Privacy policy
Last updated 2026-09-23.
Paddlakartan cares about your privacy. This policy describes which personal data we process, why, and which rights you have under the General Data Protection Regulation (GDPR).
Controller
The controller for Paddlakartan is Johannes. You reach us via the contact form.
What we process
- Contact and tips: if you contact us via the contact form or send in a place via Add a place we process what you enter (for example name, e-mail and message) so we can reply and handle your case.
- Ratings and reviews: when you review a rental, route or place we process your name, e-mail address, rating and comment. Name, rating and comment may be published after review. Your e-mail address is never shown publicly and is not stored in the site database – it is sent to us by e-mail only for moderation and possible contact. A technical (hashed) marker tied to your connection is stored briefly to counter abuse and spam.
- Technical data: when you visit the site, and when the map loads tiles from OpenStreetMap, your IP address is processed by the respective server to deliver the content. This is necessary for the page to work.
- Cookies/storage: see our cookie policy. We do not use tracking cookies without your consent.
Legal basis
Data you submit voluntarily is processed on the basis of consent (art. 6.1 a GDPR). Necessary technical processing is based on legitimate interest (art. 6.1 f) in providing a working website.
Storage
Submitted contact details are kept only as long as needed to handle your case and are then deleted. Published reviews are kept as long as they are shown on the site; you can ask us at any time to remove your review. We never sell your data on.
Your rights
You have the right of access, rectification, erasure, restriction and data portability, and to withdraw consent and lodge a complaint with Integritetsskyddsmyndigheten (IMY). Contact us via the contact form to exercise your rights.