Last updated: 2026-07-21
We at Lynra handle your personal information in different contexts, such as when you book accommodation through our group booking service, sign up for activities at our villages, or use other services we provide. In this privacy statement, you will find more information about our processing of personal data. Below you will also find contact information if you have questions or require access.
We process your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable local data protection legislation.
Lynra AB, a company registered in Sweden with corporate registration number 559546-1111, having its registered office at Evenemangsgatan 48, 169 56 Solna (email: info@lynra.se), is the controller responsible for processing personal information in our booking, activity management, and operational systems.
In connection with bookings made by you or on your behalf, we process the personal information necessary to perform our contract with you (GDPR Article 6(1)(b)). This includes information you have provided to us directly through our booking form.
We process personal and company information necessary to ensure the operation of our services, such as your identity, contact details, and gender. Gender information is collected to ensure appropriate room assignments and guest safety.
This data is transmitted to our property management system for reservation processing. Booking data is not stored on our own servers after the reservation has been submitted.
We store booking records for the duration of your stay. Following your departure, we retain financial transaction and invoicing details for seven (7) years to comply with statutory accounting requirements under the Swedish Bookkeeping Act (Bokföringslag (1999:1078)). Non-financial booking details are deleted or anonymised within twelve (12) months of your checkout.
When you sign up for activities at our villages, we collect your name and company affiliation to manage event attendance and coordination.
Attendance data may be exported to coordination tools for event management purposes. Attendee records are automatically deleted 10 days after the activity ends.
When you use our canteen services, we process your name, room number, reservation ID, and meal/dietary selections to coordinate catering services and track meal counts.
Where you choose to provide information regarding dietary preferences or restrictions (which may reveal health or religious information), we process this sensitive personal data solely on the basis of your explicit consent (GDPR Article 9(2)(a)). You may withdraw this consent at any time. Canteen attendance and meal records are automatically deleted 10 days after your departure.
We process data that may include personal information for troubleshooting and correcting errors, improving our services, and ensuring the security of our systems.
We anonymise data and create statistics as far as possible, but may also need to process personal data for development, troubleshooting, and security purposes. The legal basis for this processing is our legitimate interest (GDPR Article 6(1)(f)) in securing our networks, identifying and resolving software bugs, and optimizing the performance of our web application.
If you contact us with requests or inquiries, we will process personal information you provide to answer and log your inquiry. The legal basis for this is our legitimate interest (GDPR Article 6(1)(f)) in providing customer support, or fulfilling our pre-contractual or contractual obligations to you (GDPR Article 6(1)(b)).
In addition to the processing described in this privacy statement, we may process personal data when applicable law, valid government order, or court requires or allows us to do so.
We will not disclose your personal information to third parties unless you have consented to this, or unless applicable law allows or requires us to do so.
For the purposes described in this policy, your data may be processed by trusted service providers acting on our behalf, such as our property management and event coordination systems. Our use of data processors to process information on our behalf is not considered disclosure.
We generally process and store your personal data within the European Economic Area (EEA). However, some of our trusted service providers or integrated third-party components may process data outside the EEA. Where personal data is transferred to a country outside the EEA that is not subject to a European Commission adequacy decision, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to protect your data. You may request copies of these safeguards by contacting us.
Under the GDPR, you have the following rights regarding your personal data:
To exercise your rights, please contact us at info@lynra.se. We will respond to your inquiry as soon as possible and no later than 30 days.
We may ask you to confirm your identity before allowing you to exercise these rights, to ensure that we only provide access to your personal information to you.
If you believe that our processing of personal information does not match what we have described here, or that we are in violation of data protection laws, you have the right to lodge a complaint with the relevant supervisory authority. In Sweden, the primary supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY), Box 8114, 104 20 Stockholm (imy.se).
The provision of your name, contact information, and billing details is a contractual requirement necessary to enter into and perform the booking agreement with us. If you do not provide this information, we will be unable to process your reservation or accommodate you.
We do not use your personal data for automated decision-making, including profiling under GDPR Article 22.
We use a small number of functional cookies that are necessary for our services to work correctly. These cookies help remember your preferences and prevent duplicate actions. They do not contain personal data and are not used for tracking, advertising, or analytics purposes.
If you do not want our services to place cookies on your device, you can turn off cookies in your browser. Turning off cookies may reduce the functionality of some of our services.
We are continuously working on developing and improving our services. This may change the method or extent of our processing of personal data. The information we provide through this privacy statement will therefore be adjusted and updated when necessary. We will also make changes when new rules or regulatory practices make it necessary.