Privacy policy

• We collect only what we need to pack your order, answer your enquiry or send the newsletter you asked for.
• We never sell your data on, and we do not use it for advertising.
• Our visitor statistics are anonymous and only start if you say yes.
• You can ask us to show, correct or delete what we hold about you at any time.

Rökeriet mellan Åhus & Yngsjö is the data controller for anything you submit on this website. That means we decide why and how the data is used — and that we are who you contact about it.

Business

Rökeriet mellan Åhus & Yngsjö

Company registration number

559242-6257

Address

Yngsjövägen 226, 296 91 Åhus, Sweden

Email

info@rokeriet.se

Phone

+46 44 24 91 21

To pack an order and hand it to the right person we need to know whose it is and how to reach you if something needs checking.

What we store

Name, phone number, email address, the pickup day you chose, any message you wrote and what you ordered.

Why

To pack the order, send the confirmation and call you if something runs out.

Legal basis

Performance of our agreement with you (Article 6(1)(b) GDPR).

For how long

24 months after the pickup day, so we can answer questions about an old order. Then it is deleted. If the order is still marked as not collected, or carries a marketing consent you have not withdrawn, it goes to a human here for a decision instead — it is then deleted once that is settled, not automatically on the day.

We never take card details on the website. Payment happens in the shop when you collect, exactly as it does when you order by phone.

What we store

Name, email address, phone number, date, number of guests, type of occasion and whatever you write in the message.

Why

To price the enquiry and come back to you with an answer.

Legal basis

Steps taken at your request before a possible agreement (Article 6(1)(b)).

For how long

24 months after the enquiry. If it turns into a booking, it is kept with the booking. If the enquiry is still unanswered by us when the time is up, it goes to a human for a decision instead of being deleted automatically.

What we store

Your email address, your first and last name if you provided them, which language you read in — and whether a letter was delivered or bounced, so we stop sending to addresses that cannot be reached.

Why

To send you the newsletter.

Legal basis

Your consent (Article 6(1)(a)). If you sign up here on the site you confirm by clicking a link in the email. If you signed up on our previous website, we carried the address over with the signup date as the evidence of your yes. You can withdraw at any time.

For how long

Until you unsubscribe. If 24 months pass without an order, a message from you or a reply to anything we sent, we ask once whether you want to stay — and remove the address if you do not answer. After an unsubscribe the address stays flagged as unsubscribed so a later import cannot add it back by accident.

What we store

Your name, your email address and your phone number if you gave it, what you write in the cover letter, the CV file you attach, which position you applied for and which language you wrote in — plus what happens to the application with us (read, interview, decision) and what we replied.

Why

To assess your application, get back to you and — where relevant — invite you to an interview. The CV file is stored in our database behind a login and is never forwarded by email.

Legal basis

Steps taken at your request before a possible employment contract (Article 6(1)(b)) for the application itself, and our legitimate interest (Article 6(1)(f)) in being able to show how the selection was made if it is questioned — the Swedish Discrimination Act gives an applicant two years. For a speculative application the basis is your consent: you choose to send it, and you can ask us to delete it at any time.

For how long

An application for an advertised position is kept for 24 months from the day it arrived and is then deleted automatically — CV file included. A speculative application is kept for 12 months. If you want your application removed sooner, just tell us.

The answer you get is always written by a human, but whoever answers may ask a language model for a draft to start from. The model never receives your name, your address, your phone number or your email address — those are masked out first, including where they appear inside your cover letter — and the CV file is never sent. No machine screens an application out; the selection is ours. The whole arrangement is described under “When we answer you with AI’s help”.

We only send you offers if you have said yes in advance. You say yes by ticking the box yourself — it is never pre-ticked, and you cannot end up subscribed by placing an order or booking a table. That is what Swedish marketing law requires for advertising to consumers, and we agree with it: a text message from a smokehouse should feel like a reminder, not like spam.

What we store

Your mobile number or email address, the language you read in, and a note of when you said yes and to what.

Why

To send the messages — and to be able to show that you really did say yes, if anyone asks.

What you get, and how often

The weekly letter, roughly once a week: the week’s counter, the lunch menu and what is happening. In between, the occasional short message when something special has come in — new smoked fish, the Christmas table opening, changed opening hours before a holiday. Never more than a few messages a month beyond the weekly letter.

Legal basis

Your consent (Article 6(1)(a) GDPR). Swedish marketing law additionally requires you to have said yes in advance before advertising may be sent to your phone or your inbox.

For how long

Until you withdraw your consent. If 24 months pass without an order, a message from you or a reply to anything we sent, we ask once whether you want to stay — and delete the number or address if you do not answer.

Every text message says how to stop it — reply STOPP and you are off the list. Every email has an unsubscribe link at the bottom. You can also call +46 44 24 91 21 or email info@rokeriet.se and say you want no more. We never ask why, and it changes nothing else: you order and book exactly as before.

The right to be left alone by direct marketing is unconditional. If you say no, we do not get to weigh that against any interest of ours — we stop, and we may not start again until you say yes anew.

We never pass your number or address on to anyone else for their marketing, and we buy no lists. The numbers on our list were given to us by the people they belong to.

The chat answers questions about opening hours, the counter, the menus and catering. Most answers come straight from our own texts. When they are not enough the question goes on to Anthropic, who run the language model behind the answer — but email addresses, phone numbers, identity numbers and postal addresses are masked out of the question first. A name you typed in yourself does go along, so it is better not to write one.

What we store

The question you type, the answer you get, the language you use and a random session id that disappears when you close the tab.

Why

To answer — and to see which questions the chat cannot handle, so we can add the answer.

Legal basis

Our legitimate interest in being able to answer visitors (Article 6(1)(f)).

For how long

90 days.

If the chat cannot answer, it offers to email the question to us instead. If you accept, we store your email address with the question so a human can reply. That address is used for nothing else.

Do not write personal identity numbers, health information or anything sensitive in the chat. It is built for questions about fish and opening hours, not for sensitive matters.

If you have placed an order, sent a catering enquiry or applied for a job with us, whoever answers may ask a language model for a DRAFT of the reply. The draft is a suggestion on a screen: one of us reads every sentence, changes what needs changing and writes your name in by hand before the email is sent. Nothing goes out automatically, and the model decides nothing about your matter.

What the model sees

The context needed to write the reply: what was ordered and the pickup day, the catering enquiry’s date, number of guests and occasion, or which position you applied for and the text of your cover letter — plus anything you wrote in a message.

What it never receives

Your name, your address, your phone number, your email address or an identity number. They are found and replaced with the words [namn], [adress] and so on before the text leaves us — including where they sit in the middle of something you wrote yourself. The CV file is never sent; the model is only told that one exists.

Why

To be able to reply quickly and personally. An answer that takes a week because nobody had time to write it serves you worse than a draft a human has read through.

Legal basis

Our legitimate interest in answering what you contacted us about (Article 6(1)(f)).

For how long

The draft is not stored with us — it sits on the screen until it is sent. The email itself and your matter are kept as described in the sections above.

Would you rather we wrote to you without AI’s help? Just say so and we will. It takes us a little longer and costs you nothing.

We want to know which pages get used — not who you are. The statistics only start once you say yes in the cookie box, and can be turned off again at any time.

What we store

Which page was shown, which domain you arrived from (the domain only, not the full address), whether the screen is phone-, tablet- or desktop-sized, and a random session id in the browser session storage.

What we do not collect

No cookies, no IP address, no name, no fingerprinting — nothing that identifies you or follows you to the next website.

Legal basis

Your consent (Article 6(1)(a)).

For how long

The session id disappears when you close the tab. Page views are kept by our operations provider for up to 12 months and are only ever read in aggregate.

As on every website, your visit leaves traces in the web server logs — IP address, timestamp and which page was requested. That is needed to run the site and to see whether anyone is attacking it. The logs are rotated away by our provider and are not used to follow individual visitors.

The legal basis is our legitimate interest in running and protecting the website (Article 6(1)(f)).

Your data stays with us and with the suppliers we need in order to run the website. Each is engaged for one task and processes the data only in order to perform that task for us — never for their own purposes. Here is who they are, what they do and where the processing happens.

SupplierWhat they do — and where

Vercel

Hosts the website itself and delivers the pages to your browser. A US company; the site is configured to run on their servers in Frankfurt, but parts of the operation may take place in the US.

Neon

The database where orders, enquiries and subscriptions are stored. The servers are in Frankfurt, inside the EU.

Resend

Sends the confirmation emails, the order emails and the newsletter. If a letter bounces or is reported as spam, the address is blocked with us so we stop sending. A US company; the emails pass through their systems in the US.

Anthropic

The language model behind the chat, behind the newsletter drafts and behind the reply drafts our staff can ask for (see “When we answer you with AI’s help”). Contact details are masked out before any text is sent there: email addresses, phone numbers, identity numbers and postal addresses. In the staff drafts your name is masked too. In the chat, only you can type a name in — better not to. Newsletter drafts are written from the week’s content, never from subscriber data. A US company; processing takes place in the US.

SmedjaAI

Builds and maintains the website, and has the technical access needed to do so. A sole trader in Skåne; the work is done in Sweden.

Vercel, Resend and Anthropic are US companies, so part of the processing takes place outside the EU and the EEA. That is also why the database sits in Frankfurt and why contact details are masked out before any text goes to the language model: what can be kept inside the EU is kept inside the EU. If you want to know which agreements govern a particular supplier, email info@rokeriet.se and we will show you.

Beyond the suppliers on this list we disclose data to no one. We do not sell it, we do not share it with ad networks, and we do not hand it to other companies for their marketing. The only exception is where an authority is legally entitled to demand it.

You decide about your data. Email info@rokeriet.se and we will answer within a month. It costs nothing.

• See what we hold about you — a copy of your data.
• Have incorrect data corrected.
• Have data deleted once we no longer need it.
• Ask us to pause the use of your data while something is being checked.
• Object to processing that rests on legitimate interest.
• Receive what you gave us in a portable format.
• Withdraw a consent. That does not undo what already happened.

We make no automated decisions about you. The chat phrases its answers using AI, and our staff may ask for a draft reply, but no model decides anything about you, your order or your application — a human reads it and sends it.

Tell us first — that is usually quickest. If you are still not satisfied you have the right to complain to the Swedish Authority for Privacy Protection (IMY), the supervisory authority for personal data in Sweden.

The Swedish Authority for Privacy Protection (IMY)

imy.se · Box 8114, 104 20 Stockholm, Sweden · imy@imy.se · +46 8 657 61 00

If we change how data is handled we update this page and change the date at the top. If the change concerns something you consented to, we ask you again rather than assuming the old answer still holds.