Privacy regulations

Privacy is important to Luleå Travel AB. We are committed to safeguarding the privacy of our clients under the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679, we have a legal duty to protect your personal data. Luleå Travel AB will act as both a data controller and data processor.


Information we collect and why
Luleå Travel may collect personal information in a variety of circumstances in order to carry out our business activities effectively. Such information may be provided to us in the following ways:

You as a customer make a booking, enquiry or subscribe to receive information through the website, email or by phone.
– You make amendments or changes to a booking or enquiry as above.
– You subscribe to receiving more information about our services.
– You send us any other information which is pertinent to the fulfilment of your travel booking, in particular this may extend to personal information about you.
– In all other forms of correspondence such as email, letter, and telephone which pertain to the activities of the business.

All email correspondence is stored locally and backed-up and can be accessed for quality and regulatory purposes. Access to emails and systems is secured so that only authorized staff can access personal data.

Sensitive personal information
We may require you to provide us with some special categories of personal information in order for us to provide you with a better standard of service. For example, when booking with us we may require you to provide us with information about your dietary or medical requirements, which may reveal details about your mental or physical health or condition. The provision of this information is entirely voluntary. If you do not consent to our processing of this type of information it may impact on certain aspects of your trip.

Use of cookies and website tracking
Cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Google Analytics – We use Google Analytics to understand and improve the experience of our website visitors. Google Analytics measures your website experience factors and uses cookies to collect data on our users’ behavior and their devices as well as collecting information on the webpages the visitor has visited. Aggregated data is anonymized from the outset to recommend improvements to webpages. No data from Google Analytics is ever used to identify an individual.

Google Adwords – To draw attention to our services, we place Google AdWords display ads and with the use of this technology, Google, and we as their customer, receive the information that a user has clicked on an ad and was redirected to our websites. The information acquired this way is solely used for statistical analysis related to ad optimization. We do not receive any information that would allow us to personally identify a visitor. The statistics provided to us by Google include the total number of users who have clicked on one of our ads and, where applicable, whether they were redirected to a page on our website that has a conversation tag. These statistics allow us to track which search terms most often lead to our ads receiving clicks. The legal basis for this is Article 6 (paragraph 1 f) of the EU General Data Protection Regulation (GDPR).

Use of social plug-ins – Our website uses the following social plug-ins:
– Facebook
– Instagram

These plug-ins typically collect data from you as standard, and transmit it to the respective vendor’s server. We have taken technical measures to ensure the protection of your privacy, which guarantee that your data cannot be collected by the vendors of the respective plug-ins without your consent. The plug-ins will not be activated until you click on the respective symbol or link, and by doing so, you give your consent to have your data transmitted to the respective vendor. The legal basis for plug-in use is Article 6 (paragraph 1 a and f) of the EU General Data Protection Regulation (GDPR). We do not have any influence over the exact extent to which your data is collected by the respective vendor. We recommend you also read their privacy policies and terms and conditions.

Luleå Travel AB will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your personal information may be passed to a third party in order to fulfil your travel requirements or certain processes necessary for the operation of our website and marketing activities.

How we protect your information
Email security – All Luleå Travel AB outbound emails are encrypted, but please note that unless encrypted an email sent from you to us via the internet may not be secure and could be intercepted and read by someone else. Please keep this in mind when deciding whether to include personal information in any email you intend to send us.

Links- Our website contain links to and from other websites and accounts, including those of our suppliers. If you follow a link to any of these websites, please note that these websites will have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check external websites policies before you submit any personal information to these websites.

You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.

If any court of competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy policy will not be affected.

Unless otherwise agreed, no delay, act or omission by us or you in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

This policy will be governed by and interpreted according to the laws of Sweden. All disputes arising under this policy will be subject to the exclusive jurisdiction of Sweden.



Luleå Travel AB | May 2018