Privacy policy
This policy explains how Sörbyn Lodge collects, uses and protects your personal data under the EU General Data Protection Regulation (GDPR). Last updated 24 September 2026.
Sörbyn Lodge is the data controller for the personal data described here. You can reach us at Sörbyn 222, 961 97 Gunnarsbyn, Sweden, by email at booking@sorbyn.se, or by phone on +46 924 22 036.
When you send an enquiry, register for an event or make a booking, we collect the details you provide — such as company, name, email address, phone number, preferred dates, party size, any dietary or accessibility notes, and your message. When you submit a form we also process a small amount of technical data, such as your IP address, to protect the form against spam and abuse.
We use your data to respond to your enquiry, prepare a proposal, and manage your registration, booking and stay. Depending on the situation, our legal basis is your consent, which you give with the checkbox on our forms; the performance of an agreement with you; our legitimate interest in keeping our forms secure; and, for invoices and receipts, our legal obligations under accounting law.
We share your data only with service providers that help us run the lodge — such as our website host, our email provider and our bot-protection provider — and only to the extent needed to deliver the service. When online booking and payment are enabled, our booking and payment providers process the data needed to complete your reservation. These providers act on our instructions, and we require them to protect your data. We never sell your personal data.
We keep personal data only as long as needed for the purpose it was collected — an enquiry for as long as needed to handle it and any resulting stay, an event registration until the event has taken place, and booking and accounting records for as long as required by Swedish accounting law, currently seven years.
We aim to keep your data within the EU/EEA. If a provider processes data outside the EEA, we make sure appropriate safeguards are in place, such as the European Commission's standard contractual clauses.
You have the right to request access to the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you may withdraw that consent at any time — this does not affect processing that has already taken place. We do not use your data for automated decision-making or profiling. To exercise any of these rights, contact us at booking@sorbyn.se.
Our site uses only what it needs to work — for example, remembering your language choice in your browser and a bot-protection widget on our forms. We also keep simple, cookieless visitor statistics, such as page views and time on a page, in an aggregated form that stores no personal data and cannot identify you. We do not use advertising or cross-site tracking cookies.
If you believe we have handled your personal data incorrectly, we would like the chance to put it right — please contact us first. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.
We may update this policy from time to time. The date at the top shows when it was last changed.