to data portability.

 

To exercise your rights, you can email privacy@strawberry.no. We will reply to your request as soon as possible, and at the latest within 30 days. We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights against us. We do this to ensure that we only disclose your personal data to you - and not to someone pretending to be you.

8. Data processor

We are part of Strawberry. Strawberry has its own data protection officer.

 

The data processor is the agent of all hotels affiliated with Strawberry, including ourselves.

 

You can contact our Data Protection Officer at privacy@strawberry.no.

 

If you believe that our processing of your personal data is not in accordance with our description herein, or if we are otherwise in breach of the General Data Protection Regulation, you may also lodge your complaint with the Norwegian Data Protection Authority or the supervisory authority in the country where you are staying at one of our hotels.

9. Changes to the privacy policy or processing

We are continuously developing and improving our services to our customers. This may change the approach or scope of our processing of personal data.

 

The information we provide in this privacy policy will therefore be amended and updated as necessary. We will also amend the privacy policy in accordance with new rules or if regulatory practice requires it.