Privacy Policy

1. Data Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Manuel Guttmann
[Address to be added]
Email: [Email to be added]

2. Data We Collect

When using TripForge, we collect the following data:

• Account data: Email address and display name upon registration
• Travel data: Destination, travel dates, number of travellers, preferences, departure airport and accommodation address that you enter when creating a trip
• Usage data: Access times, page views and interactions with the website
• Click tracking: Clicks on affiliate links (partner, timestamp, associated trip)
• Technical data: IP address, browser type, operating system, referrer URL

3. Purpose of Processing

• Provision and improvement of the service (trip generation, user account)
• Personalisation of generated travel websites based on your input
• Brokering travel offers via affiliate partners (hotels, flights, activities)
• Analysis and optimisation of our offering
• Fulfilment of legal obligations (e.g. retention requirements)

4. Legal Basis

The processing of your data is based on the following legal grounds:

• Art. 6(1)(a) GDPR — Consent (e.g. for marketing cookies)
• Art. 6(1)(b) GDPR — Performance of a contract (provision of the service, trip generation)
• Art. 6(1)(f) GDPR — Legitimate interest (analysis, fraud protection, optimisation)

5. Retention Period

We store your data only for as long as is necessary for the stated purposes:

• Account data: Until deletion of your account
• Trip data: Until deletion of the trip or the account
• Affiliate click data: 12 months after the click
• Server logs: 30 days

6. Cookies

TripForge uses the following types of cookies:

Essential Cookies

Necessary for the operation of the website (e.g. authentication, session management). Legal basis: Art. 6(1)(b) GDPR.

Functional Cookies

Store your preferences such as dark mode setting and checklist progress (localStorage). This data remains exclusively on your device.

Marketing and Affiliate Cookies

Our affiliate partners (e.g. Booking.com, GetYourGuide, Kiwi.com) set their own cookies when you click on affiliate links. These cookies are used to attribute bookings. Legal basis: Art. 6(1)(a) GDPR (consent).

7. Data Processors and Third Parties

We work with the following service providers:

For the transfer of personal data to the USA, we rely on the EU-U.S. Data Privacy Framework or on Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR.

8. Your Rights

You have the following rights with regard to personal data concerning you:

• Right of access(Art. 15 GDPR) — You may request information about your stored data.
• Right to rectification(Art. 16 GDPR) — You may request correction of inaccurate data.
• Right to erasure(Art. 17 GDPR) — You may request deletion of your data.
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR) — You may receive your data in a commonly used format.
• Right to object(Art. 21 GDPR) — You may object to the processing of your data.
• Right to withdraw consent (Art. 7(3) GDPR) — Consent given may be withdrawn at any time.

To exercise your rights, please contact us by email at: [Email to be added]

9. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us.