Privacy Policy

PRIVACY POLICY

1.1 Data Controller

TripTo AB, Storgatan 63, 385 40 Bergkvara, Sweden. Corporate ID: 556666-0741. Management: Sascha Wiefel, Stefan Beck. Phone: +46 (0)8 505 422 51, Email: somed@tripto.se / datasecurity@trip-to.com.

1.2 Server Log Files & Encryption

When accessing our website, technically required data (IP address, browser type, operating system, referrer URL, date/time) is automatically processed. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security). Log files are automatically deleted after a maximum of 14 days. The entire data transfer is encrypted using SSL/TLS (HTTPS).

1.3 Bookings, Landlord Transfers, and Payments

Inquiries & Accounts: Data from contact forms or user profiles (logins, favorites) are processed based on Art. 6(1)(b) GDPR.
Intermediation: Name, email, phone, guest addresses (tax/VAT ID for businesses) are processed within a property management software (Art. 6(1)(b) GDPR).
Data Transfer: Core booking details are transferred to the respective landlord/owner of the holiday home to fulfill the rental contract (Art. 6(1)(b) GDPR).
Payments: Name, booking number, and amount are processed for bank transfers. For refunds, IBAN and BIC are required. PayPal payments are processed via link by PayPal Europe S.à r.l. et Cie, S.C.A.

1.4 Marketing, Analytics, and Social Media (Consent Required)

The following third-party integrations only execute after active consent via our cookie selection banner (Art. 6(1)(a) GDPR):

Google Analytics & Ads: Google Ireland Limited (with activated IP anonymization).
Meta Ads: Meta Platforms Ireland Limited (Facebook and Instagram advertising).
Review Widgets: Google Business Profile and Trustpilot A/S.
Social Media: Profiles on Facebook, Instagram, YouTube, X, and Pinterest (Art. 6(1)(f) GDPR).

1.5 Your Rights as a Data Subject

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), withdrawal of consent (Art. 7(3)), and objection (Art. 21). Contact: datasecurity@trip-to.com. You have the right to lodge a complaint with the lead Swedish supervisory authority Integritetsskyddsmyndigheten (IMY) (www.imy.se).

As of: October 2026