Privacy Policy

Last Updated: January 20, 2026

Demand Calendar AB ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.demandcalendar.com) or use our Demand Calendar Business Intelligence Platform (the "Service").

We are a company registered in Sweden (Org. nr: 556989-1186) with our registered office at Klarabergsviadukten 63, 101 23 Stockholm, Sweden.

For the purposes of the General Data Protection Regulation (GDPR), Demand Calendar AB is the Data Controller for visitor data and marketing data. For proprietary business data uploaded into our platform by our clients (resort data, guest profiles), we act as the Data Processor.

1. Information We Collect

We collect information to provide our services, improve our platform, and communicate with you.

A. Information You Provide to Us

• Account & CRM Data: When you book a demo, sign up for the Service, or download content, we collect professional contact details (name, job title, company, email, phone). This data is stored and managed in our HubSpot CRM.

• Billing Data: For paid customers, we collect billing addresses and VAT numbers.

• Support Communications: Information you provide when contacting us via email or support forms.

B. Information Collected Automatically

• Usage Data: We track how you interact with our website and platform using Google Analytics and HubSpot tracking tools. This includes pages visited, time spent, and click activity.

• Technical Data: IP address, browser type, device information, and operating system.

• Cookies: We use cookies to manage sessions, remember preferences, and track analytics. You can manage your cookie preferences via our Cookie Consent banner on the website.

2. How We Use Your Information

We use your personal data for the following legal bases:

• To Provide the Service (Contractual Necessity): Creating accounts, hosting your data on Google Cloud Platform, and processing transactions.

• To Improve Our Product (Legitimate Interest): Analyzing usage trends to optimize resort forecasting and platform speed.

• Marketing (Consent/Legitimate Interest): Using HubSpot to send newsletters, industry reports, and product updates. You can opt-out of these communications at any time.

• Compliance (Legal Obligation): Keeping records for tax purposes and complying with legal requests.

3. Sharing Your Information & Sub-processors

We do not sell your personal data. We share data only with trusted third-party service providers ("Sub-processors") who assist us in operating our business.

Our Core Sub-processors include:

All third-party providers are vetted for security and GDPR compliance.

4. International Data Transfers

Demand Calendar AB is located in Sweden. However, our primary service providers (HubSpot and Google) are headquartered in the United States.

We ensure that any transfer of personal data outside the European Economic Area (EEA) is protected by appropriate safeguards. Both HubSpot and Google participate in the EU-US Data Privacy Framework (DPF), which ensures that they provide a level of data protection equivalent to EU standards. Alternatively, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.

5. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations (e.g., Swedish bookkeeping laws require us to keep financial records for 7 years). Marketing contacts in HubSpot who remain inactive for a defined period may be automatically removed from our lists.

6. Your Data Protection Rights

Under the GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you.

• Rectify: Correct inaccurate or incomplete data.

• Erase: Request the "right to be forgotten" (subject to legal retention requirements).

• Restrict/Object: Object to processing for direct marketing purposes.

• Portability: Request your data in a structured, machine-readable format.

To exercise these rights, please contact us at contact@demandcalendar.com.

7. Security

We implement industry-standard security measures to protect your data. Our application is hosted on Google Cloud Platform, utilizing world-class encryption (at rest and in transit) and access control standards. However, no method of transmission over the Internet is 100% secure.

8. Children's Privacy

Our Service is strictly a B2B (Business-to-Business) tool intended for resort and hotel professionals. We do not knowingly collect data from children under the age of 18.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Demand Calendar AB
Klarabergsviadukten 63
101 23 Stockholm, Sweden

Email: contact@demandcalendar.com