Privacy Policy

Adopted on 2 November 2026 | Version 1.2

Summary

This privacy policy explains how Scandic Hotels Holding AB, Swedish reg. no. 556723-5725, and the subsidiaries operating Scandic-branded hotels (Scandic Hotels AB in Sweden, Scandic Hotels AS in Norway, Scandic Hotel A/S in Denmark, Scandic Hotels Oy in Finland, Scandic Hotels Deutschland GmbH in Germany and Scandic Polen Sp. z.o.o. in Poland) (jointly "Scandic" or "we") use personal data about you as a guest, customer or supplier, for the following main purposes:

To manage your bookings at our hotels
To manage your membership in Scandic Friends and/or Scandic Sports
To send you offers and other marketing messages
To respond to your questions, requests and comments
To comply with legal obligations, such as retaining accounting records that may contain personal data

Our contact details are provided under “Who to contact if you have any questions” below.

1. BACKGROUND, SCOPE AND RESPONSIBILITY FOR PERSONAL DATA

This privacy policy explains how and why Scandic processes your personal data when you interact with us or use our services. It describes the personal data we collect, where we obtain it, the purposes and legal bases for the processing, how long we retain it, who we share it with, how we protect it and how you can exercise your rights under applicable data protection laws.

When we refer to personal data, we mean any information relating directly or indirectly to an identifiable living individual.

Scandic Hotels Holding AB is an independent data controller for customer and Scandic Friends membership data stored in the central systems used for bookings and membership administration. It is also an independent data controller for personal data processed through the Scandic website and app and for marketing and other communications with you.

Scandic Hotels Holding AB and the subsidiaries operating Scandic-branded hotels are joint controllers for processing of your personal data relating to bookings and camera surveillance at the local hotel.

The subsidiaries operating Scandic-branded hotels also act as independent controllers for limited processing activities relating to local services, such as spa treatments, restaurant reservations, parking and similar services available only at the local hotel.

When you use services provided by a Scandic franchisee hotel, the franchisee generally acts as an independent data controller and is responsible for informing you about how it processes your personal data and about your rights. Unless otherwise stated, the franchisee processes your personal data in accordance with this privacy policy. For personal data relating to your Scandic Friends membership, the franchisee instead processes the data on Scandic’s behalf and in accordance with Scandic’s instructions.

2. COLLECTION AND PROCESSING OF PERSONAL DATA

We are committed to protecting your privacy. This section explains how and why we collect and process your personal data. The details vary depending on the services you use.

2.1 Bookings

2.1.1 Hotel Reservation

When you book a hotel room, optional products and services with us, regardless of whether the booking is made via our website, via an online booking channel, via our app, via a travel agency, directly through our hotels or via our booking centres, we process your personal data for the purpose of (a) giving you the opportunity to book a room according to your wishes, (b) administering and charging for your booking, (c) confirming the booking to you (booking confirmation) and (d) providing communications related to your stay, such as information on optional products and services, via SMS, email, push notifications, and other similar contact methods.

If you are a member of our loyalty program "Scandic Friends" and you choose to enter your membership number when booking, your booking details will be saved in your member profile. If you are not a member of Scandic Friends, but wish to become one, personal data from your booking may, with your permission, be used to create a member profile. Read more about how your personal data is processed in Scandic Friends under section 2.4 below. 

Personal data that is processed	Legal basis for the processing
Identity data (e.g. name and date of birth) Contact information (e.g. email address, telephone number, address) Special categories of personal data (e.g. health data when booking a room for disabled access) If applicable, Scandic Friends membership number Other information you provide in connection with your booking (e.g. floor requests) Debit or credit card number	The processing is necessary for the performance of the contract with you (to provide hotel accommodation). For special categories of personal data, we obtain your consent.
How personal data is collected	Recipients of personal data
Depending on how you have made your booking: Directly from you when information has been provided in our web form Via the booking channel you've used From the travel agency you've used Directly from you when booking at our hotel Through your Scandic Friends membership	The Scandic hotel where you have booked a hotel room System service provider that provides and supports booking systems Service provider for customer communication e.g. SMS, e-mail and push notifications System Service Provider for Membership Programs

Retention period: 14 months after the end of your stay, unless you have a membership in Scandic Friends where your booking details are saved in your member profile for as long as the membership is ongoing. 

2.1.2 Meeting and group booking

If you book a meeting room with us, either through us directly or through our subcontractors for meeting bookings, we process your personal data for the purpose of managing, administering, following up and charging for your booking.

Personal data that is processed	Legal basis for the processing
Identity data (e.g. name) Contact information (e.g. email address, telephone number, address) If applicable, Scandic Friends membership number  Other information you provide in connection with your booking (e.g. requests for availability, allergies, equipment, etc.)	The processing is necessary for the performance of the contract with you (to provide the booking).
How personal data is collected	Recipients of personal data
Depending on how you have made your booking: Directly from you when information has been provided in our web form Via the booking channel you've used From the travel agency you've used Directly from you when booking at our hotel	The Scandic hotel where you have your booking System service provider that provides and supports the booking

Storage period: The personal data is stored for as long as it is necessary to fulfil the purpose of the processing 

2.2 Other services related to our hotels

At many of Scandic's hotels, we offer services such as restaurants and bars, breakfast, room service, minibar, pool and SPA treatments, laundry, parking, taxi order, free Wi-Fi, etc. If you use any of these services at our hotels, your personal data may be processed in order to (a) administer those bookings and use of such additional service, (b) communicate and inform you about these bookings through our communication channels (e.g., email, SMS or phone), and (c) manage the costs incurred for such additional services and/or facilities.

If, within the scope of the services above, you provide us with sensitive personal data (e.g. information about allergies or other preferences), we will obtain your consent for us to process such data in order to take into account your wishes. 

Personal data that is processed	Legal basis for the processing
Identity data (e.g. name) Contact information (e.g. email address, telephone number) Scandic Friends membership number, if applicable Possible appointment booked for the desired service Sensitive personal data (e.g. information about allergies)  Other information you provide in connection with your booking (e.g. requests for seating arrangements)	The processing is necessary for the performance of the contract with you (provision of service at our hotels).
How personal data is collected	Recipients of personal data
Directly from you when the booking has been made Via the booking channel you've used Via your Scandic Friends membership From the travel agency you've used	Companies that operate Scandic hotels or restaurants but are not part of the Scandic Group The Scandic hotel where you have booked the desired service Franchise Partners, if any, (e.g. if a reservation is made at a Franchisee's restaurant) Service provider for the booking

Retention period: 14 months after the end of your stay, unless you have a membership in Scandic Friends where your booking details are saved in your member profile for as long as the membership is ongoing.

2.3 Hotel check-in and check-out

When you stay at a Scandic hotel, we process your personal data for the purpose of (a) managing your arrival and departure from our hotel, (b) assigning you a key card to the booked room, (c) handling information about credit cards and/or other means of payment to ensure payment for your stay, (d) administering Scandic Friends member-related matters such as paying hotel bills with points,  (e) handle specific requests for your stay with Scandic according to your profile in Scandic Friends, (f) manage and possibly assess whether you qualify for a room upgrade and handle this if applicable, (g) handle payment for your stay, (h) prepare, print or send an invoice for your stay, (i) handle any customer service matters, and (j) pay commission to your travel agent (if applicable). If you fail to show up without cancellation or make your cancellation too late in accordance with Scandic's booking rules, we will process your personal data for the purpose of (a) cancelling your stay and other bookings you may have made and (b) managing, processing and settling any outstanding amounts that may have fallen due.

Personal data that is processed	Legal basis for the processing
Identity data (e.g. name) Contact information (e.g. email address, telephone number, address) Membership information (e.g. membership number and points balance) Arrival and departure dates Booking details (e.g. completed or future stay) Special categories of personal data (e.g. allergy data) Other information you provide in connection with your booking (e.g. floor requests) Information about fellow travellers Debit or credit card number	The processing is necessary for the performance of the contract with you (provision of a booked hotel room).
How personal data is collected	Recipients of personal data
Directly from you when booking and/or at check-in Via the booking channel you've used From the travel agency you've used	The Scandic hotel where you have booked the desired service Service provider for the booking

2.3.1 Handling Registration Cards

In order for Scandic to comply with  the Swedish Police Authority's regulations (PMFS 2015:6 FAP 279-1), Chapter 6, Section 13 of the Aliens Ordinance (2006:97), non-Swedish citizens staying at Scandic's hotels must fill out a registration card. Persons who are permanently resident and registered in Sweden are exempt from filling in the registration card. In connection with the completion of the registration card, we check your identity, which means that an identity document is presented for verification. No copies of the identity document are taken or saved. However, we do document the number of the identity document.

Personal data that is processed	Legal basis for the processing
Identity data (first and last name) Date of birth Domicile address Arrival and departure date Information on how the person has identified themselves (ID, driver's license, passport or other identification document) Document number  Signature and date of the person	The processing is based on a legal obligation in order to comply with the Police Authority's regulations
How personal data is collected	Recipients of personal data
Directly from you at check-in	The Scandic hotel where you have booked a hotel room The Police Authority in the event of a request

Retention period: The registration card is deleted 3 months after the date the registration card was created

2.4 Customer and loyalty clubs (Scandic Friends and Scandic Sports)

Scandic provides the loyalty clubs Scandic Friends and Scandic Sports. Scandic Friends is for those who want to earn points and other benefits when you stay at our hotels or visit our restaurants, and Scandic Sports is a membership that provides you and your sports teams with benefits (e.g. discounted prices at hotels).

If you are a member of Scandic Friends or Scandic Sports, we process your personal data for the purpose of providing, managing, administering, following up and maintaining your membership (e.g. giving you points for point-qualifying purchases). We also process your personal data for the purpose of informing, communicating, responding to inquiries from you about your membership and sending you direct marketing via SMS, email, push notifications, and other similar contact methods, including offers on services from Scandic, our Franchisees and Scandic Friends partners (a list of current Scandic Friends partners can be found here). Such direct marketing could be based on your previous interactions with Scandic including purchase history, information you have entered in your member profile, answered customer surveys, interactions with customer service, and online behaviour when using Scandic’s website or app.

If you give your consent to improved personalization, Scandic can create an even more personalised membership for you and send you personalised offers based on your interactions with Scandic Friends partners. Scandic may also share the personal data used for your personalised membership with Scandic Friends partners for analytical and marketing purposes, for example to follow up on partnerships, develop new relevant products and to tailor offers depending on your interests. Scandic Friends partners may adapt their existing communications to you based on personal data we have shared with them. None of our Scandic Friends partners will however send marketing communications to you based on the consent you give to Scandic. If you wish to stop receiving marketing communications from Scandic or withdraw your consent to improved personalization, you can do so at any time by using the links provided in the relevant digital communications or adjusting the settings in your membership account.

We may send you offers via social media and web advertising in places other than Scandic's websites, which is described in more detail in section 2.5.

We may share your personal data and other information about your membership (e.g., points balance) in accordance with section 4.

Personal data that is processed	Legal basis for the processing
Identity data (e.g. name and date of birth) Contact information (e.g. email address, telephone number, address) Membership information (e.g. membership number and points balance) Information you have entered in your member profile (e.g. preferences, requests for floors, accessible rooms) Membership information and information you have entered in your member profile with Scandic Friends partners Purchase history with Scandic and Scandic Friends partners Answered customer surveys and interactions with customer service at Scandic and Scandic Friends partners Online behaviour when using Scandic’s or Scandic Friends partners’ websites or apps Predictive scorings and profiles/segments	The processing is necessary in order to fulfil the agreement entered into with you regarding your membership in Scandic Friends/Scandic Sports. For improved personalization, we obtain your consent.
How personal data is collected	Recipients of personal data
Directly from you when you register for a Scandic Friends/Scandic Sports membership From Scandic Friends partners From your purchases and activities when you interact with Scandic, for example, stays, meetings or contacts with our customer service	The Scandic hotel you have booked Scandic Friends partners Advertising partners Customer insight and IT services providers

Retention period: Until the membership expires and a period of up to 14 months thereafter in order to e.g. be able to handle any bookings linked to the membership. Personal data used solely for creating a personalised membership is deleted at three year intervals.

2.5 Marketing in own channels and in external digital channels

We may send you direct marketing via SMS, email, push notifications, and other similar contact methods, including offers on services from Scandic, our Franchisees and our partners, if you have booked or stayed with us or used any of our services or as long as you are a member of our loyalty clubs. Such direct marketing could be based on your previous interactions with Scandic including purchase history, answered customer surveys and interactions with customer service. If you have started a booking but have not completed it, we may also send you direct marketing to remind you of the booking.

If you no longer wish to receive direct marketing from us, you can either unsubscribe from our marketing messages by clicking on the unsubscribe link in the communications we send you, or contact us as provided in section 9.

When you visit our websites and have consented to us placing cookies on your computer, you will have a more relevant and inspiring customer experience. With the help of cookie data, a personalization system can follow your interactions on the site and thus present more relevant services to you depending on which services you view, add to your shopping cart and/or purchase. If you have an account and log in, or use the same browser as a previous visit, our systems will be able to link your previous interactions with the site with your new visit. In this way, you will continue to be presented with more relevant products for you. 

We work with advertising partners such as Meta and Google, who enable us to identify and communicate with the right customer segments and create and distribute personalised ad content. We may share the information we collect about you, as well as your encrypted email address, with our advertising partners. The purpose of this is to show you relevant ads on third-party websites and apps. In order to do this, we will check your data with the database of the advertising partner in question. If a match is found, you'll receive relevant promotional content in your feed on some social media sites. If no match is found, your data will be securely destroyed. Your personal data is handled securely using a technique called hashing. This means that your data is encrypted in such a way that it cannot be read by anyone other than the recipient for the explicitly stated purpose. Each advertising partner is the data controller for its own part of the processing, including any transfer of personal data to countries outside the EEA.

If you have subscribed to our financial reports and press releases we will process your personal data to the extent required to send you such communication.

Personal data that is processed	Legal basis for the processing
Identity data (e.g. name) Contact information (e.g. email address, telephone number, address) Purchase history with Scandic Answered customer surveys and interactions with customer service at Scandic Online behaviour when using Scandic’s website or app Predictive scorings and profiles/segments	The processing is based on our legitimate interest in sending direct marketing, or your consent if we have asked for your consent to send direct marketing or if we collect data via cookies or other tracking technologies
How personal data is collected	Recipients of personal data
Directly from you when you make a booking, use our website or app or otherwise interact with Scandic	Advertising partners Customer insight and IT services providers

Retention period: We save personal data for as long as the customer relationship with you lasts, but you always have the right to object to our direct marketing via SMS, email, push notifications, and other similar contact methods. You can do this by contacting us (see contact details below) or by unsubscribing directly in the marketing message.

2.5.1 Customer surveys 

From time to time, we will send you customer surveys and also ask you to evaluate the services you have purchased, in order to give you the opportunity to influence our product and service offering. Scandic may contact you to respond to your feedback.

Personal data that is processed	Legal basis for the processing
Identity data (e.g. name) Contact information (e.g. email address, telephone number, address) Booking details (e.g. booking references)	The processing is based on our legitimate interest.
How personal data is collected	Recipients of personal data
In connection with your use of any of our services	Service provider for the management of customer surveys

Storage period: 14 months after the end of your stay, unless you have a membership in Scandic Friends where your booking details are saved in your member profile for as long as the membership is ongoing.

2.5.2 Competitions

From time to time, Scandic arranges competitions for our members via e-mails and via our social media pages. If you choose to participate in a competition we organise, we will process the personal data you provide in connection therewith, for the purpose of selecting and contacting a winner to distribute prizes.

Personal data that is processed	Legal basis for the processing
Identity data (e.g. name) Membership information if you are a member of Scandic Friends. Contact information (e.g. email address, telephone number, address) Competition entries	The processing is based on our legitimate interest
How personal data is collected	Recipients of personal data
Directly from you when you sign up to participate in a competition	Service provider for the administration of competitions

2.6 Gift card / voucher

It is possible to purchase gift cards through Scandic partners that can be used to pay for hotel rooms, be used in our restaurants or in connection with other services offered by our hotels.

In order for a gift card to be valid, we need to process your, and if applicable, the gift card recipient's personal data. 

Personal data that is processed	Legal basis for the processing
Identity data (e.g. name) Contact information (e.g. email address, telephone number)	The processing is necessary for the performance of the contract with you (provision of gift vouchers/vouchers)
How personal data is collected	Recipients of personal data
Directly from you in connection with the purchase of a gift card/voucher	The Scandic hotel where the gift card/voucher is used Gift card administration service provider Scandic Friends member database

Storage period: 14 months

2.7 Handling of personal data in e-mail

In our daily work, we communicate with guests, members, partners and employees. Some of this contact is handled by e-mail and in connection with this, we also normally process personal data.

Personal data that is processed	Legal basis for the processing
Contact information (e.g. name) E-mail address  Unstructured data that the message may contain Name and information of a third party provided by the person contacting Scandic in the e-mail	With regard to incoming e-mails, Scandic has a legitimate interest in receiving and receiving messages.  For the continued processing of personal data received by e-mail to Scandic, the legal basis depends on the purpose to which the matter is linked.
How personal data is collected	Recipients of personal data
Directly from you when an e-mail is sent to Scandic. From anyone other than the person who sent the e-mail about the third party mentioned in the message.	Employees within the Scandic Group Service Provider Managing Email Service Storage

Storage period: As long as there is a purpose to save e-mails

2.8 Legal obligations

Scandic will, as a result of law, court or government decision, process your personal data for the purpose of complying with a legal obligation imposed on us (e.g. obligations we have under the Tax Act, the Accounting Act, decisions from the police or other authorities) and the personal data that will be processed is that which is required by law, court or government decision. The personal data may include information about your name, payment information, booking details, contact details (e.g. email address, telephone number, address) or other details of your completed purchases (receipts, etc.).

Personal data that is processed	Legal basis for the processing
Personal data required by law, court or official decision. May include name, payment information, booking details, contact details (e.g. email address, telephone number, address) or other details of your completed purchases (receipts, etc.).	The processing is based on our obligation to comply with our legal obligations
How personal data is collected	Recipients of personal data
In most cases, directly from you when you have been in contact with Scandic	The authority requiring the communication of the data

Retention period: In accordance with the relevant laws in force in the Member State

2.9 Handling of customer service matters 

We or our customer service subcontractor will process your personal data for the purpose of answering, assisting, following up or handling your customer service request. This includes the processing necessary to answer any questions you have asked us by phone, chat, email, social media or any of our other communication channels. We may record phone calls and use other communications from you for training and quality improvement of our services.

Personal data and other information that you provide to us via social media in connection with a customer service case, will also be processed by the company behind the social media service (e.g. Meta). The provider of the social media channel will process your personal data as both a data processor to us (e.g. when the supplier processes data on our behalf for the purpose of reporting statistics about individuals who have communicated with us via our channels) or as a separate data controller (e.g. for the provision and administration of their service).

Personal data that is processed	Legal basis for the processing
Identity data (e.g. name) Contact information (e.g. email address, telephone number) Information about past or future bookings or other details of customer service matters	The processing is based on our legitimate interest in handling customer service matters and improving our support and services
How personal data is collected	Recipients of personal data
Directly from you when you contact us in a customer service matter	Customer service subcontractors Social media services Service providers (e.g. chat and recording of phone calls)

Retention period: Up to six months after the customer service case has been closed in order to be able to administer and offer any follow-up of your case

2.10 Social media and online reviews

We may process your personal data when you communicate with us via our social media channels (e.g. Facebook, Instagram and LinkedIn) or if you give us reviews via e.g. TripAdvisor. The purpose of the processing is to (a) be able to respond to your questions or complaints that you have written on social media, (b) monitor what is written about us and what reviews you leave about us, and (c) to be able to identify opportunities and also improve our services. It is possible to write your own content on our social platforms. Keep in mind that everything that is written on our pages will be available to everyone who visits our pages and that you should therefore be careful about disclosing your personal data on these platforms.  Please also read the respective privacy policy and cookie policy applicable to the social media platforms you use.

Personal data that is processed	Legal basis for the processing
All personal data that you write and publish on our social media platforms.	The processing is based on our legitimate interest in processing this personal data
How personal data is collected	Recipients of personal data
Directly from you when you post information on our social media platforms or when you review us	Online Reputation Monitoring Service Provider

Retention period: The data remains until the user chooses to delete or change their data

2.11 Camera surveillance at our hotels

We may use camera surveillance at our hotels for the purpose of preventing and investigating crime, accidents and/or damage to our hotels. Before any camera surveillance is carried out, we perform a balancing test in which the interests behind the surveillance at the individual hotel are weighed against the individual’s interest in not being monitored. Camera surveillance is only carried out if and to the extent we deem such surveillance necessary and the individual’s interest in not being monitored are overridden by the interests behind the surveillance.

Personal data that is processed	Legal basis for the processing
Footage of you in the camera’s line of sight	The processing is based on our legitimate interest in preventing and investigating crime, accidents and/or damage to our hotels
How personal data is collected	Recipients of personal data
By camera when you appear in the camera’s line of sight	The police and other authorities

Retention period: The camera footage is retained for as long as it is needed for our legitimate interest. The retention period may vary based on the circumstances at the individual hotel.

3. HOW LONG DO WE RETAIN YOUR PERSONAL DATA? 

We retain your personal data only for as long as necessary for the purposes described above. The applicable retention period is specified for each processing activity. When the period ends, we securely delete or anonymise the data so that it can no longer be linked to you. We may retain it for longer where required by law or in connection with legal proceedings.

4. RECIPIENTS OF YOUR PERSONAL DATA

We share personal data with franchisees, service providers and other external recipients. The categories of recipients and the reasons for sharing are set out below.

Where a recipient processes personal data on our behalf, we enter into a data processing agreement requiring it to protect the data and comply with applicable data protection laws.

Some recipients may be located outside the EU/EEA or may process personal data there. Where personal data is transferred to a country that is not recognised as providing an adequate level of protection, we use an appropriate transfer mechanism, such as the European Commission’s standard contractual clauses, and implement supplementary safeguards where required.

Recipient	Purpose	Legal basis for the transfer
Franchisees	We may share your personal data with the franchisee operating the Scandic hotel at which you book or use services. The franchisee generally processes this data as an independent controller for the purpose of providing and administering your booking, stay and other hotel services. For personal data relating to your Scandic Friends membership, Scandic remains the controller and the franchisee processes the data on Scandic’s behalf and in accordance with Scandic’s instructions.	The processing is necessary to perform the agreement with you, including providing your booking, hotel services and membership benefits.
Service providers	We may share personal data with service providers that support our operations, including providers of booking, payment, customer service, communications, marketing, analytics, IT, hosting, maintenance and security services. They may process personal data only as necessary to provide their services to us and, where they act on our behalf, only in accordance with our documented instructions.	The processing is necessary to perform our agreement with you or is based on our legitimate interests in operating, securing, analysing and improving our services and, where applicable, marketing them.
Scandic Friends Partners	We may share information from your personalised Scandic Friends membership (such as purchase history and preferences) with our partners for analytical and marketing purposes, for example to follow up on partnerships, develop new relevant products and to tailor offers depending on your interests.	The processing is based on your consent.

Other recipients

Where necessary for the purposes set out below, we may also share your personal data with other recipients.

Recipient	Purpose	Legal basis for the transfer
Public authorities	We may disclose your personal data to public authorities where required by law.	The processing is necessary to comply with a legal obligation.
Debt collection agencies	If an amount remains unpaid, we may share your personal data with a debt collection agency to recover the outstanding debt.	The processing is based on our legitimate interest in recovering amounts owed to us.
Courts, authorities and parties to legal proceedings	Where necessary in connection with a legal claim or dispute, we may share your personal data with courts, authorities, counterparties and their advisers to establish, exercise or defend our legal rights.	The processing is based on our legitimate interest in establishing, exercising or defending legal claims.
Prospective buyers, investors and advisers	In connection with a merger, reorganisation, sale or other business transaction, we may share your personal data with prospective buyers, investors and their advisers for due diligence and completion of the transaction.	The processing is based on our legitimate interest in evaluating and carrying out corporate transactions.

5. HOW IS YOUR PERSONAL DATA PROTECTED?

We use appropriate organisational and technical measures to protect your personal data against loss, alteration and unauthorised access. These include employee training, information-handling procedures and safeguards within our IT infrastructure. Our information security programme is designed to provide protection proportionate to the relevant risks.

We regularly review and update our security measures to reflect technological developments and maintain an appropriate level of protection.

6. THIRD-PARTY APPLICATIONS AND WEBSITES

Our services may contain links to third-party applications or websites that Scandic does not control. This privacy policy applies only to Scandic’s services. We are not responsible for the content of third-party applications or websites or for how their owners or operators process personal data.

7. COOKIES

Scandic uses cookies and similar technologies in its digital services. Some cookies are necessary for the services to function, while others remember your preferences, help us understand how our services are used, improve their performance and security, and personalise content and marketing. Subject to your consent, we and our partners may also use cookies to track your interactions with Scandic’s and third-party websites and apps, create audience profiles and show you relevant advertising. Information collected through cookies may include your IP address, device and browser information, and information about how you use our digital services. Where you identify yourself, this information may be linked to your Scandic Friends or customer profile.

You can manage or withdraw your cookie consent at any time through the cookie settings. Further information about the cookies we use is available in Scandic’s Cookie Policy.

8. YOUR RIGHTS

Data protection laws give you certain rights regarding our processing of your personal data. To exercise these rights, contact us using the details provided under “Who to contact if you have any questions” below.

Access to your personal data

You have the right, free of charge, to request confirmation from us that we process your personal data, as well as request access to the personal data that we process about you, together with information about the processing and your rights, a so-called register extract. 

Request rectification

If you believe that any personal data that we process about you is incorrect or incomplete, you have the right to request correction of the personal data. Scandic is not responsible for issues resulting from inaccurate personal data if you have not informed us of the inaccuracy. 

Withdraw consent with effect for the future

To the extent that we process your personal data on the basis of your consent, you have the right to withdraw your consent to the processing at any time. The revocation does not apply retroactively.

Object to processing for direct marketing purposes

You may object at any time to the processing of your personal data for direct marketing. To do so, click the unsubscribe link in a marketing message or contact us using the details below.

Object to certain processing

You may object to processing based on our legitimate interest for reasons relating to your particular situation. However, we may continue processing your personal data if our legitimate grounds outweigh your privacy interests.

Deletion

You can ask us to delete your personal data if it is no longer needed for the purposes for which it was collected or if you have withdrawn your consent. If you’d like to request the deletion of your personal data, we ask that you submit your request here.

Restriction of processing

You can ask us to limit how we use your personal data. In some cases, this may mean we cannot provide all our services to you.

Data portability

You can receive your personal data in a structured, commonly used, machine-readable format and transfer it to another data controller. Unlike the right of access, this right covers only data you have provided to us that we process automatically based on your consent or to perform an agreement.

Lodge a complaint with a supervisory authority

If you are dissatisfied with how we process your personal data or believe we have breached data protection law, you may lodge a complaint with a data protection supervisory authority. The authorities in the countries covered by this policy are:

Sweden: Swedish Authority for Privacy Protection (Dataskyddsmyndigheten)
Norway: Norwegian Data Protection Authority (Datatilsynet)
Denmark: Danish Data Protection Agency (Datatilsynet)
Finland: Office of the Data Protection Ombudsman
Germany: the competent state data protection authority
Poland: President of the Personal Data Protection Office (UODO)

9. WHO TO CONTACT IF YOU HAVE ANY QUESTIONS

Scandic Hotels Holding AB has appointed a Data Protection Officer to help ensure that we process your personal data correctly. For questions, comments or complaints about how we process your personal data or comply with this privacy policy, or to exercise your rights, please contact our Data Protection Office using the details below. 

Postal address: Scandic Hotels Holding AB, Att. Data Protection Office, Box 6197, 102 33 Stockholm, Sweden 

Email address: gdpr@scandichotels.com

Telephone number: 08 – 517 350 00

If you’d like to request the deletion of your personal data, we ask that you submit your request here.