Privacy

CalenVoy is a private travel curator working only in Sweden, run as an enskild firma registered in Sjöbo. The organisationsnummer is printed in the footer of every page on this site.

For anything in this notice, write to privacy@calenvoy.com. A person reads it. We are the controller of the information described below, which means the decisions about it are ours and so is the responsibility.

These are the ways information reaches us.

When you send an enquiry

Your name, email address, and — if you give them — your phone number, the season and shape of trip you are considering, who is travelling, and whatever you write in the message box.

When you accept analytics

How pages on this site are used: which pages, in what order, roughly where in the world, on what kind of device. Nothing is collected here unless you have said yes.

Automatically, to keep the site up

Our hosting provider keeps short-lived server logs, including IP addresses, to serve pages and to spot abuse. This is ordinary infrastructure and we do not use it to build a picture of you.

When you subscribe to the newsletter

Your email address and the date you gave it, whether through the footer form or the checkbox on an enquiry. We use it only to send the occasional CalenVoy letter, and you can unsubscribe from the bottom of any of them.

To send the newsletter

Article 6(1)(a) — your consent, given when you subscribe and withdrawable at any time by unsubscribing. We delete the address when you do.

We do not ask for, and would rather not receive, passport numbers, payment card details, health information or anything else sensitive through this website. If a trip later needs any of that, we will ask for it directly and tell you why at the time.

Under the GDPR every purpose needs a lawful basis. Ours are these, and this is the part most privacy notices skip.

To answer you and plan a journey

Article 6(1)(b) — steps taken at your request before entering a contract. If you ask us to arrange something, we cannot do it without your details.

To keep a record of what was said

Article 6(1)(f) — our legitimate interest in knowing what we agreed with whom. You can object to this; see below.

To keep accounts

Article 6(1)(c) — a legal obligation. Swedish bookkeeping law (bokföringslagen) requires accounting records to be kept for seven years, and we have no discretion about it.

To measure how the site is used

Article 6(1)(a) — your consent, given through the cookie banner, and withdrawable at any time from the footer.

We do not sell personal data and we never will. A small number of companies process it on our behalf, under contract and on our instructions.

HubSpot

Every enquiry form on this site is delivered into HubSpot, which is where we keep track of conversations. Submissions go to HubSpot's EU infrastructure. HubSpot's parent company is in the United States.

Google (Analytics) and Microsoft (Clarity)

Only if you accept analytics. Both are US companies. Clarity is configured to mask text and form inputs, so what is recorded is layout and behaviour rather than what you typed.

Our hosting provider

Serves this website and holds the server logs described above.

The people who actually host your journey

Once a trip is being arranged, we pass on what a hotel, guide, kennel or driver needs in order to expect you — usually a name, dates and party size. They are independent controllers of what they then hold, under their own privacy notices.

HubSpot, Google and Microsoft are American companies, so some processing may involve transfers outside the EU and EEA. Where that happens it relies on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for details of the safeguards in place.

• An enquiry that does not turn into a journey: up to 24 months, then deleted. Travel planning is slow and people come back a season or two later; beyond that it is just clutter.
• A journey we arranged: the correspondence for as long as the relationship is live, and the accounting records for seven years, because bokföringslagen says so.
• Analytics: retained inside Google Analytics and Microsoft Clarity according to their own retention settings, which are measured in months, not years.
• Your cookie choice: twelve months, after which we ask again rather than assume.

These are rights, not favours, and exercising them costs you nothing. Write to privacy@calenvoy.com and we will answer within one month.

• A copy of what we hold about you, and an explanation of where it came from.
• Correction of anything wrong.
• Deletion — though we cannot delete what bookkeeping law requires us to keep, and we will tell you plainly if that applies.
• Restriction: tell us to hold it but stop using it while something is in dispute.
• Portability: a machine-readable copy of what you gave us.
• Objection to anything we do on the basis of legitimate interest, including our record-keeping.
• Withdrawal of analytics consent at any time, from the cookie settings link in the footer. Withdrawing does not undo measurement already taken, but it stops it there.

If we get it wrong, you can complain to Integritetsskyddsmyndigheten (IMY), the Swedish data protection authority, at imy.se. You do not need our permission and you do not need to raise it with us first — though we would rather you did, because we can usually fix it faster.

There is no automated decision-making and no profiling here. No algorithm decides whether we take your enquiry; a person reads it.

And giving us any of this is voluntary. You are not obliged to fill in a form. The only consequence of not doing so is that we have no way to reply.