Privacy Policy

1. Beyond Urban and privacy

Beyond Urban is a travel agency connecting customers with unique outdoor experiences, including trips, accommodations, and activities. We take privacy seriously, and the protection of your privacy when processing personal data is important to us. In the following information, we provide details of the processing of your personal data and your related rights. For any questions or concerns about this policy or your personal data, you can contact us via the following:

Beyond Urban AB
Eyvind Johnsons gata 4
112 16 Stockholm
Tel: +46 76 06 44 380
Email: hello@beyondurban.se


2. Type of Data Processing

We collect the following types of data:

2.1 Personal Data

  • Name

  • Email address

  • Phone number

  • Billing and payment information

  • Booking details (e.g., dates, destinations, preferences)

2.2 Non-Personal Data

  • IP address

  • Browser type and version

  • Device information

  • Cookies and usage data

2.3 Data from Third Parties

  • Payment providers for transaction details

  • Partner businesses for booking confirmations


3. How We Collect Your Data

We collect data in the following ways:

  • Directly: When you fill out forms, make bookings, or contact us.

  • Automatically: Through cookies and tracking technologies on our website.

  • From Third Parties: Such as payment processors or partner vendors.


4. Why We Process Your Data

We process your data to:

  • Facilitate bookings and reservations.

  • Communicate important information, such as booking confirmations.

  • Provide customer support.

  • Improve our website and services.

  • Fulfill legal obligations.

  • Send promotional materials (only with your explicit consent).


5. Sharing Your Data

We may share your data with:

  • Partner Businesses: To process bookings and coordinate services.

  • Service Providers: For payment processing, email delivery, and website hosting.

  • Legal Authorities: To comply with legal obligations or respond to lawful requests.

We ensure all third parties processing your data comply with GDPR requirements.

6. Newsletter

You can subscribe to our email newsletter, which we process the following data from:

  • Email address.
  • IP address.
  • Confirmation and consent of our terms and conditions and privacy policy.
  • The time and date of your consent.

The legal basis for the processing of your email address and to send you newsletters stems from your consent, Art. 6 para. 1 lit. a) GDPR. In order to obtain your consent, you will have to explicitly confirm to us that we should activate your account by a notification email asking you to confirm your email after signing up to our newsletter. 

We may also send you a newsletter if we have obtained your email address in connection with the sale of our services. When you register to our newsletter, we will personalize the content based on what pages you visit to be able to show you the information that interests you the most. However, personalized user profiles will not be created and the underlying data is anonymized.

We will send you newsletters for an indefinite period of time until you unsubscribe, or we decide to stop sending them to you. If you no longer wish to receive newsletters from us, please [click here]. 

7. Community Membership

You can register an account for the Beyond Urban Community which will provide you various benefits. By doing so, you will provide your email address and be asked for consent (Art. 6 para. 1 lit. b) GDPR) and verification of your email address and activation of your account. After activation, you will be able to log in and provide further personal data voluntarily.

We will store your data as long as you have an active Beyond Urban Membership. When you cancel your membership, we will store your data in accordance with statutory retention periods and erase it afterwards unless you have explicitly consented to a further use of your data or we have a right to store your data otherwise.

8. Account profile

When making a booking via the Beyond Urban platform, the associated email address and booking confirmation will automatically be registered with an account that stores the booking. In order to access the account, it must be activated through giving consent (Art. 6 para. 1 lit. b) GDPR) to our terms and conditions and privacy policy.

The purpose of recording your booking is to make the information accessible to you as well as the statistic information available to us which enables us to provide relevant offerts to our customers (Art. 6 para. 1 lit. f) GDPR).  

9. Application as Partner

You can submit an application to become a Partner via our website. In this case, we ask for the following data:

  • Company name
  • Street and number
  • City and postal code
  • Country/region
  • Information about the accommodation/tour/activity
  • Website
  • First and last name of contact
  • Email address
  • Phone number

The legal basis is Art. 6 para. 1 lit. a) GDPR.

The data will be used to decide whether to accept you as a Partner. All data will be erased in accordance with statutory retention periods erased, unless you have explicitly consented to a further use of your data or we have a right to store your data otherwise.


10. Cookies

We use the following types of cookies on our website:

  • Necessary Cookies: These cookies are essential for the functioning of the website. They enable core features such as security, network management, and accessibility. Without these cookies, the website cannot function properly.

  • Preference Cookies: These cookies allow us to remember choices you make on the website, such as language preferences or region. This helps to provide a more personalized experience.

  • Statistics Cookies: These cookies collect information about how visitors interact with our website. For example, they track the pages you visit most often, the time spent on the website, and any error messages. This information helps us improve the functionality and performance of the website.

  • Marketing Cookies: These cookies are used to track visitors across websites in order to display relevant advertisements that align with your interests. They are also used for advertising purposes to help us measure the effectiveness of marketing campaigns.

We process your personal data using cookies in accordance with the following legal bases under Article 6 of the General Data Protection Regulation (GDPR):

  • (a) Consent: We will obtain your consent before placing cookies on your device (except for necessary cookies). You can manage your preferences and withdraw consent at any time.
  • (b) Contractual Necessity: Some cookies are necessary to provide the services you have requested on our website (e.g., to maintain your session or remember your preferences for the duration of your visit).

When you visit our website, we will ask for your consent to place cookies on your device (except for necessary cookies). You can manage your cookie preferences and withdraw your consent at any time by adjusting your browser settings. You can choose to accept or reject cookies or delete cookies that have already been placed on your device. Please note that if you disable cookies, some features of our website may not function properly.

We may also use third-party cookies on our website, such as those used by advertising networks or social media platforms. These third parties may collect personal data about your online activities across different websites and use that information to provide you with personalized content or ads. We do not control these third-party cookies, and you should review their respective privacy policies for more information.


11. Data Security

We implement industry-standard security measures to protect your data, including encryption, secure hosting, and access controls. While we strive to ensure data security, no method of transmission is 100% secure.


12. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. Booking data may be retained for [insert time period, e.g., “up to 7 years”] for accounting and legal purposes.


13. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Access: Request a copy of your data.

  • Correction: Request corrections to inaccurate or incomplete data.

  • Deletion: Request deletion of your data (subject to legal requirements).

  • Portability: Request transfer of your data to another service.

  • Restriction: Request limited processing of your data.

  • Objection: Object to data processing, especially for marketing purposes.

  • Withdrawal of Consent: Revoke consent for data processing at any time.

To exercise these rights, please contact us at hello@beyondurban.se.


14. International Data Transfers

If you access our services from outside the EU, your data may be transferred to and processed in countries with different privacy laws. We ensure adequate protections for such data transfers.


15. Links to Third-Party Sites

Our website may link to third-party websites. We are not responsible for their privacy practices. Please review their policies independently.


16. Updates to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. The latest version will always be available on our website, and significant changes will be communicated to you. The latest version of this Policy was effective as at February, 2025.