1. Data controller
The data controller is Travelcaravan OÜ. Contact: [email protected]. The registration number will be added before publication.
2. Data processed
A booking may require a name, contact details, rental period, selected vehicle, billing data, information needed to check a driving licence, agreements and communication history. We collect only the data needed for a specific purpose.
3. Purposes and legal basis
Data is processed to prepare a booking and perform an agreement, comply with legal obligations and, where justified, on the basis of legitimate interests. Marketing and non-essential analytics are based on separate consent.
4. Recipients and service providers
Cloudflare, email, payment, accounting, electronic signature and other service providers actually used will be listed here, together with the basis for any transfers to third countries.
5. Retention periods
Separate retention periods will be added for booking enquiries, agreements, invoices, damage cases, technical logs and marketing consents.
6. Individual rights
Where provided by law, an individual has the right to access their data, request correction or deletion, restrict processing, object, withdraw consent and receive data in a portable format. A complaint may also be made to the Estonian Data Protection Inspectorate.
7. Security
Personal data relating to bookings is not stored in a public GitHub repository. Access is role-based, activities are logged and backups are encrypted.