1. Data controller
The data controller is Travelcaravan OÜ, registry code 16267981, VAT number EE102533187. Email: travel.caravan@mail.ee. Service location: Teemeistri 2/1, Tallinn. Legal address: Laiaru, Valgu-Vanamõisa village, Märjamaa parish, Rapla county, 78204, Estonia.
2. Data we process
A booking request may include your first and last name, telephone number, email address, selected vehicle, rental dates, selected extras, additional information, language preference, consent timestamp and the technical and administrative history of the request. For a confirmed rental we may also process contract, payment, driving licence verification, vehicle handover and return, and damage-related information.
3. Website usage and security data
To keep the website reliable, measure general usage and prevent abuse, we process the page path and title, visit time, referring domain, general device type, country code and a pseudonymous visitor identifier. The identifier is created on the server from the IP address, browser user agent and a secret salt; the application does not store the raw IP address in analytics tables. No analytics request is sent when Do Not Track or Global Privacy Control is enabled.
4. Purposes and legal bases
Data is used to handle booking requests and prepare a contract, perform a rental agreement, provide customer support, comply with accounting and other legal obligations, and resolve claims. Website security, abuse prevention and limited cookie-free usage statistics are based on Travelcaravan’s legitimate interest in operating a secure and reliable service. Consent is used where a specific processing activity requires it.
5. Service providers and recipients
We use Cloudflare for hosting, content delivery, database services, bot protection and technical security. Resend is used to deliver booking and confirmation emails, which also pass through the sender’s and recipient’s email providers. The website loads a font through Google Fonts, and some vehicle gallery images are delivered through the i.ibb.co image-hosting service. Data may be disclosed to accountants, insurers, legal advisers or public authorities only where necessary for the service or required by law.
6. Transfers outside the EEA
Some technical service providers or their subprocessors may process data outside the European Economic Area. Where this occurs, applicable contractual and other legal safeguards are used.
7. Retention periods
Booking enquiries that do not become confirmed rentals are generally retained for up to 12 months after the last communication. Confirmed booking, contract, payment, invoice and rental history data is generally retained for up to 7 years after the end of the relevant financial year, unless a dispute or legal duty requires longer retention. Pseudonymous booking-security events are normally deleted within 2 days and duplicate-submission guards within 24 hours. Detailed website analytics data is retained for up to 400 days. Pseudonymous failed admin-login records are removed no later than 30 days.
8. Your rights
You may request confirmation of processing, access to your data, correction of inaccurate data, deletion or restriction, object to processing based on legitimate interests and, where the law provides, receive your data in a portable format. Consent may be withdrawn at any time without affecting processing carried out before withdrawal. Requests can be sent to travel.caravan@mail.ee.
9. Complaints and automated decisions
You may lodge a complaint with the Estonian Data Protection Inspectorate. Travelcaravan does not make automated decisions based on website or booking-form data that produce legal or similarly significant effects. Final availability, price and booking confirmation are reviewed by a person.
10. Security and changes
We use access controls, encrypted connections, server-side validation, bot protection, rate limits and secure session cookies. This notice may be updated when the service, technology or legal requirements change. The current version is published on this page with its update date.