Privacy policy
SMACK Varberg AB ("we", "us") values your privacy. This policy explains what personal data we collect, how we use it, and your rights under the EU GDPR (2016/679).
Data controller
SMACK Varberg AB
Vagnvägen 13, Varberg
Reg. number: 559529-3241
Email: info@smackvarberg.se
Phone: 073-7517725
What data we collect
When you visit our site or contact us, we may collect:
- Contact form: name, email, phone (optional) and message content – whatever you provide.
- Email and phone calls: content and metadata if you reach out directly.
- Technical data: an anonymised (hashed) version of your IP address is stored briefly to prevent spam (max 1 hour).
- Local storage: your light/dark theme preference is stored in your browser's localStorage. It never leaves your device.
Why we process the data
We use the data to:
- Answer enquiries about bookings, catering and other questions.
- Protect the site from spam and abuse.
- Remember your display preferences (theme).
Legal basis
We process data based on legitimate interest (Article 6(1)(f) GDPR) – being able to communicate with you as a potential guest or customer. For catering and orders, the basis is contract (Article 6(1)(b)).
How long we keep the data
Contact form messages are kept for up to 12 months after the last contact, then deleted, unless an ongoing matter requires longer storage. IP hashes for spam protection are automatically deleted after 1 hour.
Recipients of the data
Data is processed internally by us. Our hosting provider (Strato AG, Germany) handles email and web server as a data processor. The contact page displays a map from OpenStreetMap (openstreetmap.org), which means your IP address is passed to their servers when the page loads. We do not share any other data with third parties and never sell it.
Transfers outside the EU/EEA
We do not transfer data outside the EU/EEA. All data storage takes place within the EU.
Your rights
Under GDPR you have the right to:
- Request a copy of the data we hold about you (subject access).
- Have inaccurate data corrected.
- Have your data deleted ("right to be forgotten").
- Request that processing be restricted.
- Object to processing based on legitimate interest.
- Receive your data in a structured format (data portability).
Send your request to info@smackvarberg.se and we'll handle it within 30 days.
Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Swedish supervisory authority Integritetsskyddsmyndigheten (IMY).
Cookies and local storage
The site uses no cookies for tracking, analytics or marketing. We use the browser's localStorage to save your theme (light/dark) preference. This storage is functionally necessary and is not shared with anyone.
Changes to this policy
We may update this policy if our business or applicable law changes. The latest version is always available on this page with the date at the top right.