Privacy Policy

1. Introduction

Orvars AB ("we", "us", "our"), a company registered in Sweden, operates the website oburgers.se. We are committed to protecting your privacy and your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Swedish data protection legislation.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website.

2. Data Controller

3. Personal Data We Collect

3.1 Contact Form

When you use our contact form, we collect the following information:

• Name
• Email address
• Phone number
• Message content

Legal basis: Legitimate interest (to respond to your inquiry) or consent.

Retention period: We retain your contact information for up to 12 months after your inquiry has been handled, unless longer retention is required for legal purposes.

3.2 Automatically Collected Information

When you visit our website, the following technical information may be collected automatically:

• IP address
• Browser type and version
• Operating system
• Pages visited and time of visit
• Referring URL (where you came from)

4. Third-Party Services

Our website uses the following third-party services that may collect personal data:

4.1 Google Maps

We use Google Maps to display our restaurant's location. When you load the map, Google may collect data according to their privacy policy.

• Google Privacy Policy
• Google Maps Platform Terms of Service

4.2 Google Places API (Customer Reviews)

We use Google Places API to display customer reviews from Google. This service is operated by Google LLC and is governed by:

• Google Privacy Policy
• Google Maps Platform Terms of Service

4.3 Google Analytics

We use Google Analytics 4 (Measurement ID: G-FNG72KRV8W) to analyze how the website is used. This service collects anonymized statistics about visits, including page views and user behavior. All data is anonymized and is not shared with third parties for advertising purposes.

Legal basis: Consent (Article 6.1.a GDPR). Google Analytics is only loaded after you have given your consent via our cookie banner.

• Google Privacy Policy
• Google Analytics data protection

4.4 Instagram (Meta)

We display images from our Instagram account (@oburgerslund) on the website. This integration is operated by Meta Platforms, Inc. and is governed by:

• Meta Privacy Policy
• Instagram Terms of Use

5. Cookies

Our website uses cookies to improve your experience. Cookies are small text files stored on your device.

5.1 Types of Cookies We Use

• Necessary cookies: Required for the website's basic functions.
• Functional cookies: Store your preferences for a better experience.
• Third-party cookies: Placed by third-party services such as Google Maps and Instagram to enable their features.

5.2 Managing Cookies

You can manage and delete cookies through your browser settings or by clicking "Cookie Settings" at the bottom of the page. Please note that blocking certain cookies may affect the website's functionality.

For complete information about all cookies we use, see our Cookie Policy.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request correction of inaccurate data.
• Right to erasure: You have the right to request deletion of your personal data under certain circumstances.
• Right to restriction: You have the right to request restriction of processing of your personal data.
• Right to data portability: You have the right to receive your data in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interest.
• Right to withdraw consent: If processing is based on consent, you may withdraw it at any time.

To exercise your rights, please contact us at post@oburgers.se.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. This includes the use of SSL/TLS encryption for data transmission.

8. Data Transfers Outside EU/EEA

Some of our third-party service providers (Google, Meta) may transfer data to servers outside the EU/EEA, including the USA. These transfers are carried out in compliance with GDPR through the use of Standard Contractual Clauses or other approved transfer mechanisms.

9. Complaints

If you believe that we are not processing your personal data correctly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY):

10. Changes to This Policy

We may update this Privacy Policy as needed. Any changes will be published on this page with an updated date. We recommend that you review this policy regularly.