Zásady ochrany osobních údajů

This Privacy Policy describes how Tribe Music B.V. trading as TripSpotter ("TripSpotter", "we", "us", "our") collects, uses, shares, and protects personal data when you use the TripSpotter website, apps, or other services (collectively, the "Platform"). By accessing or using the Platform, you accept this Privacy Policy. If you do not agree, please do not use the Platform.

1. What We Collect

We collect personal data in various ways, including when you:

• visit or interact with the Platform (web/app)
• create an account or save preferences (e.g. favourites, alerts)
• subscribe to newsletters or receive marketing communications
• submit feedback, reviews, or otherwise provide User Content
• click through to third-party Providers via listings

The types of personal information we may collect include:

• Identity and contact data: such as your name, email address, phone number, and postal address (if needed).
• Account and profile data: username, login credentials, saved searches, favourites, and preferences.
• Device and usage data: IP address, device type, browser type, operating system, referring URLs, pages visited, and time spent.
• Location data: approximate location derived from your IP address; more precise location data if you explicitly grant permission on your device.
• Communications and feedback: emails, support requests, reviews, and survey responses.
• Marketing data: your opt-in/opt-out preferences and consent choices.

We do not intentionally collect sensitive categories of data (e.g. health, religion, ethnicity) unless required by law or with your explicit consent.

2. How We Use Your Data & Legal Bases

We process your data for purposes such as:

• Providing services: enabling you to search, compare, save favourites, personalise, and redirect to Providers. Legal basis: performance of a contract / legitimate interest.
• Improving the Platform: troubleshooting, analytics, research, and service optimisation. Legal basis: legitimate interest.
• Communicating with you: responding to enquiries, sending administrative messages and service updates. Legal basis: performance of a contract / legitimate interest.
• Marketing and newsletters: sending marketing content if you have given consent or if permitted by law. Legal basis: consent / legitimate interest.
• Fraud prevention and compliance: preventing abuse, ensuring security, and complying with legal obligations. Legal basis: legal obligation / legitimate interest.

3. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• enable core functionality of the Platform,
• analyse usage and performance,
• remember your settings and preferences,
• support advertising, affiliate, and referral tracking.

You can control cookies in your browser or via our Cookie Policy. Disabling some cookies may affect your experience.

4. Sharing & Disclosure of Personal Data

We may share your data with:

• Service providers: companies that help us run the Platform (hosting, analytics, marketing, email delivery, etc.).
• Providers: when you click through to their sites to book, they may receive limited data necessary for referral tracking. TripSpotter does not manage bookings.
• Affiliate and advertising partners: to track referrals and monetise traffic.
• Authorities and regulators: if required to comply with legal obligations or requests.
• Business transferees: if TripSpotter is involved in a merger, acquisition, or sale.

Where we transfer data outside your country, we use safeguards such as EU Standard Contractual Clauses.

5. Data Retention

We keep data only as long as needed:

• Account and profile data: retained while your account is active.
• Usage and analytics data: typically retained for 24–36 months, then anonymised or deleted.
• Marketing data: retained until you opt out or withdraw consent.
• Legal and transactional records: retained for as long as required by law (e.g. tax, audit).

When data is no longer needed, it is deleted or anonymised.

6. Your Rights

Depending on your location, you may have rights such as:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: ask us to delete your data when it is no longer necessary or if consent is withdrawn.
• Restriction: request limited processing of your data.
• Objection: object to processing, particularly for direct marketing.
• Portability: request transfer of your data to another service provider.
• Withdraw consent: withdraw any consent you have given, without affecting past lawful processing.

Contact us (see Section 11) to exercise these rights. Proof of identity may be required.

7. Security

We use technical and organisational measures to safeguard your personal data, including encryption, access controls, secure servers, and monitoring. However, no system is entirely secure, and we cannot guarantee absolute protection.

8. Children

TripSpotter is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with data, please contact us and we will delete it.

9. International Data Transfers

We may process your data in other countries. Where we do, we ensure appropriate safeguards are in place to protect your rights in line with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Updates take effect when posted on the Platform (or at a later date specified). Significant changes may be communicated via email or banner notice. Continued use of the Platform means you accept the revised policy.

11. Contact Us

TripSpotter (a trading name of Tribe Music B.V.)

Registered address: Retentieweg 24, 7572PH, Oldenzaal, The Netherlands

Email: info@tripspotter.co

If you are not satisfied with our response, you may lodge a complaint with your local data protection authority.

12. Additional Jurisdictional Notices

• EEA / UK: You have rights under the GDPR / UK GDPR. You may lodge complaints with your supervisory authority.
• California (USA): Under the CCPA, you may have rights to know, delete, and opt out of the "sale" or "sharing" of your personal data.
• Australia: Nothing in this Policy limits your rights under the Australian Privacy Act.