Your privacy at Kviberg
Kviberg Park Hotel & Conference | Privacy policy | Updated 30 October 2026
When you stay, dine, make a booking or visit us, it should be easy to understand what information we use, why we use it and what choices you have.
1. Key information for guests
We use your data to manage bookings, provide your stay or visit, take payment and answer questions. You can contact us to find out what data we hold about you and request correction or, where the rules allow it, deletion.
You can decline analytics and marketing cookies on our website. Google Analytics and Meta Pixel are blocked if you decline. You can change your choice at any time through “Cookie settings” in the footer.
We use indoor CCTV at certain entrances, exits and tills. Recordings contain images only and are normally kept for seven days. Signs in the areas covered explain that CCTV is in use.
Contact: reception@kvibergparkhotell.se | 031-395 11 00
2. When you book, stay, dine or contact us
We process information including names, contact details, booking and stay information, payment and invoicing details, correspondence and information needed for conferences and restaurant visits. If you have special requests, for example about diet or accessibility, please share only the information we need to help you.
We may receive the information from you, from someone booking on your behalf, from organisers or from booking and payment providers. The table below summarises the purposes and legal bases for processing.
| Processing | Data | Legal basis |
|---|---|---|
| Hotel bookings and stays | Booking details, contact details, dates of stay, requests | Contract; legal obligation where applicable |
| Conferences, events and group bookings | Contact persons, participant details, event arrangements | Contract or legitimate interest, depending on the relationship |
| Restaurant bookings | Name, contact details, time, party size and requests | Contract; separate assessment for any sensitive requests |
| Payments, invoicing and accounting | Payment and transaction details, supporting information for invoices | Contract and legal obligation |
| Customer service and complaints | Contact details, correspondence, case information | Contract or legitimate interest; legal obligation where needed |
| Membership and newsletters | Contact details, membership status, mailing and unsubscribe information | Contract for membership administration; consent for newsletters (a separate, voluntary choice). |
| Marketing to business contacts | Name, job role, work contact details | Legitimate interest after a balancing assessment, with the option to object; marketing rules apply |
| Web analytics and advertising measurement | Cookie identifiers, device and usage data | Consent for non-essential cookies and associated processing |
| Photography and filming at events | Photos and footage in which people can be identified | The legal basis is assessed for each use; particular protection applies to children |
| CCTV | Footage from monitored areas | Legitimate interest after a documented balancing assessment, if the conditions are met |
3. Membership, newsletters and images
You can sign up as a member. We use your data to administer your membership. Subscribing to newsletters is a separate, voluntary choice and is not required for membership. You can unsubscribe at any time using the unsubscribe link without ending your membership.
We sometimes take photos and record video at events and on our premises for communications and social media. We provide information when photography takes place, and you can let reception know if you don’t want to appear. We publish images of identifiable people only when we have a valid legal basis, such as consent where required. We take particular care when children may appear. Contact us if you have a question about a publication or wish to object to it.
4. CCTV: what you need to know
We use CCTV at certain entrances, exits and payment tills. The cameras are inside our premises and are used to prevent and investigate security incidents and protect guests, employees and property. The cameras record images only and do not record audio. We rely on our legitimate interest in security after assessing the need for CCTV and its impact on privacy.
Recordings are normally kept for seven days and then deleted. If a specific incident has occurred, we may need to keep the relevant footage for longer, for as long as necessary for an investigation or legal claims. Only authorised reception staff employed by Kviberg Arenahotell AB have access to recordings. We disclose footage only where there is a lawful basis, for example to the police following an incident.
Signs in the areas covered provide information about CCTV. You can read more here or contact us if you have questions or want to exercise your rights.
5. Cookies and your choices
We use Complianz to manage cookie consent. Google Analytics helps us understand how people use our website, and Meta Pixel is used to measure marketing performance. Both are blocked when you decline non-essential cookies. Essential cookies may be used for basic website functions.
You can open the cookie settings through the link in the footer at any time to change or withdraw your consent. The website’s cookie information includes a more detailed list of cookies, their purposes and retention periods.
6. Who can access your data?
We use providers including VisBook (hotel administration), BookVisit (online booking), EasyTable (restaurant reservations), Kustom (payments) and WordPress (website). We may also share information with booking intermediaries and other suppliers when needed to provide the service. Access is limited to authorised employees and suppliers with a relevant role. Some recipients are responsible for their own processing.
7. How long do we keep your data?
We keep personal data only for as long as it is needed for the relevant purpose, or longer if the law requires it or it is needed to handle a legal claim. Accounting records are kept in line with Swedish accounting law, generally until the end of the seventh year after the end of the calendar year in which the financial year ended. CCTV footage is normally kept for seven days. Retention periods for bookings, customer matters, memberships and mailings vary depending on the nature of the matter and whether the membership or subscription is still active. Contact us if you want to know which retention period applies to your data.
8. Transfers outside the EU/EEA
Some IT, analytics and marketing services may involve processing data outside the EU/EEA. When this happens, we must use a valid mechanism under the GDPR, such as an applicable adequacy decision or standard contractual clauses. The transfers actually made by providers need to be checked.
9. Your rights and who is responsible
Under the GDPR, you can request access to your personal data, correction, deletion, restriction and, in certain cases, data portability. You can object to processing based on legitimate interests and withdraw consent without affecting the lawfulness of earlier processing. You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
The data controller is Kviberg Arenahotell AB, company registration number 559284-7056, Krutvägen 2, 415 27 Göteborg. The business operates under the Kviberg Park Hotel & Conference brand, including the restaurant under the Glenn Sportsbar brand. Contact reception@kvibergparkhotell.se or 031-395 11 00.
We update this policy when our practices or legal requirements change. The publication date is stated when the policy is formally adopted.