Privacy Policy
This Privacy Policy explains how Explore Stockholm processes personal data when you use the website, make an enquiry, or book a guided culinary or market experience.
GDPR Overview
Where the GDPR applies, we process personal data on a lawful basis such as performance of a contract, legitimate interests, legal obligation, or consent, depending on the context. We limit processing to what is relevant for booking, operating, and supporting our services.
If you are in the European Economic Area, the GDPR may apply to our processing of your personal data.
GDPR Rights
Where the GDPR applies, you may have the right to access, rectify, erase, restrict, or object to processing, and to request data portability in certain cases. If processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.
Contact Information
Use the contact details below for privacy questions, rights requests, or policy-related correspondence.
Data We Collect
We may process identification and contact details, booking and payment information, group size, preferred dates and times, dietary information, meeting-point details, communication records, and technical data such as device and usage information. Where relevant, we also process information needed to confirm route suitability and to manage the guided tasting experience.
Sources of Data
We receive data from website forms, email, telephone, and other direct communications. We also generate certain technical and operational data when the website is used, and we may receive limited booking-related information from payment or service providers involved in completing the request.
Types of Cookies
We may use essential cookies for site operation, functional cookies to remember settings, and limited analytics cookies to understand how the site is used. Cookies are used only to the extent needed for security, performance, and basic service improvement.
Cookie Controls
We use standard cookie controls to manage non-essential cookies where applicable. Browser settings may be used to block or delete cookies, but some site functions may not work as intended if essential cookies are disabled.
Purposes of Processing
We process personal data to handle enquiries, assess availability, collect dietary and route-related information, confirm bookings, process payments, communicate meeting details, deliver guided tours, manage customer support, maintain records, improve website functionality, and comply with legal obligations. We may also use limited technical data to secure the website and understand basic usage patterns.
Service Providers and Partners
We may share personal data with payment processors, website hosting and technical support providers, communication tools, and other operational partners that assist with bookings, administration, and service delivery. These parties may process data on our behalf and are expected to handle it under appropriate confidentiality and security obligations.
Legal Disclosure
We may disclose personal data where required by law, court order, or a lawful request from a public authority. We may also share data when necessary to establish, exercise, or defend legal claims, or to protect our rights, users, or operations.
Depending on your location and the applicable law, you may have rights to access, correct, delete, restrict, or object to our processing of your personal data. You may also have the right to lodge a complaint with a competent supervisory authority if you believe your data has been handled unlawfully.
To exercise a privacy right, we may ask for information needed to verify your identity and to understand the scope of the request. We will respond within the time limits required by applicable law and may decline a request where a legal exception applies.
We keep personal data only for as long as needed for the relevant purpose. Booking and communication records are retained for the period necessary to manage the service and any follow-up obligations, and certain records may be kept longer where required by law or for legitimate business records.
The updated version will apply from the date stated in the revised policy. Where changes are material, we will take reasonable steps to draw attention to them through the website or other appropriate communication channels.