TRA-VEL

Privacy policy

1. General information

Tra-vel processes personal data only to the extent necessary to operate the website, user accounts, contact enquiries, partnership applications and the technical attribution of referrals.

The data controller’s contact details are provided in the legal notice (Impressum) on this website.

2. Server and technical data

When you visit the website, the web server or hosting provider may process connection data needed for technical purposes. This may include your IP address, the time of access, the URL visited, browser information and technical status data.

This data may be needed for security, troubleshooting and the stable operation of the website.

3. Cookies and sessions

Tra-vel uses technically necessary cookies and session data for functions such as signing in, user accounts, form protection and referral attribution.

These include Django session cookies and CSRF cookies.

One of the technically necessary cookies is csrftoken. This cookie helps protect forms, including the contact form, against cross-site request forgery attacks.

4. Referrals

If a visitor arrives at Tra-vel through a personal referral link, a referral code may be stored in the session and in a cookie.

The referral cookie may be stored for up to 30 days.

The referral system may process the following data in particular:

• The referrer’s referral code
• Session identifier
• Path visited
• Time of the visit
• UTM parameters, such as source, medium and campaign
• Registration of an invited user
• Destination page views
• Clicks on accommodation or booking links

Tra-vel does not use browser fingerprinting for referral attribution. The application does not store an IP address in the referral tables for this purpose.

5. User accounts

A user account is created when you register. The information stored includes your username, password in protected form and technical account data.

If a user registers through a referral link, the association between that account and its referrer may be stored permanently.

6. Contact form

When you use the contact form, the information you enter is processed. This includes your name, email address, message and the time of your enquiry.

This information is used to handle your enquiry.

7. Partnership applications

Individuals and businesses may apply for a possible partnership through Tra-vel.

The information processed may include:

• Name
• Business or project
• Email address
• Country
• Website
• Social media or channel URL
• Partner type
• Information about the audience
• Planned way of promoting Tra-vel
• Optional additional information

Partnership applications are reviewed manually and may be assigned an internal processing status.

8. Host profiles, accommodation listings and enquiries

Hosts may create a profile and accommodation listings. The information processed may include a display name, email address, telephone number, country, city, website, description, accommodation details and uploaded images. Detailed contact information is not automatically displayed publicly.

Accommodation listings are stored with a moderation status, timestamps and an internal review history. Published listings may appear on destination pages and in the accommodation catalogue.

An enquiry to a host involves processing a name, email address, optional telephone number, travel dates, guest count, message, language and technical session identifier. The information is sent to the relevant host and stored to handle the enquiry. An enquiry is not a confirmed booking.

Tra-vel may also provide links to external booking or travel providers. When you visit an external provider, its privacy policy also applies.

Accommodation may also be submitted for review without a user account. In this case, Tra-vel processes a name, email address, telephone or messaging contact, accommodation details, price, location, website, uploaded photos, language, a technical session identifier and a pseudonymised IP hash for spam prevention. The application is not automatically published and may be converted internally into a moderated accommodation listing.

9. Affiliate and partner links

Some external links may become affiliate or partner links in the future. Further information is available in the affiliate disclosure.

10. Retention periods

Personal data is generally stored only for as long as necessary for its purpose or for as long as statutory retention requirements apply.

Contact form messages are generally stored for up to 365 days and then deleted automatically, unless a longer period is needed to handle the enquiry or meet legal obligations.

Test, security and technical log data may have shorter retention periods than user accounts or partnership applications.

11. Rights of data subjects

Subject to the applicable legal requirements, data subjects may request access, rectification, erasure, restriction of processing or data portability, or object to processing.

They also have the right to lodge a complaint with a competent data protection supervisory authority.

12. Security

Tra-vel uses HTTPS and technical security measures to protect the website and the data it processes.

13. Changes to this privacy policy

This privacy policy may be updated when functions, technical systems, affiliate programmes or legal requirements change.