Privacy Policy

This privacy policy explains how Äventyrshuset BBorg AB processes your personal data when you visit oxelosundsaventyrspark.se or contact us. We respect your privacy and process your data in accordance with the General Data Protection Regulation (GDPR).

Data controller

• Äventyrshuset BBorg AB, company reg. no. 556673-8836
• Registered address: Thorsgatan 10, 613 30 Oxelösund, Sweden
• Park visiting address: Jogersövägen 8, 613 51 Oxelösund, Sweden
• Phone: +46 155-308 08
• Email: oxelosund@bodaborg.se

We have not appointed a data protection officer, as our activities do not require one.

What personal data we collect

• Data you provide in our forms: name, email address, phone number, preferred date, number and type of activity, company name where relevant, and your message.
• Booking details when you book via our booking provider.
• Correspondence when you contact us by email or phone.
• Technical information, such as IP address, browser and how you use the site. Some of this is collected via cookies. See our Cookie Policy.

We do not knowingly collect special categories of personal data (Article 9 GDPR).

Why we process your data and legal basis

• Handling enquiries and bookings and providing customer service — legal basis: performance of a contract or steps prior to a contract (Article 6(1)(b)), and for general enquiries our legitimate interest (Article 6(1)(f)) in responding to you.
• Accounting and legal obligations — legal obligation (Article 6(1)(c)), including the Swedish Accounting Act.
• Statistics and improving the website — your consent (Article 6(1)(a)), given via our cookie banner.
• Security and preventing misuse — our legitimate interest (Article 6(1)(f)) in operating and protecting the website.

Who we share your data with

We never sell your personal data. To run our business we use processors that handle data on our behalf under data processing agreements pursuant to Article 28 GDPR:

• Booking system (Bokad) — to handle bookings.
• Web hosting / IT provider — to operate and store the website.
• Web statistics tools (e.g. Google Analytics) and consent management (CookieYes).

Data may also be disclosed to authorities where we are required to by law.

Transfers to third countries

Some of our providers (e.g. Google) may process data outside the EU/EEA. Where such a transfer occurs, we ensure it is protected by appropriate safeguards, such as the European Commission’s standard contractual clauses or a valid adequacy decision (EU–US Data Privacy Framework).

How long we keep your data

• Enquiries and correspondence: for as long as needed to handle the matter and a reasonable period thereafter.
• Booking data is kept for as long as necessary to administer the booking and thereafter in accordance with applicable legal requirements, such as the Swedish Accounting Act.
• Accounting records: for seven years under the Swedish Accounting Act.
• Cookies: for the retention periods stated in our Cookie Policy.

Your rights

Under the GDPR you have the right to:

• Access your data (Article 15).
• Have inaccurate data corrected (Article 16).
• Have data erased (Article 17).
• Request restriction of processing (Article 18).
• Object to processing based on legitimate interest (Article 21).
• Data portability (Article 20).
• Withdraw consent at any time, without affecting processing carried out beforehand.

To exercise any of your rights, contact us at oxelosund@bodaborg.se.

Providing your data

We need certain data to handle your booking or enquiry. If you do not provide it, we cannot deliver the service.

Automated decision-making

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.

Complaints to the supervisory authority

If you believe we process your personal data unlawfully, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY). More information is available at www.imy.se.

Changes to this policy

We may update this privacy policy. The latest version is always available on this page. Last updated 2026-07-09.