Privacy policy How we handle your personal data

In short

Take Aim Gotland – Action Center cares about your privacy. Here we describe which personal data we collect when you visit takeaimgotland.se, book an activity, buy a gift card or VIP card, or contact us – and what we do with it. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and never sell your data on.

Data controller

What data we collect

When you book an activity

Name, address, postal code, city, mobile number and email, company or organization if any, which activity you want to book, number of participants, requested date and time, the address of the venue if we come to you, and whatever you write in the message field.

When you contact us or register your interest

Name, email, phone number, VIP number if any, and your message. This also applies when you contact us by phone, SMS, email, WhatsApp or Facebook Messenger.

When you buy a gift card or VIP card

Name, contact details, payment details (for example the Swish reference), and the card number and period of validity.

When you play with us

Information you give on site, for example when renting equipment or when a guardian accompanies a participant under 18.

Guestbook and event sign-ups

Name, email and what you write, plus your IP address as protection against spam.

When you visit the website

Technical information such as IP address, type of browser and device, and which pages you visit. It is collected through cookies and similar technologies for statistics, security and protection against spam. Read more in our cookie policy.

Why we process the data

• To handle and carry out your booking – plan the activity, send a confirmation and contact you about changes. Legal basis: contract.
• Payment and bookkeeping – we must keep accounting records under the Swedish Accounting Act. Legal basis: legal obligation.
• To answer questions and enquiries. Legal basis: legitimate interest.
• To administer VIP cards and gift cards. Legal basis: contract.
• Safety on site and security on the website – for example guardian details, protection against intrusion and spam. Legal basis: legitimate interest.
• To improve the website with the help of visitor statistics. Legal basis: legitimate interest, or consent where the law requires it.
• To show names and photos in the VIP register and publish photos from activities where you are clearly visible. Legal basis: consent, which you can withdraw at any time.

How long we keep the data

• Bookings and customer contact: as long as needed to carry out the activity and handle any questions afterwards, but no longer than 24 months after the activity.
• Accounting records: 7 years under the Swedish Accounting Act.
• Contact enquiries that do not lead to a booking: no longer than 12 months.
• The VIP register: as long as the card is valid and after that until you ask us to remove the data or withdraw your consent.
• Guestbook: until you ask us to remove the entry.

Who we share data with

We only disclose data when it is needed to run the business. We use suppliers who process data on our behalf (data processors):

• Loopia AB – web hosting and email (Sweden).
• Banks and payment providers – for Swish and card payments.
• Automattic (Jetpack and Akismet) – visitor statistics and protection against spam.
• Defiant (Wordfence) – security and protection against intrusion.
• Google – reCAPTCHA as protection against spam in forms, and embedded maps.
• Meta – our embedded Facebook feed, and Messenger and WhatsApp if you choose to contact us that way.

We may also need to disclose data to authorities when the law requires it.

Transfers outside the EU/EEA

Some of the suppliers above (including Automattic, Defiant, Google and Meta) may process data in the USA. The transfer is then protected by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Cookies

The website uses cookies. Which ones and why is described in our cookie policy.

Your rights

Under the GDPR you have the right to:

• find out what data we hold about you (access request),
• have incorrect data corrected,
• have data erased, unless we are required by law to keep it,
• restrict or object to our processing,
• receive your data in a machine-readable format (data portability),
• withdraw a consent at any time.

Contact us at kontakt@takeaimgotland.se and we will help you. If you think we handle your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Changes

We may update this policy. The latest version is always available on this page.

Last updated: 24 September 2026