GastroVin

Privacy policy

GastroVin Sverige AB (reg. no. 559054-9514) is the data controller and processes personal data in accordance with the General Data Protection Regulation (GDPR). Any details you share through our website are shared voluntarily, and we use them only for the purposes described here.

What we collect

  • Bookings and enquiries: name, email address, phone number, number of guests, the evening or type of arrangement requested, your message and the language you used.
  • Payment: order number, amount, payment method and our payment provider’s reference. Card and account details are entered directly with our payment provider and are never stored by us.
  • Invoice (companies): company name, organisation number, address and invoice email, together with the contact person’s details. The organisation number may be checked against the public register of the Swedish Companies Registration Office (Bolagsverket).
  • Waiting list: email address and the evening you wish to be notified about.
  • Mailing: email address and language.
  • Chat with Marine: what you write in the chat box. The conversation is not stored by us once the reply has been given. Please do not enter sensitive information in the chat.
  • Technical data: IP address, browser and time in the web server’s logs, and temporarily the IP address to limit misuse of forms and the chat (cleared automatically within a day).

Purpose and legal basis

  • Handling bookings, payments, invoices and enquiries: the contract with you, or our legitimate interest when you represent a company.
  • Sending our mailing and information about our activities: your consent, which you can withdraw at any time via the unsubscribe link in the mailing or by emailing us.
  • Notifying you when a seat becomes available on a fully booked evening (waiting list): your consent.
  • Answering questions in the chat: our legitimate interest in providing good service.
  • Bookkeeping and accounting: legal obligation under the Swedish Bookkeeping Act.
  • Operating, securing and improving the website: our legitimate interest.

We never use your details for purposes other than those you have been informed of, and we never share them with third parties for marketing.

Who receives the data

To run the website and our services we use the following providers. They process data on our behalf as data processors or, in the case of payments, under their own responsibility according to their terms. Data is never sold.

  • Payment: WooPayments (Automattic/WooCommerce) with Stripe as the payment processor receives the data needed to complete the payment and prevent fraud. If you choose Klarna, Apple Pay or Google Pay, Klarna Bank AB, Apple and Google respectively process your data as independent controllers.
  • Mailing: Mailchimp (Intuit Inc., USA) stores the email addresses for our mailings.
  • Chat: replies are generated by an AI model from Anthropic (USA). What you write is sent there so that a reply can be given, together with our own information about the business.
  • Hosting and email: Oderland Webbhotell AB (Sweden).

Transfers to countries outside the EU/EEA are made only to recipients covered by an adequacy decision of the European Commission (EU–US Data Privacy Framework) or protected by standard contractual clauses.

Retention

  • Data connected to paid bookings, payments and invoices is kept for seven years under the Swedish Bookkeeping Act.
  • Enquiries that do not lead to a booking are kept for as long as needed to handle the matter.
  • Email addresses for the mailing are kept until you unsubscribe.
  • The waiting list is used only for the evening in question; you can ask us to remove you at any time.
  • Chat conversations are not stored.
  • Server logs and temporary IP data are cleared continuously.

Your rights

You have the right to access the data we hold about you, request rectification or erasure, object to processing, request restriction, withdraw your consent and request data portability. Contact us at info@gastrovin.se to exercise any of these rights. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

See also our cookie information, our terms and our refund policy.

Last updated 23 August 2026.