Your privacy is important to us. We want you to feel confident that we handle your personal data responsibly, regardless of the purpose for which you are in contact with us. In this Privacy Policy, you will find general information on how we handle personal data and comply with current legislation. We also explain what rights you have towards us at Merlo Castle and how you can use them.

It is important that you feel comfortable with how we handle your personal data. We therefore ask you to read the text carefully. By using Merlo Slotts services, you accept our Privacy Policy and our processing of your personal data. If you have any questions or concerns, you are welcome to contact us at jennie.olert@merloslott.se.

What information do we collect?
You may directly or indirectly provide us with information about yourself in a number of different ways. For example, when you contact us by email or make a booking online. The information we choose to collect about you depends on how and why our contact has occurred. Examples of personal data are:

• Personal and contact information such as name, email address, mobile phone number and address.
• Account and payment details for buyers and sellers
• Device information such as IP address, language settings and browser settings

Why do we need your data?
The main purpose of the personal data processing carried out by Merlo Slott is to provide, perform and improve our services to you. There are several different reasons why we may need to collect, manage and store your data. Some of them are purely legal, we need to save them in order to comply with current legislation, such as the Accounting Act. On other occasions, we need to save your personal data in order to fulfill our agreements, give you what we have promised or to offer you the best and most customized services possible.

Merlo Slott processes personal data for the following purposes based on the following legal grounds:

Purpose of the processing	Legal basis for processing (why processing is necessary)
To confirm your identity and verify your personal and contact details	Fulfill agreements and commitments we have with you
In order to provide you with accommodation and services	Fulfill agreements and commitments we have with you
To provide you with the customer service and assistance you may need regarding our services	Fulfill agreements and commitments we have with you
To manage your possible participation in competitions and events	Fulfilling contracts and other legitimate interests
For customer group and market analysis in order to improve our services for you	Other legitimate interests
For sending out offers and marketing	Other legitimate interests

What is legitimate interest?
When we use the legal basis of legitimate interest, it means that the processing is necessary to meet our legitimate interest. For example, being able to offer you housing opportunities and services. It may also be that we want to follow up on your visit to us.

Who can we share your personal data with?
Merlo Slott does not sell your personal data to anyone and we naturally do not share your personal data with anyone. In some cases, however, we may share your personal data with selected third parties. If this happens, we ensure that the transfer is done in a secure way that preserves your privacy. Below are categories of recipients with whom we may share your data.

• Other company that handles our accounts.
• System suppliers for booking systems and case management. In order to carry out our assignments and services, we store your data in our business system (a system that administers our customers and contacts) and in case of problems in a case management system.

Where do we process your personal data?
As a general rule, Merlo Slott processes your personal data within the EU/EEA. In cases where personal data is processed outside the EU/EEA, we ensure that our suppliers and partners comply with the same level of security and protection applied in the EU/EEA.

How long do we save your personal data?
Personal data is stored by Merlo Slott for the time necessary for the purposes specified above. It may be as long as it is necessary to be able to perform what we have promised you under our agreements or other commitments. It may also be as long as it is required by law or official decision.

Your rights
Whatever information we have stored about you, you should always be able to control your own data. Therefore, under current data protection legislation, you have access to the following rights.

• Right of access ("register extract"). You can request extracts of registered personal data and verify the information we have about you.
• Right to rectification. You have the right to have inaccurate or incomplete information about yourself rectified.
• Right to be erased. You have the right to request the erasure of your personal data if the data is no longer necessary for the purpose for which it was collected. However, if the data has been saved due to a legal obligation to save certain information, you do not have the right to demand its erasure.
• Right to data portability. If our right to process your personal data is based on your consent or to fulfill a contract with you, you may have the right to request the data in a machine-readable format for the purpose of reuse by another company. This mainly concerns data that you have provided to us yourself. In other words, only certain data are covered by the right to data portability.
• Right to object to certain types of processing. You always have the right to opt out of direct marketing and to object to the processing of personal data based on a balance of interests (legitimate interest).
• Where we use legitimate interest/balancing of interests as a legal basis for a purpose, you have the possibility to object to the processing. In order to continue processing your personal data after such an objection, we need to demonstrate a compelling legitimate reason for the processing in question that outweighs your interests, rights or freedoms.
• If you object to direct marketing, we will stop processing your personal data for that purpose.

Right to restrict processing of personal data

• You have the right to restrict the processing of your personal data if, for example, you consider it to be inaccurate.

Please note that you can influence the channels we use to contact you. For example, you can choose not to be contacted by e-mail or text message. You also have the opportunity to opt out of various types of mailings, such as newsletters. In such cases, you should not object to the processing of the data, but simply contact us and request a restriction on the communication channel we use.

There is no charge for using your rights. However, if a request is manifestly unfounded or excessive, we will charge a fee to cover our administrative costs related to that request. We may also refuse a request that is unfounded or unreasonable.

Please contact jennie.olert@merloslott.se if you have any questions, or read the section on exercising your rights (see next chapter) on how to formulate your request to exercise your rights.

Do you have complaints?
If you have any complaints regarding our processing of your personal data, you have the right to submit these to the country's supervisory authority. In Sweden, the Swedish Data Protection Authority is responsible for monitoring and supervising us and other companies that handle personal data on the Swedish market.

Contact details:
Sweden: Datainspektionen

Phone: 08-657 61 00
E-mail: datainspektionen@datainspektionen.se

What about cookies and similar technologies?
We use cookies and similar tracking technologies to improve your experience with our services. Some services even require cookies to function properly. Read more about how we use cookies (see next chapter).

Contact details for Merlo Castle
Do you have questions about our processing of your personal data or do you want to exercise any of your rights related to the processing of personal data?

If you contact us at jennie.olert@merloslott.se, your case is in safe hands and we will get back to you shortly.

The data controller's contact details:
The data controller is Merlo Slott, Jennie and Jonas Olert, Merlovägen 5, Timrå. Tel: 073-6998545, 070-5227825.
E-mail: jennie.olert@merloslott.se, jonas.olert@merloslott.se web: www.merloslott.se

Updated 2024-04-05

Exercising your rights
Information for those who wish to exercise any of their rights as registered with Merlo Castle.

As registered with Northbike, you have the following rights:

• Right to erasure
• Right to restriction
• Right to object
• Right of rectification
• Right to information (extract from the register)
• Right to data portability

If you wish to exercise any of these rights, please formulate your request and send it to us by email: jennie.olert@merloslott.se.

To enable us to handle your case in the best possible way, we would like to ask you to include some information when formulating your request to us.

• When requesting rectification, restriction and objection, you need to provide your first and last name, telephone/mobile number and email address so that we can identify you in our systems. You also need to state which data you want to have rectified, the processing you want to be restricted from or object to.
• When requesting deletion, you will need to provide your first and last name, social security number, telephone/mobile number and email so that we can identify you in our systems.
• When requesting information (register extract), you will need to provide your first and last name, social security number, telephone/mobile number and email address so that we can identify you in our systems. To ensure your identity, you also need to include a signed copy of your ID document.
• When requesting data portability, you need to provide your first and last name, social security number, telephone/mobile number and email address. To ensure your identity, you also need to include a signed copy of your ID document. We also need to know how you wish to receive the compilation of your personal data and whether it should be provided to another actor.

What is a cookie and how do they work?
Northbike website uses so-called cookies to:

• Use sessions to identify the user on the website and to be able to keep certain pages of the website closed to external users.
• Save certain information about the user to facilitate, among other things, logging in from the same computer.
• Save information on whether or not the user has previously been exposed to certain information on the website.

If you do not want to store cookies on your computer, you can disable this function in your browser settings. This means that cookies will not be saved, but it also means that parts of our website will not function properly.

JavaScript
This website uses JavaScript. This means that you must have JavaScript enabled in your browser settings in order to make full use of our website.

If you have further questions about this, you are of course welcome to contact us.