Privacy Policy

1. Data controller

Rooftopguide.com is operated by Affiliated Group AB, Östermalmstorg 5, 114 42 Stockholm, Sweden ("we", "us"). We are the controller of your personal data. Contact: info@affiliated.se.

2. What we collect

• Account data – email address and sign-in details if you create an account, plus your saved favourites.
• Usage and device data – pages visited, approximate location derived from IP, browser and device type, collected via cookies only if you consent.
• Location – your precise position, only when you press "find nearby" and allow it in your browser. It is used once to show nearby rooftops and is not stored.
• Communications – what you send us by email.

3. Purposes and legal bases

• Providing the site and your account – contract (GDPR art. 6.1 b).
• Security, fraud prevention and essential operation – legitimate interest (art. 6.1 f).
• Statistics, advertising (including Google Display Network / AdSense) and affiliate tracking – consent (art. 6.1 a). You can withdraw at any time via Cookie settings in the footer.
• Bookkeeping and legal obligations – legal obligation (art. 6.1 c).

4. Advertising

We plan to show ads served by Google. With your consent, Google and its partners may use cookies to show ads based on your previous visits to this and other websites. Without consent, only non-personalised ads are shown, using limited data. Read more in how Google uses data from partner sites and manage ad personalisation at Google Ad Settings.

5. Affiliate links

Some links to booking and hotel sites are affiliate links. When you click one, the partner may set a cookie to record that you came from us so we can earn a commission. The partner processes that data under its own privacy policy. See our affiliate disclosure.

6. Recipients and transfers

We use processors for hosting, database, email and maps, and Google for advertising and analytics. Some may process data outside the EU/EEA, in which case transfers are protected by the EU Commission's adequacy decisions (e.g. the EU–US Data Privacy Framework) or standard contractual clauses. We never sell your personal data.

7. Retention

Account data is kept while your account is active and deleted within 30 days of you deleting it. Consent choices are stored for 12 months. Accounting records are kept as required by Swedish law (7 years).

8. Your rights

You have the right to access, rectify, erase, restrict and object to processing, to data portability, and to withdraw consent. Email info@affiliated.se. You may also complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or your local supervisory authority.

9. Children

The site is aimed at adults of legal drinking age and is not intended for children under 18.

10. Changes

We may update this policy. Material changes are announced on the site. See also our Cookie Policy.