Privacy policy

This page explains how we handle your personal data when you book with us and when you visit the website.

1. Data controllers

Pinebo Palace is run by Maria and Andreas Theander, who are the data controllers. You can reach us at maria@pinebo.se.

2. What data we process

• The details you enter when you book, such as your name, email address and phone number.
• Details of your booking, such as dates, number of guests and extras.
• Payment details. Card payments are handled by Stripe – we never see your full card number.
• Whatever you write to us by email.

3. Why we process the data

• To carry out your booking and stay. The legal basis is our contract with you.
• To meet the requirements of Swedish bookkeeping law. The legal basis is a legal obligation.
• To answer your questions. The legal basis is our legitimate interest in being able to help you.

We do not use your data for marketing and never sell it.

4. Who receives the data

• Sirvoy, our booking system, which stores the booking on our behalf.
• Stripe, which handles card payments.
• If you book via Airbnb or Booking.com, their privacy policies also apply.

5. How long we keep the data

We keep the data for as long as bookkeeping rules require, otherwise for no more than 12 months after your stay.

6. The website and third-party services

• The website does not use cookies for tracking or analytics.
• Some services from other companies load when you visit the site and may receive your IP address: the video on the home page from YouTube (via youtube-nocookie.com) and the booking form from Sirvoy, which may use cookies needed for the booking to work.
• The website is hosted on GitHub Pages, which may log IP addresses for security reasons.
• Some of these services are run by companies in the USA. Transfers are based on EU rules, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

7. Your rights

You have the right to know what data we hold about you, to have errors corrected and to have data deleted when we no longer need it. You can also ask us to restrict processing, object to it and receive your data in a machine-readable format. Contact us at maria@pinebo.se.

If you believe we are handling your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

8. Changes

We may update this policy. Last updated 14 November 2026.