Privacy Policy

Here we describe how we collect, use, and protect personal data on this website. The content is updated automatically based on which features are active.

This privacy policy describes how Stockholm's Authorized Guides (Stockholms Auktoriserade Guider) collects, uses, and stores your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable legislation.

The policy applies when you visit our website or use our services that refer to this policy.

You should always feel secure when providing personal data to us. We process your data lawfully, fairly, and transparently.

Stockholm's Authorized Guides (address: Torpängsvägen 23, 142 42 Huddinge, org-no: 559569-8472, email: info@sag.se, telephone: 072 345 67 89) is the data controller for the processing of your personal data and is responsible for ensuring that it is carried out in accordance with applicable law.

Data Processor: The website is produced and hosted by Wivid Arc, which processes personal data only on behalf of and in accordance with instructions from the data controller.

We process personal data when you:

• Visit our website
• Send an inquiry via the contact form
• Subscribe to newsletters (if available)
• Book or purchase services (if available)
• Create a customer account (if available)
• Otherwise communicate with us

Visitors: technical information (browser, device), visited pages, and pseudonymized session statistics.

Contact: name, email, telephone, and message as provided by you.

Additional categories are described in the sections applicable to each respective function on the website.

In most cases, we collect personal data directly from you. In some cases, we receive information from someone else:

• If you receive a gift card, we register your email address from the buyer in order to deliver the gift card.
• For guide profiles, information may come from the organization or person administering the registry.

Upon booking or purchase, we process your name, email address, phone number, booking details, and any additional information you provide (e.g., party size, special needs).

The information is used to fulfill the booking, send confirmations, and manage customer service.

When purchasing a gift card, we process the buyer's and recipient's email address, the buyer's name, and any personal message.

If you create a customer account, we process your email address, name, phone number, and login history to manage your bookings and your profile.

Login is done via a one-time code (passwordless) sent to your email.

If the website has a member registry, guides can publish a profile with their name, region, language, expertise, description, image, and contact details of their choice.

When subscribing to our newsletter, we process your email address and potentially your name. We may register consent metadata (timestamp, IP, browser) to document your consent.

You can unsubscribe at any time via the link in the newsletter or by contacting us.

Information you submit via forms (name, email, phone, message, etc.) is processed to answer your inquiry and provide customer service.

Forms may be protected with Google reCAPTCHA to prevent abuse.

We collect pseudonymized statistics on how the website is used (visited pages, referrer, approximate geography, browser/device). IP addresses are not stored in plain text but are used to create a daily session hash.

The purpose is to improve the website and understand its usage.

We use Google reCAPTCHA v3 on forms. Google may process technical information in accordance with Google's Privacy Policy.

We use cookies and similar technologies in the categories necessary, functional, statistics, and marketing depending on your choices.

On your first visit, a cookie banner is displayed where you can consent to or decline non-essential cookies. You can change your choices at any time via our cookie policy.

More information is available on the Swedish Post and Telecom Authority's website.

Contract – processing required to fulfill bookings, purchases, or respond to inquiries.

Legitimate interest – pseudonymized web statistics and security logs where our legitimate interest outweighs the privacy intrusion.

Consent – newsletters, non-essential cookies, and certain marketing activities. Consent can be withdrawn at any time.

Legal obligation – accounting and payment-related obligations.

When you book, purchase, or contact us, certain information is necessary for us to enter into or fulfill an agreement or to respond to your inquiry. If you do not provide this information, we cannot provide the service in question.

Subscribing to newsletters and accepting non-essential cookies is always voluntary.

Personal data is not stored longer than necessary for the purpose. Customer and booking details are normally stored for up to 24 months after the last interaction, unless longer storage is required by law (e.g., the Accounting Act, 7 years for accounting records).

Website statistics are aggregated and raw data may be deleted according to internal procedures.

We never sell your personal data.

We use the following categories of subcontractors (data processors):

• Supabase – database, authentication, and file storage (EU)

• Resend – email delivery

• Vercel – hosting and performance monitoring

• Upstash – rate limiting and security

• Stripe – payment processing (card, Swish, etc.)

• Google – analytics, tag management, and/or bot protection (reCAPTCHA)

• Google (Gemini) – AI-assisted translation and content generation in the administration (USA, standard contractual clauses)

Transfer outside the EU/EEA only occurs when necessary and with appropriate safeguards, such as the European Commission's standard contractual clauses (SCC).

Parts of the content on the website may be AI-assisted. We use generative AI (Google Gemini) in our administration as a support tool to, for example, machine-translate texts into other languages, as well as to create alternative text for images and search engine optimized text.

You do not interact directly with an AI chatbot or an AI-based decision-making system on the website. AI-assisted content is reviewed and published under the responsibility of the website owner.

The processing of personal data in AI tools is described in the service's terms. Read more in Google's Privacy Policy.

We do not use automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you (Article 22 GDPR).

You have the right to access, rectification, erasure, restriction, objection, and data portability under the GDPR.

For processing based on consent, you have the right to withdraw your consent at any time. In the case of direct marketing, you can object at any time.

Contact us at info@sag.se or 072 345 67 89. You also have the right to lodge a complaint with the supervisory authority, the Swedish Authority for Privacy Protection (IMY).

We take technical and organizational measures to protect personal data, including encryption, access control, and firewalls where appropriate.

Our services are not directed to children. We do not knowingly collect personal data from children under the age of 13 without parental consent. If we become aware that such data has been provided, we will delete it.

We may update this policy. In the event of significant changes, we will inform you via the website or email.

Stockholm's Authorized Guides
Torpängsvägen 23, 142 42 Huddinge
Email: info@sag.se
Phone: 072 345 67 89

The website is produced and hosted in Sweden by Wivid Arc.