Privacy policy
Last updated: 12 November 2026.
Introduction
NRK Gruppen AB ("we", "us") respects your privacy. This policy explains how we process personal data when you visit this website or contact us. We follow the EU General Data Protection Regulation (GDPR) and Swedish data protection law.
The website is for information only. It has no contact form, no visitor accounts and no online sales or payments. You contact us by phone or email, and you book Villa Balsvik on Landfolk or directly with us.
Controller and contact details
NRK Gruppen AB, company reg. no. 556741-8826, Arkelstorpsvägen 43, 291 94 Kristianstad, Sweden, is the controller for the processing described here. Contact: peter.nilsson@villabalsvik.com, +46 730 80 02 22.
What we process, why, and for how long
| Processing | Legal basis | Recipients | Retention |
|---|---|---|---|
| Answering questions by email or phone (name, contact details, your message) | Legitimate interest | Our email provider | Up to 12 months if no booking or order follows |
| Bookings made directly with us, and kitchen and interior orders | Contract | Our email provider; accountants and authorities where the law requires | During the booking or order, then as accounting law requires |
| Accounting | Legal obligation (Swedish Accounting Act) | Accountants and authorities where the law requires | Seven years after the end of the calendar year in which the financial year ended |
| Running and protecting the website (technical server logs: IP address, time, page, browser) | Legitimate interest | Our web host, Kristensson i Skåne AB, on Amazon Web Services in Stockholm | Up to 90 days |
| Web statistics | Legitimate interest | Plausible Analytics (EU) | Aggregated statistics only, without personal data |
Bookings made on Landfolk are processed by Landfolk under its own privacy policy; we receive the details we need for your stay.
Cookies
The website sets one cookie for visitors, pll_language, which remembers the language you chose, so that the front page does not switch you back to another language. It contains only the language code and is deleted when you close your browser. We use no advertising, tracking or analytics cookies. Logged-in cookies are used only by the people who maintain the website.
For web statistics we use Plausible, which sets no cookies, collects no personal data and does not follow you between websites. The fonts are delivered from our own server, and no maps, videos or other content from third parties load when you visit the pages.
Service providers
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Kristensson i Skåne AB | Operation and maintenance of the website | Sweden | Data processing agreement |
| Amazon Web Services (Lightsail, Stockholm) | Web hosting | Sweden | EU hosting, data processing agreement |
| Plausible Analytics | Cookieless, aggregated web statistics | EU | No collection of personal data, EU hosting |
| Our email provider | EU/EEA | Data processing agreement |
We never sell or rent out personal data. We share it only with the providers above, with authorities when the law requires it, and, if the business is reorganised or sold, with the new owner, who is then bound by this policy.
Security
We protect personal data with appropriate technical and organisational measures, among them HTTPS, access control, a firewall and logging. If a personal data breach requires it, we report it to the Swedish Authority for Privacy Protection (IMY) and, where required, to the people affected, without undue delay.
Your rights
Under certain conditions you have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest. You may also complain to the Swedish Authority for Privacy Protection (IMY), imy.se. Contact us to use your rights; we answer as soon as possible and within one month, and may first need to verify your identity.
Changes
We may update this policy. The date at the top shows the latest change.