Privacy Policy
Effective Date: 01/09/2026
Data Controller: Tittut Sol AB (Org. nr: 559560-5303)
Website: www.solegarden.se
Contact Email: info@solegarden.se
1. Introduction & Data Controller Details
Tittut Sol AB ("we", "us", "our") operates www.solegarden.se. We are dedicated to protecting your personal privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.
We do not have a designated Data Protection Officer (DPO), as our core business operations do not require one under GDPR Article 37. However, we take your privacy seriously. If you have any questions or wish to exercise your data rights, please contact us at info@solegarden.se.
2. Personal Data We Collect & Legal Basis for Processing
-
Contact Data: We collect information such as your name, email address, and phone number when you make inquiries, submit guest booking requests, or request customer support. This data is processed based on Contractual Necessity (Art. 6(1)(b) GDPR) to fulfill your requests or our Legitimate Interest (Art. 6(1)(f) GDPR) in communicating with you.
-
Billing & Transaction Data: We collect billing details, including your name, physical address, and invoicing or payment information. This processing is strictly necessary for Legal Obligation compliance (Art. 6(1)(c) GDPR) under the Swedish Accounting Act (Bokföringslagen), as well as managing billing and account administration.
-
Technical & Usage Data: When you visit our website, we automatically collect technical details such as your IP address, browser type, and device information. This data is processed under our Legitimate Interest (Art. 6(1)(f) GDPR) to maintain site functionality, ensure security, and prevent fraudulent activity.
-
Analytics & Marketing Data: We collect information regarding how you interact with our website to evaluate performance and improve the user experience. This processing is conducted solely based on your explicit Consent (Art. 6(1)(a) GDPR) provided through our cookie banner.
3. Data Hosting, Storage & International Transfers
-
Hosting Platform: Our website is hosted on the Wix.com platform. Wix provides us with the online infrastructure that allows us to present our services to you.
-
Storage Locations: Your personal data collected through www.solegarden.se is stored on Wix’s secure servers located in the European Union (Ireland), the United States, and Israel.
-
International Transfers: Because Wix operates a global infrastructure, data may be transferred outside the EU/EEA. All such transfers are legally protected through standard data protection mechanisms, including EU Standard Contractual Clauses (SCCs) and European Commission adequacy decisions (such as for Israel).
-
Data Processing Agreements: We share data with third-party service providers (such as Wix and invoicing tools) under binding Data Processing Agreements (DPAs) that strictly require them to protect your data under GDPR standards.
4. Data Retention (How Long We Store Your Data)
We store your personal data only as long as necessary to fulfill the purposes for which it was collected:
-
Inquiries & Bookings: Retained for the duration of your customer relationship, plus 2 years following your last interaction or stay.
-
Financial & Accounting Records: Retained for 7 years to comply with statutory obligations under the Swedish Accounting Act (Bokföringslagen).
-
Consent-Based Data (e.g., Cookies): Retained until you withdraw your consent or clear your browser storage.
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies provided by Wix to ensure optimal site performance and analyze traffic.
-
Essential Cookies: Necessary for basic website functionality, safety, and system security (no consent required).
-
Non-Essential Cookies (Analytics/Performance): Activated only after you give explicit consent via our website's cookie banner.
You can manage, adjust, or withdraw your cookie preferences at any time through our website's cookie banner settings or directly in your browser.
6. Your Rights Under GDPR
Under Articles 15–21 of the GDPR, you have the following rights regarding your personal data:
-
Right of Access (Art. 15): Request a copy of the personal information we hold about you.
-
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
-
Right to Erasure (Art. 17): Request deletion of your personal data where applicable.
-
Right to Restriction of Processing (Art. 18): Request that we restrict processing under specific conditions.
-
Right to Data Portability (Art. 20): Request transfer of your data to another provider in a structured, standard format.
-
Right to Object (Art. 21): Object to data processing based on legitimate interests or direct marketing.
-
Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time for consent-based processing.
To exercise any of these rights, please email us at info@solegarden.se. We will respond within 30 days and may verify your identity before releasing information.
Right to Lodge a Complaint
If you believe our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the Swedish Data Protection Authority:
Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm, Sweden
Website: www.imy.se | Email: imy@imy.se