Privacy policy
DRAFT TEMPLATE. This structure covers what GDPR asks a small business like this to explain. Fill in the highlighted parts, check that it matches how you really work, and have it reviewed before launch. Delete this box when done.
Last updated: [date]
Who we are
This website is run by Marshall International AB (organisation number 559424-8212, VAT number SE559424821201), trading as Dinners by Marshall International / M.I.A. Dinners, Kommendörsgatan 9, 114 48 Stockholm, Sweden. We are the controller of your personal data. Contact: [email address].
What we collect
- Contact form: your name, company, work email, phone number (optional), type of dinner, number of guests (optional) and your message.
- Quiz: your answers and, if you choose to send your menu card, your email address. We use it to send you the menu card and contact you about the event. We do not add it to any marketing newsletter.
- Emails and calls you have with us about an event.
We do not use tracking or advertising cookies, and we do not sell your data.
Why we use it, and our legal basis
- To reply to your enquiry and send you your menu card: taking steps at your request before a possible agreement, and our legitimate interest in answering business enquiries (GDPR Art. 6(1)(b) and (f)).
- To plan and run your event if you book with us: performance of a contract (Art. 6(1)(b)).
- To keep accounting records: legal obligation under Swedish bookkeeping law (Art. 6(1)(c)).
Who we share it with
Only the service providers we need to run this website and our business, who process data on our behalf under a data processing agreement: [website host, e.g. Netlify], [form service, if used], [email provider, e.g. Google Workspace / Microsoft 365]. If you book an event, we share what is necessary with venues, chefs and suppliers working on it. [If any provider stores data outside the EU/EEA, say so here and name the safeguard, e.g. the EU–US Data Privacy Framework or standard contractual clauses.]
How long we keep it
Enquiries that don't become bookings: [e.g. 12 months]. Booking details: for as long as needed to deliver the event, then as required by Swedish bookkeeping rules (generally 7 years for accounting records).
Your rights
You can ask us for a copy of your data, to correct it, delete it, restrict or object to how we use it, or to receive it in a portable format. Email [email address]. If you're unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.
Cookies
This website does not use cookies for tracking, advertising or analytics. Fonts and images are served from our own website, so your visit isn't shared with third parties such as Google. [If you add analytics later, use a cookie-free tool, or add a consent banner before setting any non-essential cookies, and update this section.]
Photo credits
Photos by [photographer name], [photographer name] and [photographer name] on Unsplash. Illustrations are our own.
Changes
We'll update this page if anything changes, and change the date at the top.