Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on data protection, please refer to our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the "Information about the responsible party" section of this privacy policy.

How do we collect your data?

Your data is collected in part by you providing it to us. This could be data that you enter in a contact form, for example. Other data is collected automatically or after your consent when visiting the website through our IT systems. This is mainly technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request restriction of processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this and other questions about data protection.

2. Hosting

We host the content of our website with the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the host(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

External hosting is carried out for the purpose of contract fulfillment towards our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If appropriate consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Our host(s) will only process your data to the extent necessary to fulfill their performance obligations and follow our instructions regarding this data.

We use the following host(s):

Vercel Inc.
340 S Lemon Ave #4133
Walnut, CA 91789
United States

Vercel is located in the United States. Data may be transferred to and processed in the United States. Vercel has implemented appropriate safeguards for international data transfers in accordance with applicable data protection laws. For more information, please refer to Vercel's privacy policy at https://vercel.com/legal/privacy-policy.

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission on the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Information about the responsible party

The responsible party for data processing on this website is:

Cem Can
Stephanstraße 11a
97070 Würzburg

Email: info@holidai.app

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Storage Duration

Unless a more specific storage period is mentioned within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion takes place after these reasons cease to apply.

4. Data Collection on This Website

Cookies

Our websites use so-called "cookies". Cookies are small data packages and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit ends. Permanent cookies remain stored on your device until you delete them yourself or automatic deletion is performed by your web browser.

Cookies can come from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.

Contact Form

If you send us inquiries via contact form, your details from the inquiry form including the contact data you provided there will be stored with us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

Processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

5. Analytics and Third-Party Services

PostHog Analytics

We use PostHog, an analytics service, to understand how users interact with our website and improve our services. PostHog may collect information such as your IP address, browser type, device information, pages visited, time spent on pages, and user interactions.

The legal basis for this processing is our legitimate interest in analyzing website usage and improving our services (Art. 6 para. 1 lit. f GDPR). You can opt out of PostHog analytics at any time through your browser settings or by contacting us.

PostHog is provided by PostHog Inc., located in the United States. Data may be transferred to and processed in the United States. PostHog has implemented appropriate safeguards for international data transfers. For more information, please refer to PostHog's privacy policy at https://posthog.com/privacy.

Supabase Database Services

We use Supabase as our database and backend service provider to store and manage user data, including account information, user preferences, and application data. Supabase processes this data on our behalf according to our instructions.

The legal basis for this processing is the performance of a contract with you (Art. 6 para. 1 lit. b GDPR) and our legitimate interest in providing secure and reliable services (Art. 6 para. 1 lit. f GDPR).

Supabase is provided by Supabase Inc. Data is processed in accordance with Supabase's security standards and data protection measures. For more information about Supabase's data protection practices, please refer to their privacy policy at https://supabase.com/privacy.

6. Newsletter

Newsletter Data

If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter. Further data is not collected or only collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

Processing of the data entered into the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke the consent given for storing the data, the email address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

7. Your Rights

You have the right to access, correct, or delete your personal data. You can also request a copy of your data or restrict its processing. Under certain circumstances, you have the right to data portability and the right to object to processing.

If you have any questions about data protection or want to exercise your rights, please contact us at info@holidai.app.