Effective Date: 18. nov 2024
Planit.eu ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, and protect your personal data when you use our platform ("Platform") to log in, browse, or book experiences. It also explains your rights under the General Data Protection Regulation (GDPR) and how to exercise them.
1. Who We Are
Planit.eu operates an online booking platform for experiences. For the purposes of data protection laws, we act as the Data Controller when processing your personal data.
Contact Information:
Email: [email protected]
Address: Via Generale Guisan 33a, 6900 Massagno, Switzerland
2. Data We Collect
We may collect and process the following categories of personal data:
a) Data Provided by You
Account Data: When you log in with Google or Facebook, we may collect your name, email address, and profile picture (as permitted by the respective login service).
Booking Information: Details about the experiences you book, including dates, preferences, and payment confirmation.
Communication Data: Any correspondence with us, including inquiries or support requests.
b) Data Collected Automatically
Usage Data: Information about your interactions with our platform, such as pages visited, clicks, and time spent on the platform.
Device and Technical Data: IP address, browser type, operating system, and cookies.
c) Third-Party Data
When you log in using Google or Facebook, we may receive additional data from these providers in compliance with their respective privacy policies.
3. How We Use Your Data
We process your personal data for the following purposes:
Account Management: To create and manage your user account.
Booking Services: To facilitate and process your experience bookings.
Personalisation: To tailor the content and experiences displayed to your preferences.
Communication: To respond to your inquiries and provide customer support.
Legal Compliance: To comply with legal and regulatory obligations.
Analytics and Improvement: To monitor platform performance and enhance our services.
4. Legal Bases for Processing
Under the GDPR, we rely on the following legal bases for processing your data:
Contractual Necessity: To perform our contract with you (e.g., booking experiences).
Consent: When you log in using Google or Facebook or opt-in to marketing communications.
Legitimate Interests: For fraud prevention, improving user experience, and ensuring the security of our platform.
Legal Obligation: To comply with applicable laws and regulations.
5. Sharing Your Data
We may share your personal data with:
Experience Providers: To confirm and process your bookings.
Service Providers: Trusted third-party vendors who assist with platform operations (e.g., payment processors, hosting services).
Legal Authorities: When required to comply with legal obligations.
Social Login Providers: Google and Facebook, as part of the login process.
We do not sell your personal data to third parties.
6. International Data Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure adequate protection through:
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including satisfying any legal, accounting, or reporting requirements.
Retention Periods:
Account data: Retained until account deletion.
Booking data: Retained for 10 years for compliance and auditing purposes.
Communication data: Retained for up to 10 years.
8. Your GDPR Rights
You have the following rights under GDPR:
Access: Request a copy of your personal data.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data (where applicable).
Restriction: Request restricted processing of your data.
Data Portability: Receive your data in a portable format.
Objection: Object to data processing for legitimate interests or marketing.
Withdraw Consent: Withdraw your consent at any time.
To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.
9. Security Measures
We implement appropriate technical and organizational measures to safeguard your personal data from unauthorized access, alteration, disclosure, or destruction. These include:
Encryption of sensitive data.
Regular security audits and monitoring.
Access control and authentication mechanisms.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance user experience and analyze platform usage. For more information, see our Cookie Policy.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our platform. Please review it periodically to stay informed about how we handle your data.
12. Contact Us
If you have questions or concerns about this Privacy Policy, contact us at:
Email: [email protected]
Address: Via Generale Guisan 33a, 6900 Massagno, Switzerland
By using our platform, you acknowledge that you have read and understood this Privacy Policy.
