Privacy policy

This page explains which personal data we process when you visit the website or send an enquiry, why we do so and what rights you have.

Last updated: 21 October 2026

Data controller

Lars Eriksson, Medelplanagården is responsible for processing your personal data. You can reach us at info@medelplanagarden.se or +46 70-537 69 13.

When you send an enquiry

In the form on the contact page you enter your name and email address and, if you wish, your phone number, arrival and departure dates, apartment, number of guests and a message. If you email or call us, we receive the details you give us.

We use these details to answer your enquiry and handle any booking. The legal basis is that the processing is necessary to enter into and perform a contract with you (the booking) and our legitimate interest in being able to reply to people who contact us.

The form is sent to us as an email through the email service Resend (Resend, Inc., USA). Resend may therefore process the data outside the EU/EEA; such transfers must be made with the safeguards required by the General Data Protection Regulation (GDPR).

We keep the enquiry for as long as we need it to answer you and handle the booking. Data that forms part of our accounts is kept for as long as Swedish accounting law requires.

Spam protection

When you send the form, your browser solves a small calculation (ALTCHA) that shows it is not an automated program. This happens on our own server, without cookies and without third-party services. To stop mass mailings, the server counts how many messages are sent from the same IP address. This happens only in the server’s working memory, for no more than ten minutes.

Visitor statistics and error reports

We measure how the website is used with Umami. Umami uses no cookies and does not store your IP address; we only see aggregated statistics, such as which pages are visited, the type of device and browser used and the country visits come from. We cannot see who you are.

If something goes wrong on a page, a technical error report may be sent to GlitchTip, with details of the page, the browser and the error. It is used only to fix errors.

Cookies

The website uses no cookies and stores nothing in your browser. That is why we do not ask for consent to cookies.

Who receives the data

We never sell your data. Apart from ourselves, it is only processed by the suppliers needed for the website to work: our web agency Vision Media, which runs the website, the email service Resend and the statistics and error reporting services above. They may only use the data on our behalf. We also disclose data where the law requires it.

Your rights

Under the GDPR you have the right to:

find out which data we hold about you and receive a copy of it
have incorrect data corrected
have your data erased, unless the law requires us to keep it
request that the processing is restricted
object to processing based on legitimate interest
receive data you have provided in a machine-readable format (data portability)

Complaints

If you believe we process your personal data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.