Skip to content

Privacy policy

Ett Smart Apartments respects your privacy. This policy explains what personal data we collect when you visit ettsmart.se, how we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Data controller

Ett smart hotell i Sollentuna AB (organisation number 556724-1335, registered address Sollentunavägen 133, 191 44 Sollentuna) and Stockholm Business Apartments i Kista AB (organisation number 556597-3657, registered address Finlandsgatan 64, 164 74 Kista) — both subsidiaries of Hästkraften Fastigheter AB — are the joint data controllers under Article 26 GDPR for personal data processed via this website.

Contact for privacy matters: info@ettsmart.se

2. What we collect

  • Information you give us via the booking request form: name, email address, phone number, company, role, and the message you write. Submitted only when you click "Send".
  • Technical information collected automatically: IP address, browser type and version, language preferences, pages visited, time spent on each page, referring URL. Collected via cookies and analytics scripts (see our Cookies notice).

3. Why we collect it

  • To respond to booking inquiries (legal basis: legitimate interest, GDPR Article 6(1)(f), and where you've initiated contact, contractual necessity Article 6(1)(b)).
  • To improve our website (legal basis: consent for analytics cookies, Article 6(1)(a); see Cookies notice for opt-out).
  • To meet legal obligations such as accounting and tax requirements (legal basis: legal obligation, Article 6(1)(c)).

4. Third parties we share data with

  • Cloudflare (USA / EU) — website hosting and DDoS protection. Data may transit servers in the EU and US under Cloudflare's standard contractual clauses.
  • Google (USA) — via Google Tag Manager and Google Analytics, for visitor analytics. Anonymised IP addresses; data transferred under Google's EU-US Data Privacy Framework certification.
  • Cloudflare Email Workers — transactional email delivery for the contact form.

We do not sell your personal data. We do not share it with third parties for marketing purposes.

5. How long we keep it

  • Contact-form messages: retained for 24 months after the conversation closes.
  • Booking records: retained for 7 years in line with Swedish accounting law (Bokföringslagen 1999:1078).
  • Analytics data: aggregated, retained for 14 months in Google Analytics, with anonymised IP.

6. Your GDPR rights

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability (receive your data in a machine-readable format)
  • Withdraw consent at any time (for processing based on consent)
  • Lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se

To exercise any of these rights, email info@ettsmart.se. We respond within 30 days.

7. Cookies

This site uses cookies for analytics and security. See our Cookies notice for the full list and opt-out instructions.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date below indicates when. Material changes will be highlighted on this page for at least 30 days.

Last updated: 2026-05-08