1. Legal Basis for Processing
We process your personal data based on:
- Consent: For marketing communications and non-essential cookies
- Contract: To provide our services and process payments
- Legitimate Interest: For analytics and service improvement
- Legal Obligation: For tax and legal compliance
2. Your GDPR Rights
Under GDPR, you have the following rights:
Right to Information
You have the right to know how we collect, use, and share your personal data.
Right of Access
You can request a copy of all personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten)
You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You can request that we limit how we use your personal data.
Right to Data Portability
You can request a copy of your data in a machine-readable format.
Right to Object
You can object to processing based on legitimate interests or for direct marketing.
3. Data Retention
We retain personal data for different periods based on:
- Account data: Until account deletion or 3 years of inactivity
- Marketing data: Until consent is withdrawn
- Transaction data: 7 years for legal compliance
- Analytics data: 26 months maximum
4. International Transfers
When we transfer data outside the EU, we ensure adequate protection through:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules where applicable
5. Data Protection Officer
Contact our Data Protection Officer for GDPR-related inquiries:
Email: dpo@travelsmartblueprints.best
Phone: +1 (212) 555-0147
Address: 2847 Broadway Street, New York, NY 10025
6. Supervisory Authority
You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with GDPR requirements.
7. Exercising Your Rights
To exercise any of your GDPR rights, contact us at privacy@travelsmartblueprints.best. We will respond within 30 days and may request identity verification.
