Privacy Policy

Who is responsible for your data?

The Hammock Experience is run by two private individuals, Jan Clingston and Henrik Löfgren, who are joint data controllers. Together we decide why and how your personal data is processed.

If you have questions about your personal data, or want to exercise any of your rights, email us at thehammockexperience@gmail.com. You can contact either of us.

What data do we collect?

When you send a booking inquiry, we store:

• Name
• Email address
• Phone number
• Number of guests
• Preferred date and, if given, an alternative date
• Your message, if you write one
• The date and time the inquiry was sent
• The language you used (Swedish or English)

Why do we process your data?

We do not use your data for marketing and we do not send newsletters.

• To receive and handle your booking inquiry
• To contact you about your inquiry
• To plan and arrange the experience you asked about
• To give you relevant information ahead of a possible booking
• To meet legal obligations where required

Legal basis

When we handle your inquiry and plan a trip, we do so to take steps at your request before a possible agreement is entered into (Article 6(1)(b) GDPR). You therefore don't need to give separate consent to send an inquiry.

Where the law requires us to keep certain information, for example for accounting if a booking goes ahead, we do so to comply with a legal obligation (Article 6(1)(c) GDPR).

Where is the data stored?

Your inquiries are saved in a private Google Sheets spreadsheet that only the two of us can access. Google processes the data on our behalf.

The website is built and run with Lovable, and pages are delivered through Cloudflare's network. When you submit the form, your details pass through Lovable's technical services on their way to the spreadsheet. Emails to us are handled in Gmail.

Google (Google Sheets and Gmail) and Cloudflare may process data outside the EU/EEA, including in the United States. Both Google LLC and Cloudflare, Inc. are certified under the EU–US Data Privacy Framework, which the European Commission has decided provides an adequate level of protection.

Lovable is run by a Swedish company, Lovable Labs AB. Lovable in turn uses sub-processors, and we have not been able to confirm exactly where they process data or which safeguards apply to our particular use.

How long do we keep the data?

We retain personal data from booking inquiries that do not result in a completed booking for a maximum of 12 months after our last contact with you. After this period, the data is deleted or anonymised unless a legal obligation requires us to retain it for longer.

For completed bookings, certain information may need to be retained for longer to comply with accounting or other legal obligations.

Deletion is carried out manually by the two of us. There is no automatic purging of the spreadsheet.

How do we protect your data?

The spreadsheet is private and accessible only to the two of us, through sign-in to our own accounts. The website is delivered over an encrypted connection (https).

We do not sell your personal data and do not share it with anyone beyond the providers needed to run the website and handle booking inquiries.

Your rights

Under the GDPR you have the right to:

• Find out what data we hold about you and get a copy of it
• Have inaccurate data corrected
• Have your data erased
• Ask us to restrict processing
• Object to processing
• Receive your data in a machine-readable format (data portability)
• Withdraw a consent, where processing is based on consent. Sending a booking inquiry does not require such consent.

Complaints

Please contact us first at thehammockexperience@gmail.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Automated decision-making

We use neither automated decision-making nor profiling. We read and answer your inquiry ourselves.

Cookies and similar technologies

We don't use cookies for analytics, tracking or marketing, and no social media pixels.

The website stores a single setting in your browser (local storage): the language you chose, so the site opens in the right language next time. It isn't sent to us or anyone else, and you can remove it by clearing site data in your browser.

The fonts are hosted on our own website, so your browser does not contact Google or any other service to load them.

Changes

If we change how we handle personal data, we'll update this page and the date above.