Privacy
Version 1.0 · in effect from —
This policy describes what personal data we process in the service Triparo.eu (https://triparo.eu), why, on what basis, for how long and what rights you have. We describe what the service actually does — without generalities.
1. Who is the administrator of personal data
The administrator of personal data is [operator_name], [operator_address], [operator_ids]. In all matters related to personal data, write to [contact_email].
2. What data, why and on what basis
| Target | Data | Legal basis |
|---|---|---|
| Browsing the service without an account | technical connection data (IP address, page address, time) in the server log; session ID | Article 6(1)(f) of the GDPR — operation and security of the service |
| User account | email address, display name, password abbreviation (we don't know the actual password), language, creation and login dates, IP address abbreviation of last login; when logging in via CCiL — CCiL account ID, email address and name sent by CCiL | Article 6(1)(b) of the GDPR — contract for account management (terms of service) |
| Opinions, ratings, "helpful", photos, new object submissions, proposal changes | content, rating, date, display name (publicly shown with opinion and photo: "sent by") IP address abbreviation at opinion | Article 6(1)(b) of the GDPR (service function use); Article 6(1)(f) of the GDPR (moderation and spam protection) |
| Business owner verification and business panel | account data, verification method (domain email address, object address code sent, phone code given, document), company data from public registers (KRS, REGON, CEIDG — in case of solo business, it can be person's data), opinion answers | Article 6(1)(b) of the GDPR; Article 6(1)(f) of the GDPR (confirmation that object is managed by authorized person) |
| Service usage statistics | entered search phrases and events in the interface (e.g., opening an object, clicking a tooltip) — with a one-day shortened session identifier, without IP address and without linking to an account | art. 6 para. 1 lit. a GDPR — only upon your consent („Accept” in the cookie pop-up) |
| Trips and Favorites | without an account: favorite list in your browser's memory, trip associated with session; with an account: saved in database | art. 6 para. 1 lit. b GDPR |
| Traveler profile (optional) | Interests, budget, trip with children or pets, mode of transportation, and – if you select it – need for accessible places; used solely to determine the order of suggestions and the 'Matching' indicator visible only to you | Article 6 (1) (a) of the GDPR — Your consentYour consent, also with information on availability Article 9 (2) (a) of the GDPR; You withdraw your consent by deleting your profile (Account → Traveler Profile) |
| Emails related to your account | Email address; email content (address verification, password reset, moderation decisions, verification codes) | art. 6 para. 1 lit. b GDPR |
| Your cookie settings in the file menu | Type of consent, policy version, date, IP address and browser shortcuts | Article 6 (1) (c) of the GDPR in conjunction with Article 7 (1) of the GDPR — obligation to demonstrate consent |
| Security, backups, claims prosecution | Server event log, database copies | Article 6 (1) (f) of the GDPR |
Providing data is voluntary. You will not be able to create an account without an email address and password; You will not be able to add reviews or photos without an account.
3. What is visible publicly
Only the following are visible publicly: your displayed name at a review and when sending a photo, review content and rating, photos after approval, as well as the owner's response. We do not show anyone your email address. You choose your displayed name yourself — it does not have to be a first and last name.
We remove metadata (e.g., GPS location from the phone and camera model) from photos before they are published.
4. Moderation and automatic evaluation of reviews
Every review gets an automated spam probability result (e.g., links, phone numbers, repetitions, many reviews in a short time) before publication. The score orders the moderation queue; reviews with a very high score go to a separate queue and are not published. The moderator decides on publication. We do not make decisions that have legal effects concerning you solely automatically (Art. 22 GDPR).
5. Who we share data with
- Hosting provider, on whose servers the service and database operate, and mail provider sending messages — as data processors acting on our instructions.
- CoreInfra infrastructure services (coreinfra.eu), if enabled: login via CCiL, forwarding of email messages, intrusion protection (on failed login: entered email address and IP address), service error reports (URL of the page where the error occurred).
- OpenStreetMap Foundation — we display maps from OpenStreetMap tile servers; your browser connects to them directly and sends them your IP address and browser data (policy: osmfoundation.org). The foundation is headquartered in the United Kingdom, for which the European Commission has determined an adequate level of data protection.
- OpenStreetMap search services (Nominatim, Overpass) — when you search for an object not yet in the catalogue, the entered query is sent to them by our server (without your IP address). Do not enter personal data into the search box.
- Public authorities — only when required by law.
We do not sell data, nor do we use external analytics or advertising tracking scripts. Object content (not user data) can be translated automatically.
6. How long we retain data
- Account — until it is deleted. Unconfirmed accounts are deleted after 30 days.
- Traveler profile — until you delete it or delete the account.
- Message keys (address confirmation, password reset) — expire after 48 hours or 1 hour and are deleted a week later.
- IP address hash in reviews — 90 days.
- Reviews, photos, and reported objects after account deletion remain unlinked to you (displayed without a name), unless you also choose to delete the review content when deleting the account.
- Search queries — 90 days; interface events — 180 days.
- Server event log (with IP addresses) — 7 days.
- Company registry data — 30 days from download (company data assigned to an object — as long as the object remains in the catalogue).
- Consent records — as long as they may be needed to demonstrate consent.
- Database backups — up to 5 most recent copies; older ones are overwritten.
7. Your Rights
You have the right to: access to your data and their copies, correction, deletion, restriction of processing, data portability, objection to processing based on a lawful interest, and revoking your consent at any time (without affecting the lawfulness of processing prior to revocation).
On your account, in the "Your Data" tab, you will download the complete data (JSON file) and delete the account. You can change your cookie settings through the "Cookie Settings" link in the footer. For other matters, write to [contact_email] — we will respond within a month.
You also have the right to lodge a complaint with the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the supervisory authority in your country of residence.
8. Files and browser memory
| Name | To what | How long | Kind |
|---|---|---|---|
| pwsid | session: logging in, form protection, account-free travel | until the browser is closed | essential |
| pw_consent | saving your cookie file preference | 1 year | essential |
| pw.favorites (browser memory) | favorite list without an account — stored only on your device | until you delete it yourself | necessary for the feature you are using |
We do not use third-party cookies. Statistics (point 2) are recorded on our server and only with your consent. Advertisements in the service, if they appear, are marked with the word „Advertisement”, come from our system, and do not track individuals — we count only views and clicks without personal data.
9. Children
An account can be set up by a person who has completed 16 years of age. The service is not intended for children.
10. Security
Connection is encrypted, passwords are stored only in the form of a hash, and email message keys - also as hashes. Only authorized persons have access to the administrative panel. We store IP addresses, where possible, as shortened versions with a secret key.
11. Changes to policy
We will inform you about significant changes on the website, and after changing the version we will ask again for choosing in the cookie file window. Current version: 1.0, effective from —.