Privacy Policy

Your Personal Data

AR Resebyråer AB, Kungsgatan 56, 903 26 Umeå (”AR Resebyråer”, ”we”, ”us”) understand the importance of privacy for our customers and website visitors. Our goal with this policy is to clearly and transparently describe how we collect, use, display, transfer, and store your information so that you feel confident that your personal data is secure. AR Resebyråer processes all personal data in accordance with the Personal Data Act (PUL) and the General Data Protection Regulation (GDPR).

Data Controller Responsibility

AR Resebyråer is responsible for the processing of personal data on this and other websites operated by AR Resebyråer.

Contact Information

You can contact us at or by regular mail sent to AR Resebyråer, Kungsgatan 56, 903 26 Umeå. You can also contact us through our website (

Collection of Personal Data

What Personal Data Is

Personal data is any kind of information that can directly or indirectly be attributed to a living physical person. This includes, for example, name, social security number, address, email address, and phone number. It also includes, for example, booking numbers and encrypted data and various kinds of electronic identities such as IP addresses if they can be linked to physical persons.

How We Collect Personal Data and What Data We Collect

AR Resebyråer collects personal data in several ways, but primarily directly from you.

Data Collected in Connection with Booking and Travel
When you book a trip via one of our booking pages, by phone, email, or at one of our offices, we collect personal data from you to fulfill your order. This includes information about the name, date of birth, age, and gender of all travelers on the booking, and address and contact details for the main traveler. In connection with booking, we also collect payment details for the main traveler.
If the booking includes children, we collect the same information about the child as mentioned above.
When you travel with us, we also collect information about your trip. This includes, in addition to the information mentioned above, things like booking number, destination, duration of the trip, and which additional services you chose to use during the trip.

Data Collected During Personal Contact
We collect personal data from you when you contact us, for example, via email, phone, or other means. Primarily, we collect the personal data needed to respond to your query or handle your case. This includes information such as your name and booking number. Depending on how you choose to contact us, we may also collect contact details such as your email address or phone number.
During personal contact, we also collect any other personal data that you choose to provide to us. This may include, for example, information about allergies, health conditions, or other details about you or other people on your trip or booking.

Data Collected via Online Booking Systems
If you use an online booking system provided by us, we collect your email address to create the login. We also collect information about your name. In addition to this, you can enter other details such as date of birth, passport number, gender, address, and contact details.

Data Collected When You Subscribe to Our Newsletter
If you choose to subscribe to AR Resebyråer’s newsletter, we collect your name and email address to be able to send the newsletter to you. You can unsubscribe from the newsletter at any time by clicking on the unsubscribe link in our mailings or by contacting us at

Data Collected When Using Our Digital Services
When you use any of our websites or any other digital service from us, we collect data about your use of the service. Some of this data may be personal data, such as your IP address. We also collect data on how you navigate the service, what searches you perform, and which travel products you are interested in.

Data Collected from Someone Other Than You
During booking and when contacting us in various matters, it happens that a person provides personal data about one or more other people in a travel party. We assume that the person providing the data has the consent of all travelers to provide these personal details. If you have not made a booking yourself but someone else has made a booking including you, we collect personal data about you from that person. The same applies if someone else has contacted us on your behalf.

Handling and Storing of Personal Data

Legal Basis for Processing Your Personal Data

AR Resebyråer processes your personal data lawfully. It may happen that the same personal data is processed both based on the fulfillment of the travel agreement, specific consent, or as necessary to fulfill other legal obligations. This means that even if you withdraw your consent and the processing based on consent ceases, the personal data may still be retained by us for other purposes. Mainly, we process your data to fulfill a contract in which you are a party, for example, the travel conditions.

Administration of Your Trip

To be able to deliver the travel services you have ordered from us, we use your personal data in various ways. The data is used to issue tickets and travel documents, to make hotel bookings, and to process payment for the services you have ordered. If you have ordered services such as car rental, train, travel insurance, or similar, the data is used correspondingly to deliver these services.
Administration of your trip also includes the use of your data for accounting, settlement, and auditing, credit or other payment card verifications, immigration, and customs control.

Customer Care

We use your personal data to provide you with service if you contact us with questions, comments, or, for example, complaints. We use your name and booking number to identify you and your trip. We use your contact details such as email address and phone number to contact you in connection with questions and cases. We may also use all other personal data that we have collected about you to handle your question or case, depending on what is relevant in the individual case.

Mailing Information

We use your personal data to send booking confirmations, important information about your upcoming trip, and travel-related offers. These mailings are sent to the email address provided during booking.

Marketing and Personalization

If you’ve subscribed to our newsletter, we use your personal data to send and tailor the content to you. In some cases, we share data with our partners to help customize our offers and marketing to you. We use cookies for analyzing user patterns and personalization.

Service and Service Development

We use the data we collect about our customers to develop and improve our products and services. This includes analyzing user behavior in our digital services and developing our products based on customer wishes and behaviors. We primarily use anonymous or anonymized data at an aggregated level for these analyses.

Legal Requirements

Processing of your personal data may also occur to fulfill legal obligations, such as safety and accounting regulations.

Data Storage Periods

We follow good practice in the travel industry and store your personal data as long as it is necessary for the purpose of processing. The specific storage durations are detailed for different types of data.

Technical and Organizational Measures for Secure Processing of Your Personal Data

We continuously take measures to fulfill the principles of ”built-in data protection and data protection by default”. This includes continuous risk assessments and implementing necessary security measures. Our staff are regularly trained in data protection, and we have a dedicated data protection officer.

Disclosure of Personal Data

We disclose personal data to various third parties, including Microsoft for our internal work, IT service providers, payment processing partners, and travel-related service providers.

Transfer to Third Countries

As we arrange trips worldwide, personal data may be transferred to partners outside the EU/EEA area. We ensure a high level of data protection regardless of the country.

Your Rights

Necessary Processing of Personal Data and Processing Based on Consent

Processing of personal data that is necessary for us to fulfill a contract with you or to fulfill a legal obligation is permitted without consent. However, to collect and process your personal data for any other purpose, your consent is required. You provide consent for the processing of your personal data when you use our digital services or interact with our travel advisors.

Withdrawal of Consent

You can withdraw your consent at any time by contacting us using the details provided above. If you withdraw your consent, we will delete the personal data and cease processing covered by the consent.

It may happen that the same personal data is processed both on the basis of consent and because the information is necessary or supported by other rules. This means that even if you withdraw your consent and the processing based on consent ceases, the personal data may still remain with us for other purposes.

Right to Access Information About Your Personal Data

If you want to know what data we have registered about you, you can request this in writing at the above address. The registry extract is provided upon request and is free once per year.

How do you request a registry extract?

You should write and request a registry extract from AR Resebyråer. Note that your request must be submitted in writing as it should include your signature; an email is not sufficient. Mark the letter “Personal Data Extract – to AR Resebyråer’s Data Protection Officer”.

Legal support for this right with a registry extract is found in § 26 of the Personal Data Act.
The letter must contain the following:

  • Place and date
  • Signature
  • Clarification of name
  • Personal identification number
  • Address
  • Email address
  • Phone number

Right to Control Over Your Personal Data

You have the right to request that data about you be deleted, supplemented, or corrected. You also have the right to request that the processing of your personal data be limited to certain purposes and not used for direct marketing or profiling, for example.


We use cookies on our websites to improve your experience, for marketing, and for website development. The information is stored anonymously, but some personal data may be processed by cookies.

If You Want to Complain

If you believe that a company is violating the Personal Data Act or other privacy legislation, you can file a complaint with the Data Inspection Authority.