Data Protection at B&B Villa Garbo

Our Privacy Statement (in accordance with the GDPR)

We process your personal data in order to provide the best possible service for you. We store personal data of our customers, business partners and our staff. Personal data includes but is not restricted to first and last name, address, telephone number or other information you provide when contacting us.

Your personal data is only processed by employees who are specifically tasked with processing of personal data. We always process your personal data with care, maintaining good data processing practices. We only process personal data that is necessary for fulfilling the purposes of customer interaction. The information you provide will not be disclosed to any third parties. Data may be disclosed to authorities to the extent allowed and required by valid legislation.

Contact Person in Matters Relating to Data Protection:

Ingmar Eklund
B & B Villa Garbo
Esplanaden 84
10900 Hangö

Purpose of Personal Data Processing
Personal data is collected and processed for specified, explicit and legitimate purposes with the consent of the customers and/or business partners.

Personal data is collected only with means agreed to in advance, for example in person, by telephone, email, or our webpage form, which have been communicated to customers and/or business partners prior to collecting the data.

The information given by you when contacting us will be used solely for responding to your enquiries, feedback, for processing accommodation bookings, providing the requested services or for operational development.

Personal data is also required for customer interaction and communication, for example, we may need to contact you in relation to your reservation or an unforeseen disturbance. The information provided by you will not be used for direct marketing.

Personal data processed
We only process the necessary information provided by you (in person, on the phone, by email / webpage form) and any attachments you may include. This includes for example the following: given name and family name, street address, postcode, post office, city, email address, phone number, date of birth / ID number, the message submitted, possible payment details, and the requested form of contact. Information identifying a person will be deleted as soon as it is no longer required and operational grounds no longer exist for processing such data.

Type of personal data we collect and how
The source of information för personal data is usually the person themself. For your stay, we need your name and contact details. Alternatively, we may receive your personal data through a travel agency or a company.

If you book our accommodation services for another person, for example in the name of a company or an association, we will process your contact details so that we can contact you in relation to the reservation as necessary.

With group bookings, the data is provided by the contact person handling the booking.

We may also complete any incomplete data on the basis of the passenger notification you fill out at the reception, as per the legal requirements.Personal data can also be updated from a registry of data controllers offering address update services and other similar services.

Legal basis for processing of personal data
When you book our accommodation services, we enter into an agreement, on the basis of which we will process your personal data. The basis for processing may also be an agreement on our services with your employer / company or organisation.

Legislation requires us to collect and store personal data for the services you use. Such laws include the Act on Accommodation and Food Service Activities, which obligates hotels and accommodation providers to maintain a traveller data register by requiring their customers to complete a Traveller Registration Form at the time of check-in.

In addition, we may process certain additional information about you to ensure the success of your visit, including information on your bookings, any requests on accessibility or diet, as well as the right to process emails.

Right of Access, Rectification and Erasure
You have the right to access and inspect your personal data stored in the data files.

The request for access and/or correction must be done accurately and in detail, in written form with the person’s signature and a copy of their personal ID-card and sent to the Contact Person for Data Protection who must rectify any inaccurate data indicated by the person in question. You may also request that your personal date be erased.

Our Website uses cookies and possibly other similar technologies to enable features at the Webpages, in e-mails or forms. A cookie is a small text file that stores Internet settings. Almost every website uses cookie technology. Cookies, among other things, speed navigation through our Services, keep track of information so that you do not have to re-enter it each time you visit our Services, help us provide you with customized content and allow us to learn about your visit.

We use analytics cookies to collect information about how visitors use our online services. We gather data to be able to better understand the usage and functionality of our websites.

We can modify the content of our websites with cookies related to customization to offer personalised content for users. We mainly use cookies to collect anonymous information and cannot track your movements on other websites. Users cannot be identified based on cookies solely.

Social media
Social media cookies are used to identify users in social media services so that they can, for instance, share infomration by pressing a button.

A cookie is a small text file that the browser stores on the user's terminal device. Cookies include a unique, anonymous identifier that enables us to identify and count different browsers that visit our website. We may also use similar technology to store similar identifiers.

With the help of cookies, we can collect information about how and when our services are used. For instance, what browsers users use. We use cookies and other similar technologies to gather statistics about how many people use our services. Users cannot be identified based on cookies solely.

Notification to the Data Protection Ombudsman
First contact the company that is processing your data, i.e. the Contact Person for Data Protection. You can notify the Data Protection Ombudsman if you suspect that an organisation or individual is processing personal data in violation of data protection regulations.

More information: