Privacy policy

Last updated: 2026-01-30

1. Responsible for privacy policy

Responsible: Smålandet i Markaryd AB, Swedish organization number 559140-3406, email: info@smalandet.se

2. Overview

This policy describes how we handle personal data when you:

  • buy tickets or gift cards (via Kustom Checkout),
  • use Booking Management (login with email + booking code),
  • check in online (in-browser Geolocation API, on-the-fly), and
  • participate in photo competitions.

3. Booking Management

  • We do not create permanent user accounts. Customers log in per booking with their email address and booking code.
  • We store booking information (order-ID, booking code, purchase information) in our database according to accounting rules and for customer service.
  • Login via email + booking code does not automatically store additional identity information beyond what is required for the booking.

4. Online check-in — Geolocation

  • During online check-in, our website uses in-browser Geolocation API for a one-time check to verify that your device is located in the proximity of Smålandet Markaryds Älgsafari. This check requires you to approve the browser's location request. (This constitutes processing of personal data in accordance with GDPR.)
  • We do not store your GPS coordinates or your IP address in connection with this check. For revision/dispute purposes, we only store a timestamp and booking ID. (This minimizes personal data storage but gives us the ability to show that the check was performed.)
  • The browser may show a location prompt — this is the browser's own dialog. If you reject it, you will not be able to check in online.

5. Photo competition — submitted images and consent

  • To participate in photo competitions, you must actively check a consent box during the upload.
  • We store a documentation of the consent (which text was accepted and timestamp) to be able to show that valid consent was given (in accordance with GDPR article 7). Additionally, we store your name, email address, and the specified origin country. Your name and origin country will be published if you are one of the winners in the photo competition.
  • Revocation of consent: You can always revoke your GDPR consent by contacting us at info@smalandet.se. If the revocation occurs before we have published the winning images, your participation in the photo competition will cease. After revocation, we will stop future publication of your name associated with a winning image and, where technically possible, remove the name from our channels. (We cannot practically delete printed material that has already been distributed, and published material may have copies outside our control.) Note that revocation does not affect previous legality in our processing (i.e. publication that occurred before the revocation).
  • License for image use: By submitting, you also grant us a licence (perpetual, royalty-free, worldwide) to use the image for marketing and archival purposes. This intellectual property license governs the image as a work (copyright) and is a separate agreement beyond the GDPR consent.
  • Permanent storage: We intend to archive and be able to use images indefinitely (“permanent”) in accordance with the license you accepted. This means that images may remain in archives and in marketing materials for the time being. (If you request deletion of personal data, we will do what is reasonably required to remove them from our digital channels; deletion in printed/externally shared material may be limited.)

6. Third parties / operation

  • Frontend/edge: Vercel (edge nodes within EU). Backend: own server (only authorized personnel have access).
  • Images from photo competition: Cloudflare R2 (storage in EU)
  • Encrypted backups are stored in private GitHub repository (only authorized personnel have access).
  • We have concluded appropriate data processing agreements and ensured that transfers outside the EEA are protected (if applicable).

7. Cookies

Currently, we only use technical cookies that are required for the service to function. No tracking or advertising cookies are used without separate consent.

8. Storage periods

  • Booking documentation / transaction data: at least 7 years.
  • Booking-related customer contacts (support/complaint): at least 2 years beyond the booking requirement.
  • Photographs (archive/marketing): stored in accordance with the license you accept; we intend to keep them for the time being. We document consent/license for each submission.
  • Check-in verification record for check-in (timestamp): stored for 2 years (or internal policy).
  • Server logs/IP: we strive not to store IP addresses longer than necessary; logging is configured so that IP addresses are not retained longer than necessary.

9. Your rights

You have the right to access, rectification, deletion (with certain exceptions), limitation, objection and data portability. To exercise these rights, contact us at info@smalandet.se. We usually respond within one month.

10. Contact and supervision

  • Contact: info@smalandet.se, Smålandet i Markaryd AB, Misterhult 2018, 285 91 Markaryd.
  • If you are dissatisfied, you can also contact the Swedish Data Protection Authority (IMY).