Privacy Policy
Last updated: June 15, 2026
1. Data Controller
The data controller responsible for processing your personal data is:
- Contact Email: contact@tourfixer.com
If you have any questions about how we process your personal data, please contact us at the email above.
2. Information We Collect
We collect the following types of personal data:
a. Personal Information You Provide
- Email address
- Password (stored in hashed form)
- Nickname (optional)
- Avatar image (optional, for Google login users)
b. Automatically Collected Information
- IP address
- Browser type and version
- Device information
- Pages visited and time spent
- Cookie data
c. Consent Records
- Records of your agreement to our Privacy Policy, Terms of Service, and Cookie Policy
- IP address and user agent at the time of consent
- Timestamp of consent
3. Legal Basis for Processing (GDPR Article 6)
We process your personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| User registration and authentication | Performance of a contract (Article 6(1)(b)) |
| Email verification | Performance of a contract (Article 6(1)(b)) |
| Website analytics and improvement | Legitimate interests (Article 6(1)(f)) |
| Cookie usage (non-essential) | Your consent (Article 6(1)(a)) |
| Consent record keeping | Legal obligation (Article 6(1)(c)) |
4. How We Use Your Information
- To provide and maintain our services
- To authenticate your identity and secure your account
- To send verification emails and service notifications
- To analyze website usage and improve user experience
- To prevent fraud and ensure security
- To comply with legal obligations
5. Data Retention
We retain your personal data for the following periods:
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion |
| Verification codes | 10 minutes or until used |
| Consent records | 6 years after account deletion (legal requirement) |
| Analytics data | 26 months |
6. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including:
- United States (for Google Analytics and hosting services)
- Other countries where our service providers operate
When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right to Access (Article 15): You can request a copy of the personal data we hold about you.
- Right to Rectification (Article 16): You can request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten") (Article 17): You can request deletion of your personal data under certain conditions.
- Right to Restrict Processing (Article 18): You can request limitation of processing under certain conditions.
- Right to Data Portability (Article 20): You can request your data in a structured, machine-readable format.
- Right to Object (Article 21): You can object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent (Article 7(3)): You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at contact@tourfixer.com. We will respond within 30 days of receiving your request.
8. Cookies
We use cookies to enhance your browsing experience. For detailed information about the cookies we use, please see our Cookie Policy.
You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.
9. Third-Party Services
We use the following third-party services:
- Google Analytics: For traffic analysis. Google may process your data in the United States.
- Google OAuth: For authentication (optional login method).
- Cloudinary: For image storage and delivery.
These third parties have their own privacy policies. We encourage you to review them.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Password hashing using industry-standard algorithms
- HTTPS encryption for data transmission
- Access controls and authentication mechanisms
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
11. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If changes are significant, we will notify you via email.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
- Email: contact@tourfixer.com
14. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement if you believe our processing violates GDPR.