Privacy policy

VDK AB is the controller for Gran Camp, company registration number 559467-3419. Postal address: Korpens Väg 13, 311 40 Falkenberg, Sweden.

When you send a booking request or contact us, we process your name, phone number, optional email address, selected package, language and message content. A saved draft also contains your email, selected options, source page, approximate country and a pseudonymous visitor ID. After analytics consent, we process a pseudonymous ID, pages visited, interactions, broad device information, approximate location and traffic source.

Booking requests are processed to take steps at your request before entering into a contract. General customer service and secure operation rely on VDK AB’s legitimate interests in answering enquiries and protecting the service. Analytics, marketing identifiers and voluntary use of AI conversations for improvement rely on consent.

Necessary cookies keep the website working and retain language and cookie choices for no more than 180 days. Analytics and marketing identifiers do not start without the relevant consent; no external advertising pixels are used. You can change or withdraw consent in Cookie settings. When analytics consent is withdrawn, cookies and local storage are cleared and the website requests deletion of the linked analytics record from our database. If the request fails, the scheduled 180-day cleanup removes the record.

Your message and the necessary conversation history are sent to OpenRouter and xAI to generate a response. Routing is technically limited to xAI endpoints with Zero Data Retention, provider data collection denied and no fallback provider. Do not enter sensitive personal information in the chat.

A conversation may be used to improve the assistant only after separate active consent. Email addresses and phone numbers are removed before review, but the remaining text may still make a person identifiable. You can withdraw consent by clearing the choice before your next message; no new messages will then be used for improvement.

Booking requests, saved drafts, AI conversations, unanswered questions, analytics data, and security and server logs are kept for no more than 180 days. Information may be deleted sooner, for example after consent is withdrawn or when it is no longer needed.

The website and database run on a Hostinger VPS in Frankfurt, Germany. Forms are handled by our own application and database; no external email provider is configured. AI messages are processed by OpenRouter, Inc. and xAI in the United States. OpenRouter’s DPA contains the European Commission’s Standard Contractual Clauses for the transfer from the EU/EEA. Hostinger’s DPA contains the same clauses for applicable onward transfers outside the EU/EEA.

Depending on the circumstances, you may request access, correction, deletion or restriction, object to processing and receive applicable information in a portable format. You can withdraw consent at any time without affecting earlier lawful processing. You can also complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).

For privacy questions or to exercise your rights, use the protected form on the contact page or write to VDK AB at the postal address above.

23 August 2026.