Last updated: 2026-07-20

We value your personal privacy and want you to feel secure about how we process your personal data. In this Privacy Policy, we explain what information we collect, why we collect it, how long it is retained, and what rights you have under the General Data Protection Regulation (GDPR).

This policy applies when you visit our website, book a room, stay with us, contact us, or otherwise use our services.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Linköpings City Hotell AB
Company registration number: 556458-6518
Address: Klostergatan 52 A, 582 23 Linköping, Sweden
Email: info@lvh.se
Phone: +46 (0)13-35 90 00

2. What Personal Data We Process

We only process personal data that is necessary for our purposes. This may include:

Contact Details
Name, address, email address, and telephone number.

Booking and Stay Information
Arrival and departure dates, room type, number of guests, special requests, and information required under applicable legislation.

Payment Information
Payment references and transaction information. Card details are normally handled by our payment service providers and are not stored by us.

Communication
Messages and information provided when contacting us via email, telephone, or contact forms.

Technical Information
IP address, device information, browser type, and data collected via cookies.

Communication via Our AI Chat
If you use the chat feature on our website, the questions you type are processed in order to generate a response. Your questions are sent to our AI provider (Anthropic) for processing. We store a masked version of your question (email addresses, phone numbers, and personal identity numbers are automatically removed) for up to 365 days, in order to improve the chat’s responses. We also store anonymous usage statistics, such as the number of opened conversations and which topics questions relate to, without any connection to an identifiable person. Please avoid entering sensitive personal data (e.g. health information) in the chat.

3. Why We Process Personal Data and Legal Basis

We process personal data for the following purposes and on the following legal grounds:

To Manage Bookings and Perform Contracts
Legal basis: Performance of a contract.

To Communicate With You Before, During, and After Your Stay
Legal basis: Performance of a contract and legitimate interest.

To Comply With Legal Obligations
For example, under accounting legislation.
Legal basis: Legal obligation.

To Improve Our Website and Services
For example, by analysing visitor statistics.
Legal basis: Legitimate interest or consent, depending on the type of processing.

For Marketing and Newsletters
Only if you have actively consented to this.
Legal basis: Consent.

When we rely on legitimate interest as a legal basis, we have carried out a balancing test and determined that the processing is necessary for our business and does not override your fundamental rights and freedoms.

4. How Long We Retain Personal Data

We retain personal data only for as long as necessary for the relevant purpose.

Booking and stay information is normally retained for up to 24 months after the end of the stay.

Information required under accounting legislation is retained for at least 7 years.

Marketing data is retained until you withdraw your consent.

Technical data and cookies are retained as specified in our Cookie Policy.

Masked chat history from the AI chat is retained for up to 365 days.

5. Sharing of Personal Data

We may share personal data with trusted recipients who process data on our behalf, for example:

Payment service providers

Booking systems and IT service providers

Accounting firms and auditors

Authorities when required by law

We never sell your personal data to third parties.

IT and AI service providers (including our AI-powered chat provider)

6. Transfers to Third Countries

If personal data is transferred to countries outside the EU or EEA, we ensure that the transfer is carried out in accordance with GDPR, for example through the use of Standard Contractual Clauses or other approved safeguards.

7. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects for you under Article 22 GDPR.

8. Your Rights

Under GDPR, you have the right to:

Receive information about what personal data we process about you

Request a copy of your personal data

Have inaccurate data corrected

Request erasure of data in certain circumstances

Request restriction of processing

Object to processing based on legitimate interest

Receive your data in a structured, commonly used, and machine-readable format

Withdraw your consent at any time

To exercise your rights, please contact us using the contact details above. To ensure that personal data is disclosed to the correct person, we may request identity verification. We will respond to your request without undue delay and no later than one month.

9. Children’s Personal Data

We process personal data relating to children only to the extent necessary to manage family and room bookings. Such processing is carried out with particular consideration for the child’s privacy and in accordance with GDPR.

10. Cookies

We use cookies and similar technologies on our website. More information about the cookies we use, their purpose, and how you can manage your preferences can be found in our Cookie Policy.

11. Security

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or misuse.

12. Changes to This Policy

We may update this Privacy Policy when necessary. The most recent version is always available on our website.

13. Contact and Complaints

If you have any questions about this Privacy Policy or our processing of personal data, you are welcome to contact us.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).