Privacy Policy (GDPR)

Data controller: {{company}}, {{address}} · Contact: {{email}}

Data we process

• Account: name, email, password (hash), locale.
• Bookings: bookings, payments (no card data), documents.
• Profile (optional): nationality, address, emergency contact, dietary needs, preferences.
• Attribution: visit source (Host link, QR), with IP/user-agent stored only as hashes.

Your rights

Access, rectification, erasure, restriction, portability and objection — available in your account or via {{dpo}}.