# Privacy policy

Updated: 2026-10-31

## Data controller
Hotell Leksand AB (reg. no. 556620-5620), Leksandsvägen 7, 793 31 Leksand, Sweden. Email: reception@hotelleksand.se. Phone: +46 247 145 70.

## The Kulla chat
The Kulla chat is an AI assistant. We do not store the content of conversations. Questions to Kulla are sent via the Lovable AI Gateway to a language model from OpenAI to generate the answer, and may be processed outside the EU under the European Commission's standard contractual clauses. To prevent abuse we count questions per visitor using a short-lived hash of the IP address; it is kept only in memory for at most 10 minutes and is never linked to what you write. The ongoing conversation is kept only in your browser (sessionStorage) and is deleted when you close the chat. If you have accepted statistics cookies, we record that the chat is used (not what you write). Please do not share personal details or booking numbers in the chat.

## What we collect

- Cookies: necessary cookies so the website works. Analytics and marketing cookies are only used if you consent in the cookie settings.
- Bookings: booking data is handled in our booking system Nitesoft, not on this website.

## Why we process the data

- To make the website work.
- To measure and improve the website, if you consent.

## Legal basis
Consent for analytics and marketing cookies. Necessary cookies are used to provide the website.

## How long we keep data
Your cookie choices are stored in your browser until you change or clear them.

## Your rights

- Access the data we hold about you.
- Have incorrect data corrected.
- Have your data deleted.
- Withdraw your consent at any time.
- Complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

## Google Analytics and Cookiebot
We use Google Analytics through Google Tag Manager to measure page views, website use, booking clicks and booking confirmations. Measurement may include the page address, technical device and browser information, and cookie identifiers when you accept analytics cookies. Google receives the analytics data. Cookiebot manages your consent choices and consent records, including the time, choices and information shown. Google Consent Mode adjusts measurement to your choices; limited signals without analytics cookies may be used when consent is denied. We do not send chat content or guests' names, email addresses and phone numbers as event parameters.

## Change your cookie choices
You may change or withdraw your consent at any time through Cookie settings here or in the footer. Questions about your data: reception@hotelleksand.se.