[{"data":1,"prerenderedAt":475},["ShallowReactive",2],{"legal-gdpr-rights":3},{"id":4,"title":5,"body":6,"description":15,"extension":467,"meta":468,"navigation":470,"path":471,"seo":472,"stem":473,"__hash__":474},"legal\u002Flegal\u002Fgdpr-rights.md","Your GDPR Rights",{"type":7,"value":8,"toc":452},"minimark",[9,16,33,36,39,57,60,62,67,73,78,100,111,113,117,122,127,135,141,143,147,152,157,171,176,188,197,199,203,208,222,228,230,234,239,244,252,257,265,274,276,280,285,289,294,298,303,309,311,315,320,325,341,343,347,352,358,360,364,367,372,386,389,391,395,398,407,410,412,416,419,435,441,443],[10,11,12],"p",{},[13,14,15],"strong",{},"Trevio — GDPR Rights Notice (Art. 15–22)",[10,17,18,21,22,27,28],{},[13,19,20],{},"Controller:"," Andor Plotár | ",[23,24,26],"a",{"href":25},"mailto:andor@trevio.world","andor@trevio.world"," | ",[23,29,30],{"href":30,"rel":31},"https:\u002F\u002Ftrevio.world",[32],"nofollow",[34,35],"hr",{},[10,37,38],{},"Under the EU General Data Protection Regulation (GDPR), you have a number of rights regarding your personal data. This page explains each right in plain language, when it applies, and how to exercise it.",[10,40,41,42,48,49,52,53,56],{},"To make a request, email us at ",[13,43,44],{},[23,45,47],{"href":46},"mailto:request@trevio.world","request@trevio.world"," with the subject line ",[13,50,51],{},"\"GDPR Rights Request\"",". We will respond within ",[13,54,55],{},"30 days"," (Art. 12 GDPR). If your request is complex, we may extend this by a further 2 months — we will notify you if this is the case.",[10,58,59],{},"We will not charge a fee for any rights request unless requests are manifestly unfounded or excessive.",[34,61],{},[63,64,66],"h2",{"id":65},"right-of-access-art-15-gdpr","Right of Access — Art. 15 GDPR",[10,68,69,72],{},[13,70,71],{},"What it means:","\nYou can ask us for a copy of all personal data we hold about you, along with information about how and why we process it.",[10,74,75],{},[13,76,77],{},"What you'll receive:",[79,80,81,85,88,91,94,97],"ul",{},[82,83,84],"li",{},"A copy of your personal data in a structured, readable format",[82,86,87],{},"The purposes of processing",[82,89,90],{},"The categories of data held",[82,92,93],{},"Who we have shared it with (processors)",[82,95,96],{},"How long we retain it",[82,98,99],{},"Information about your other rights",[10,101,102,105,106,110],{},[13,103,104],{},"How to request:"," Email ",[13,107,108],{},[23,109,47],{"href":46}," with subject \"GDPR Access Request\". We will verify your identity before providing data.",[34,112],{},[63,114,116],{"id":115},"right-to-rectification-art-16-gdpr","Right to Rectification — Art. 16 GDPR",[10,118,119,121],{},[13,120,71],{},"\nYou can ask us to correct personal data that is inaccurate or to complete data that is incomplete.",[10,123,124],{},[13,125,126],{},"Examples:",[79,128,129,132],{},[82,130,131],{},"Your name is misspelled in your profile",[82,133,134],{},"Your email address has changed and not been updated",[10,136,137,140],{},[13,138,139],{},"Note:"," You can update most profile information directly in your Trevio account settings without needing to contact us.",[34,142],{},[63,144,146],{"id":145},"right-to-erasure-right-to-be-forgotten-art-17-gdpr","Right to Erasure (\"Right to be Forgotten\") — Art. 17 GDPR",[10,148,149,151],{},[13,150,71],{},"\nYou can ask us to delete your personal data. We will comply unless we have a legal obligation to retain it.",[10,153,154],{},[13,155,156],{},"When we can erase:",[79,158,159,162,165,168],{},[82,160,161],{},"Your data is no longer necessary for the purpose it was collected",[82,163,164],{},"You withdraw consent (for consent-based processing, e.g. analytics)",[82,166,167],{},"You object and there are no overriding legitimate grounds",[82,169,170],{},"The data has been unlawfully processed",[10,172,173],{},[13,174,175],{},"When we cannot immediately erase:",[79,177,178,185],{},[82,179,180,181,184],{},"We are required to retain billing records for ",[13,182,183],{},"10 years"," under German commercial law (§§ 238, 257 HGB)",[82,186,187],{},"We need to retain data to establish, exercise or defend a legal claim",[10,189,190,193,194,196],{},[13,191,192],{},"Account deletion:"," You can delete your Trevio account from your account settings. This will trigger erasure of your personal data within ",[13,195,55],{},".",[34,198],{},[63,200,202],{"id":201},"right-to-restriction-of-processing-art-18-gdpr","Right to Restriction of Processing — Art. 18 GDPR",[10,204,205,207],{},[13,206,71],{},"\nYou can ask us to pause the processing of your data (without deleting it) in certain circumstances:",[79,209,210,213,216,219],{},[82,211,212],{},"You contest the accuracy of the data (we pause while we verify)",[82,214,215],{},"The processing is unlawful but you prefer restriction over erasure",[82,217,218],{},"We no longer need the data, but you need it for a legal claim",[82,220,221],{},"You have objected and we are assessing whether our grounds override yours",[10,223,224,227],{},[13,225,226],{},"Effect:"," While restricted, we will only store your data — not actively use it — until the restriction is lifted.",[34,229],{},[63,231,233],{"id":232},"right-to-data-portability-art-20-gdpr","Right to Data Portability — Art. 20 GDPR",[10,235,236,238],{},[13,237,71],{},"\nYou can receive your personal data in a structured, commonly used, machine-readable format (e.g. JSON or CSV), and transmit it to another service.",[10,240,241],{},[13,242,243],{},"Applies to:",[79,245,246,249],{},[82,247,248],{},"Data you provided to us (profile, trips, preferences)",[82,250,251],{},"Data processed on the basis of your consent or a contract",[10,253,254],{},[13,255,256],{},"Does not apply to:",[79,258,259,262],{},[82,260,261],{},"Data processed under legitimate interests",[82,263,264],{},"Data derived from analytics",[10,266,267,105,269,273],{},[13,268,104],{},[13,270,271],{},[23,272,47],{"href":46}," with subject \"GDPR Portability Request\". We will provide your data within 30 days.",[34,275],{},[63,277,279],{"id":278},"right-to-object-art-21-gdpr","Right to Object — Art. 21 GDPR",[10,281,282,284],{},[13,283,71],{},"\nYou can object to processing based on our legitimate interests (Art. 6(1)(f) GDPR). We must stop processing unless we can demonstrate compelling legitimate grounds that override your interests.",[10,286,287],{},[13,288,243],{},[79,290,291],{},[82,292,293],{},"Server log retention for security purposes",[10,295,296],{},[13,297,256],{},[79,299,300],{},[82,301,302],{},"Processing necessary to perform your contract with us (e.g. your account, trip data)",[10,304,305,308],{},[13,306,307],{},"Direct marketing:"," If we ever use your data for direct marketing (we currently do not), you have an absolute right to object at any time with no justification required.",[34,310],{},[63,312,314],{"id":313},"right-to-withdraw-consent-art-73-gdpr","Right to Withdraw Consent — Art. 7(3) GDPR",[10,316,317,319],{},[13,318,71],{},"\nWhere we process your data based on consent (currently: Google Analytics 4 cookies), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.",[10,321,322],{},[13,323,324],{},"How to withdraw:",[79,326,327,334],{},[82,328,329,330,333],{},"Use the ",[13,331,332],{},"Cookie Settings"," link in the Trevio footer",[82,335,336,337],{},"Email ",[13,338,339],{},[23,340,47],{"href":46},[34,342],{},[63,344,346],{"id":345},"right-not-to-be-subject-to-automated-decision-making-art-22-gdpr","Right Not to Be Subject to Automated Decision-Making — Art. 22 GDPR",[10,348,349,351],{},[13,350,71],{},"\nYou have the right not to be subject to decisions based solely on automated processing (including profiling) that produce significant legal or similarly significant effects on you.",[10,353,354,357],{},[13,355,356],{},"Trevio's position:"," We do not make any automated decisions that produce legal or similarly significant effects on users. AI-generated travel suggestions (Tria) are informational only — no automated decisions are made regarding your account, access, or any other significant matter without human review.",[34,359],{},[63,361,363],{"id":362},"right-to-lodge-a-complaint-art-77-gdpr","Right to Lodge a Complaint — Art. 77 GDPR",[10,365,366],{},"If you are not satisfied with how we handle your personal data or a rights request, you have the right to complain to a data protection supervisory authority.",[10,368,369],{},[13,370,371],{},"German supervisory authority:",[10,373,374,377,378,382],{},[13,375,376],{},"Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)","\nGraurheindorfer Str. 153\n53117 Bonn\nDeutschland\nTel.: +49 (0)228 997799-0\nE-Mail: ",[23,379,381],{"href":380},"mailto:poststelle@bfdi.bund.de","poststelle@bfdi.bund.de",[23,383,384],{"href":384,"rel":385},"https:\u002F\u002Fwww.bfdi.bund.de",[32],[10,387,388],{},"You may also contact the supervisory authority of the EU member state where you reside or work.",[34,390],{},[63,392,394],{"id":393},"how-we-verify-your-identity","How We Verify Your Identity",[10,396,397],{},"To protect your data, we will verify your identity before processing a rights request. We typically do this by:",[399,400,401,404],"ol",{},[82,402,403],{},"Confirming you have access to the email address registered to your Trevio account",[82,405,406],{},"For sensitive requests, we may ask for additional confirmation",[10,408,409],{},"We will never ask for your password.",[34,411],{},[63,413,415],{"id":414},"contact","Contact",[10,417,418],{},"For all data rights requests:",[10,420,421,424,425,429,430,434],{},[13,422,423],{},"Andor Plotár","\nE-Mail: ",[13,426,427],{},[23,428,47],{"href":46},"\nSubject line: \"GDPR Rights Request — ",[431,432,433],"span",{},"type of request","\"",[10,436,437,438,440],{},"Response time: ",[13,439,55],{}," (extendable by 2 months for complex requests, with notice)",[34,442],{},[10,444,445,449],{},[446,447,448],"em",{},"This notice is provided in accordance with Art. 13 and Art. 14 GDPR.",[446,450,451],{},"Last updated: 2026-05-01",{"title":453,"searchDepth":454,"depth":454,"links":455},"",2,[456,457,458,459,460,461,462,463,464,465,466],{"id":65,"depth":454,"text":66},{"id":115,"depth":454,"text":116},{"id":145,"depth":454,"text":146},{"id":201,"depth":454,"text":202},{"id":232,"depth":454,"text":233},{"id":278,"depth":454,"text":279},{"id":313,"depth":454,"text":314},{"id":345,"depth":454,"text":346},{"id":362,"depth":454,"text":363},{"id":393,"depth":454,"text":394},{"id":414,"depth":454,"text":415},"md",{"effectiveDate":469,"updatedDate":469},"2026-05-01",true,"\u002Flegal\u002Fgdpr-rights",{"title":5,"description":15},"legal\u002Fgdpr-rights","DDMNF_rXcnFMThn1S1q-tZ2JIpfsIQgJWXKDJ50nkWg",1779274022624]