Privacy & cookies

Controller

Svindyr AB, company registration no. 559324-6993, Byvägen 31, SE-277 40 Sankt Olof, Sweden, is the controller for the processing described here. Contact us at restaurangkalcium@outlook.com.

What we process and why

When you book, send an enquiry, order a gift card or New Year box, or request a quote, we process the contact and case details you provide to handle your request and prepare or perform the requested service. The legal basis is a contract or steps before entering into a contract. For general enquiries, we rely on our legitimate interest in answering them.

When you send a spontaneous application, we process the contact details, experience and other information you choose to provide for recruitment. With your consent, the application is retained for up to six months for current and future recruitment needs. You may withdraw your consent and ask us to delete the application at any time.

Information about allergies, health, religion or other beliefs is optional and should be provided only when needed. If you provide such information, we ask for separate explicit consent and record the wording, version and time of that consent with the enquiry.

If you provide the name or phone number of a recipient or another person collecting an order, you are responsible for informing them that their details are being provided to us for this purpose.

Bookings, email and newsletters

Bookings and the information you enter there are handled through the EasyTable booking system. When you submit a website form, the complete form content is transferred through Brevo to deliver the owner notification and receipt; the emails are then stored in our Microsoft Outlook mailbox. The newsletter is handled through Brevo, is based on consent and uses double opt-in. You may unsubscribe at any time.

The website hosting providers may process IP addresses and technical security logs to deliver and protect the service. Brevo may process delivery status and, depending on account and campaign settings, newsletter open and click data.

Recipients and transfers

Only authorised people at Kalcium and the providers needed for each purpose may access the data: the EasyTable booking system, Brevo for form email and newsletters, Microsoft for the Outlook mailbox, Google for visitor analytics when you have consented, and the website hosting and security providers. Providers may use subprocessors outside the EU/EEA. Such transfers must rely on an adequacy decision or the EU Standard Contractual Clauses and supplementary safeguards. Contact us for current information about the providers and safeguards involved.

How long data is retained

Retention depends on the purpose. Booking data is needed until the visit or cancellation has been handled and afterwards only for as long as needed for complaints or legal claims. Enquiries and orders are needed until the matter is closed and for the period required for follow-up, contracts or legal claims. Spontaneous applications are kept for no more than six months unless consent is withdrawn sooner. Sensitive information is removed once the requested service has been completed and the information is no longer needed for safe follow-up. Accounting records are retained as required by Swedish accounting law. Newsletter data is kept while the subscription is active; after unsubscribing, only the minimum needed to honour the opt-out is retained. Analytics data is kept for the limited retention period configured in the Google Analytics property. Technical logs follow the hosting provider’s security and retention routines.

Your rights

Subject to the conditions in the GDPR, you may request access, rectification, erasure or restriction, object to processing, and request data portability. You may withdraw consent at any time without affecting processing carried out before withdrawal. Contact restaurangkalcium@outlook.com. You may also lodge a complaint with the Swedish Authority for Privacy Protection, IMY.

Read about your rights at IMY (opens in a new tab)

Cookies

After you consent, Kalcium uses Google Analytics 4 to understand how the website is used, for example which pages are visited and interactions such as scrolling and outbound clicks. Analytics is not activated before you choose Allow analytics. Google Analytics is not used for advertising on the website; advertising storage, advertising user data and personalised advertising remain disabled. Your choice is stored locally in your browser and can be changed at any time through Cookie settings in the footer. If you close the newsletter dialog, a local timestamp is also stored in your browser for 30 days so it is not shown repeatedly. The booking page loads EasyTable, which may use the technical storage needed to display and complete the booking you requested.

Last updated 4 October 2026. Changes are published on this page.