This policy explains what happens to data on Doalu. It is written in two parts, because two different things are going on: the platform you are reading now, and the affiliate links that fund it. The platform collects nothing. The affiliate links, once a booking partner is connected, involve a third party — and that difference matters more than any single sentence about cookies.
Who is responsible. Doalu is operated by Applitron Datasystem AB (Swedish company registration number 556226-4001), Marieholmsgatan 10 C, 415 02 Göteborg, Sweden. We are the data controller for this site. For any privacy question, or to exercise any of the rights described below, write to [email protected].
The platform. Doalu sets no cookies of its own, runs no analytics, and embeds no advertising, social or tracking scripts. There are no user accounts and no newsletter. We do not collect, store, sell or share personal data about visitors, and we do not build profiles. The place-search box is the only field you can type into; what you type is used to look up matching places for that request and is not logged against you or used to identify you.
Server logs. Our hosting and content-delivery providers process technical connection data — such as IP address, timestamp, requested URL and user agent — in the ordinary course of delivering pages and protecting the service against abuse and denial-of-service attacks. The legal basis is our legitimate interest in operating a secure and available website (GDPR Article 6(1)(f)). We do not use this data to identify visitors, combine it with anything else, or build audience profiles from it. It is retained only for the short operational period our providers apply for security and diagnostics, and is not used for marketing.
Affiliate links, today. Doalu earns nothing at present. Until a booking partner is connected, a booking link opens a preview page on this site: no third party is contacted, no commission is earned, and no tracking identifier is created.
Affiliate links, once a partner is connected. When a booking partner goes live, choosing a booking link will take you to that partner through an affiliate network. This is the one place where third-party tracking enters, and it is worth being plain about it: affiliate networks work by setting a click identifier — typically a cookie or an equivalent parameter — so that a booking you make on the partner's site can be attributed to the referral from ours. That identifier is set by the network and the partner, on their domains, at the moment you follow the link, not while you browse Doalu. What is shared is the fact of the referral and the link you followed. We receive commission reports in aggregate; we do not receive your name, your payment details, or the specifics of your stay. Once you leave this site, the partner's and the network's own privacy policies govern what they collect, and we do not control them. Outbound booking links are marked as sponsored, and our affiliate disclosure explains the commercial relationship.
Your rights. Under the GDPR you have the right to request access to any personal data we hold about you, and to request its rectification or erasure, to restrict or object to processing, and to data portability. Because the platform holds no personal data about visitors, in most cases the honest answer to an access request will be that we hold nothing — we would still rather you asked than assumed. Write to [email protected] and we will respond within one month.
Complaints. If you believe we have handled your data improperly, you may lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, [email protected] — or with the supervisory authority in your own country of residence.
Changes. If a booking partner is connected, or anything else in this policy changes materially, we will update this page rather than quietly rely on the old wording. This version applies from 24 August 2026.