Closing menu

Privacy Policy

This privacy policy describes how Winn Hotel Group AB with company registration number 556422-3096, (“Winn”, “we”, “our” or “us”) processes your personal data. The policy applies to all hotels operated by Winn Hotel Group:
  • Winn Hotels Bjertorp Slott AB — Bjertorp Slott
  • Winn Hotels Högbo Brukshotell AB — Högbo Brukshotell & Spa
  • Winn Hotels Såstaholm Hotell & Konferens AB — Såstaholm Hotell & Konferens
  • Winn Lundsbrunn Resort & Spa AB — Lundsbrunn Resort & Spa
  • Winn Hotel Group Sodertalje AB - The Dock
  • Winn Hotel Group Gothenburg AB - Radisson Blu Riverside *
  • Winn Hotel Group Helsingborg AB — Radisson Blu Metropol*
  • Winn Hotellbågen AB — Radisson Blu Uppsala*
  • Winn Hotels Gävle AB — Clarion Winn Gävle**
  • Winn Hotels Haninge AB — Quality Winn Haninge**
  • Winn Hotels Falun AB — Home Hotel Bergmesteren**
  • Winn Hotels Karlskrona AB — Home Hotel Carlskrona**
  • Winn Hotels Uppsala AB - Home Hotel Uppsala**

*) Franchise agreement with Radisson Hotel Group, **) Franchise agreement with Strawberry

This Privacy Policy explains how we collect, use, share and store your personal information when you stay or visit our hotels, use our websites, subscribe to newsletters, interact with us via social media or otherwise contact us. Our goal is to be transparent and protect your privacy in accordance with applicable data protection laws.

1. Contact information

Winn Hotel Group AB (org. nr. 556422-3096) is the data controller. If you have any questions about our processing of your personal data or wish to exercise your rights, please contact us:

  • E-mail: gdpr@winn.se
  • Telephone: +46 26 665421
  • Address: Norra Slottsgatan 7, Box 1302, 801 37 Gävle, Sweden

Winn Hotel Group cooperates with various franchisors who provide loyalty programs, customer clubs and websites, among others. For personal data linked to these programs/clubs and webs, the respective franchisor is the data controller. Winn Hotel Group and its hotels are data processors.

2. What is personal data?

Personal data is any type of information that can be directly or indirectly attributed to you. Examples of personal data include name, address, telephone number, email address, payment details and booking confirmations. Usage history such as purchase, click and browsing history, IP addresses, purchasing behaviors and preferences are further examples of personal data, as well as other information that you provide in connection with your contact with one of our hotels.

3. Where we collect your personal data

We collect your personal data directly from you, or from third parties (e.g. your employer, travel agent, family member) if they book or purchase services on your behalf. In some cases, we collect data from your use of our websites and online services.

4. Categories of treatment

A. Accommodation or Visits

We process personal data in order to:

  • Manage your booking
  • Deliver services (hotel, restaurant, conference and meetings, spa, activities and events)
  • Communicate before, during and after your stay
  • Manage payments and customer service
  • Send surveys
  • Conduct marketing (with consent or legitimate interest)

Legal basis: Agreement, legitimate interest, consent (for sensitive data)
Storage time: 36 months after your visit

B. Website visits

With your consent (via our cookie banner), we process data for the following purposes:

  • Analyze usage (Google Analytics)
    We use Google Analytics to understand how our website is used, such as which pages are visited, the type of device and browser used, and approximate geographical location (at city level). The data collected is anonymised and cannot be linked to you as an individual.

  • Provide relevant marketing (Google, Meta, LinkedIn, etc.)
    In order to be able to display relevant advertising in other channels, we use cookies from external platforms. These may collect personal data such as your IP address or data related to your user behavior, in accordance with the respective platform's privacy policy.

Legal basis: Consent
Storage time: 36 months for analysis and marketing

C. Email Mailing

If you sign up for our email newsletters, we use your data to:

  • Send Emails
  • Measuring engagement

You can unsubscribe from email or marketing materials at any time. If you unsubscribe, you will only be unsubscribed from communications relating to the specific hotel. This means that you may still receive mailings from other hotels within the Winn Hotel Group, unless you choose to unsubscribe from all hotels. To unsubscribe, you can click on the unsubscribe link in each email or contact us directly.

Legal basis: Consent
Storage time: Until you unsubscribe; unsubscribe lists are stored indefinitely

D. Social Media and Contact Before Booking

We process your data if you:

  • Contacting us by phone, email, chat or social media
  • Interacting with our posts
  • Allows us to share your posts

Legal basis: Legitimate interest (communication), consent (sharing of posts)
Storage time: 36 months for communication; social media posts until deleted

E. Events and VIP Invitations

We process data to:

  • Invite guests based on stay history
  • Send customized marketing or event information

Legal basis: Legitimate interest (profiling), consent (VIP program)
Storage time: 36 months after last interaction

F. Customer Service and Complaints

We process your personal data in order to:

  • Offer support and manage requirements

Legal basis: Legitimate interest, legal obligation
Storage time: Until the case is resolved, or longer if required by law

G. Payments and Bookkeeping

We process payment data for transactions and to comply with accounting laws.

Legal basis: Agreement, legal obligation
Storage time: 7-8 years according to Swedish accounting rules

F. Camera surveillance

We treat moving images for security purposes where it is particularly required. The data will only be used if there is a suspicion of a crime.

Legal basis: Legitimate interest, legal obligation
Storage time: 30 days

5. Sharing and Transferring Data

We only share your information with:

  • Group companies of Winn Hotel Group
  • IT providers (for secure operation)
  • IT consultants (for support)
  • Marketing, booking and customer service partners
  • Payment processors (e.g. Klarna)
  • Debt collection companies, in case of non-payment
  • Law enforcement agencies such as police or court

The transfer of data outside the EU/EEA takes place only with adequate safeguards (e.g. standard contractual clauses).

6th. Profiling and Automated Decisions

We may use automated analytics to tailor offers or determine interest in VIP programs. You can object to this at any time.

7. Cookies

We use cookies on our websites for functionality, statistics and marketing purposes. You can manage your preferences via the cookie banner or browser settings. Please see our full Cookie Policy for more information.

8. Your rights

In accordance with data protection legislation, you have a number of rights in relation to our processing of your personal data. These rights are as follows:

  • Right of access to your personal data

You have the right to request information about the personal data we hold about you at any time.

  • Data portability

When we process your personal data on the basis of a contract or based on your consent, you have the right to receive a copy of your data in a commonly used, structured and machine-readable format and have the right to transfer this data to another controller. This only applies to personal data that you have provided to us.

  • Requesting rectification

You have the right to request rectification of your personal data if it is incorrect, and you also have the right to have incomplete personal data supplemented. Please note that Winn is not responsible for any problem arising from your personal data being incorrect if it is the case that you have failed to inform us of this.

  • Right to erasure

You have the right to request that your Personal Data be deleted if the Personal Data are no longer needed for the purposes for which they were collected. You can also have the Personal Data deleted if you have withdrawn your consent.

  • Right to restriction

You have the right to request that the processing of your Personal Data be restricted. Please note, however, that this may mean that in some cases we may not be able to provide you with all of our Services.

  • Right to withdraw consent

To the extent that we process your Personal Data based on your consent, you have the right, at any time, to withdraw your consent to the processing. The withdrawal does not apply retroactively.

  • Oppose certain treatment
    You have the right to object to processing based on our legitimate interest if you have personal reasons relating to the situation. However, we may continue to process your personal data, even if you have objected to the processing, if we have legitimate grounds for doing so that outweigh your privacy interest.
  • Right to lodge a complaint with a supervisory authority
    If you are not satisfied with our processing or for other reasons believe that we have processed your Personal Data incorrectly, you have the right to lodge a complaint with the Data Protection Supervisory Authority, which in Sweden is the Swedish Privacy Protection Authority (IMY).

9. Changes to this Policy

We may update this policy. You can always find the latest version on our website. Major changes will be communicated clearly.

Valid from: May 5, 2025

‍