[{"data":1,"prerenderedAt":911},["ShallowReactive",2],{"legal-privacy-policy":3},{"id":4,"title":5,"body":6,"description":902,"extension":903,"meta":904,"navigation":906,"path":907,"seo":908,"stem":909,"__hash__":910},"legal\u002Flegal\u002Fprivacy-policy.md","Privacy Policy",{"type":7,"value":8,"toc":873},"minimark",[9,21,24,29,36,39,41,45,48,51,54,57,60,71,81,83,87,90,98,100,104,109,115,121,127,137,139,143,148,153,158,166,168,172,181,186,191,201,210,212,216,221,226,231,240,245,247,251,256,261,265,274,282,284,288,293,298,302,311,317,319,323,328,333,337,346,348,352,357,362,366,372,374,378,383,388,397,406,412,424,433,435,439,444,449,454,462,464,468,475,477,481,491,493,497,500,503,508,636,641,643,647,650,667,674,676,680,683,767,774,780,789,791,795,798,808,814,816,820,828,830,834,837,840,842,846,849,853,859,866,868],[10,11,12,16,17,20],"p",{},[13,14,15],"strong",{},"Effective date \u002F Gültig ab:"," 2026-05-01\n",[13,18,19],{},"Last updated \u002F Zuletzt aktualisiert:"," 2026-05-01",[22,23],"hr",{},[25,26,28],"h2",{"id":27},"_1-introduction","1. Introduction",[10,30,31,32,35],{},"Welcome to ",[13,33,34],{},"Trevio"," (\"we\", \"us\", \"our\"). We are committed to protecting your personal data and processing it in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016\u002F679), the German Federal Data Protection Act (BDSG), and applicable telecommunications law.",[10,37,38],{},"This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have.",[22,40],{},[25,42,44],{"id":43},"_2-controller-data-controller-art-13-gdpr","2. Controller \u002F Data Controller (Art. 13 GDPR)",[10,46,47],{},"The controller responsible for the processing of your personal data is:",[10,49,50],{},"Andor Plotár",[10,52,53],{},"Schönbachstr 14",[10,55,56],{},"86154, Augsburg",[10,58,59],{},"Germany",[10,61,62,65,66],{},[13,63,64],{},"E-Mail:"," ",[67,68,70],"a",{"href":69},"mailto:andor@trevio.world","andor@trevio.world",[10,72,73,65,76],{},[13,74,75],{},"Website:",[67,77,78],{"href":78,"rel":79},"https:\u002F\u002Ftrevio.world",[80],"nofollow",[22,82],{},[25,84,86],{"id":85},"_3-data-protection-officer","3. Data Protection Officer",[10,88,89],{},"We are not legally required to appoint a Data Protection Officer at our current scale. For all data protection enquiries, please contact us directly at:",[10,91,92],{},[13,93,94],{},[67,95,97],{"href":96},"mailto:request@trevio.world","request@trevio.world",[22,99],{},[25,101,103],{"id":102},"_4-what-data-we-collect-and-why","4. What Data We Collect and Why",[105,106,108],"h3",{"id":107},"_41-account-registration-and-profile","4.1 Account Registration and Profile",[10,110,111,114],{},[13,112,113],{},"Data collected:"," Full name, email address, password (hashed), profile photo (optional), home city (optional), travel preferences (optional), subscription tier.",[10,116,117,120],{},[13,118,119],{},"Purpose:"," To create and manage your account, provide personalised features, and communicate with you about your account.",[10,122,123,126],{},[13,124,125],{},"Legal basis:"," Art. 6(1)(b) GDPR — performance of a contract (the Trevio Terms of Service).",[10,128,129,132,133,136],{},[13,130,131],{},"Retention:"," For the duration of your account. After account deletion, data is permanently removed within ",[13,134,135],{},"30 days",", except where we are legally required to retain it longer (e.g. payment records: 10 years under German commercial law — §§ 238, 257 HGB).",[22,138],{},[105,140,142],{"id":141},"_42-trip-data","4.2 Trip Data",[10,144,145,147],{},[13,146,113],{}," Trip names, destinations, dates, itineraries, transport legs, bookings, packing lists, participant information, uploaded documents (stored on Cloudflare R2), and any other content you create within Trevio.",[10,149,150,152],{},[13,151,119],{}," To provide the core trip planning service.",[10,154,155,157],{},[13,156,125],{}," Art. 6(1)(b) GDPR — performance of a contract.",[10,159,160,162,163,165],{},[13,161,131],{}," Retained for the lifetime of your account. Deleted within ",[13,164,135],{}," upon account deletion.",[22,167],{},[105,169,171],{"id":170},"_43-payment-data","4.3 Payment Data",[10,173,174,176,177,180],{},[13,175,113],{}," Subscription tier, billing history, payment method type (e.g. card last four digits). We do ",[13,178,179],{},"not"," store full card numbers — all payment processing is handled by Stripe, Inc.",[10,182,183,185],{},[13,184,119],{}," To process your subscription payment and manage your billing relationship.",[10,187,188,190],{},[13,189,125],{}," Art. 6(1)(b) GDPR — performance of a contract; Art. 6(1)(c) GDPR — legal obligation (tax and accounting records).",[10,192,193,196,197],{},[13,194,195],{},"Third-party processor:"," Stripe, Inc. (USA). Data transfer covered by Stripe's Standard Contractual Clauses. See Stripe's Privacy Policy: ",[67,198,199],{"href":199,"rel":200},"https:\u002F\u002Fstripe.com\u002Fprivacy",[80],[10,202,203,205,206,209],{},[13,204,131],{}," Billing records retained for ",[13,207,208],{},"10 years"," in accordance with §§ 238, 257 HGB (German commercial law).",[22,211],{},[105,213,215],{"id":214},"_44-ai-travel-planner-tria","4.4 AI Travel Planner (Tria)",[10,217,218,220],{},[13,219,113],{}," Messages you send to Tria, trip context (destination, dates, travel style, budget, group size), and the AI-generated responses.",[10,222,223,225],{},[13,224,119],{}," To provide AI-powered travel planning suggestions.",[10,227,228,230],{},[13,229,125],{}," Art. 6(1)(b) GDPR — performance of a contract; Art. 6(1)(f) GDPR — our legitimate interest in improving the service.",[10,232,233,235,236],{},[13,234,195],{}," Anthropic, PBC (USA). Your messages are transmitted to Anthropic's API to generate responses. Anthropic's API usage data handling is governed by their Data Processing Agreement. See: ",[67,237,238],{"href":238,"rel":239},"https:\u002F\u002Fwww.anthropic.com\u002Flegal\u002Fprivacy",[80],[10,241,242,244],{},[13,243,131],{}," Conversation history is stored for the lifetime of your account and permanently deleted within 30 days of account deletion.",[22,246],{},[105,248,250],{"id":249},"_45-document-vault","4.5 Document Vault",[10,252,253,255],{},[13,254,113],{}," Files you upload (PDFs, images) and associated metadata (file name, type, size, upload date).",[10,257,258,260],{},[13,259,119],{}," To store your travel documents (tickets, passports, insurance) securely on your behalf.",[10,262,263,157],{},[13,264,125],{},[10,266,267,269,270],{},[13,268,195],{}," Cloudflare, Inc. (USA) — R2 object storage. Data transfer covered by Standard Contractual Clauses. See: ",[67,271,272],{"href":272,"rel":273},"https:\u002F\u002Fwww.cloudflare.com\u002Fprivacypolicy\u002F",[80],[10,275,276,278,279,281],{},[13,277,131],{}," Files are deleted within ",[13,280,135],{}," upon account deletion or manual file removal.",[22,283],{},[105,285,287],{"id":286},"_46-maps-and-location-data","4.6 Maps and Location Data",[10,289,290,292],{},[13,291,113],{}," Location searches you perform (e.g. destination autocomplete, route queries), map viewport position.",[10,294,295,297],{},[13,296,119],{}," To display maps, calculate routes, and power destination search.",[10,299,300,157],{},[13,301,125],{},[10,303,304,306,307],{},[13,305,195],{}," Mapbox, Inc. (USA). See: ",[67,308,309],{"href":309,"rel":310},"https:\u002F\u002Fwww.mapbox.com\u002Flegal\u002Fprivacy",[80],[10,312,313,316],{},[13,314,315],{},"Note:"," We do not collect or store your device's GPS location. Any location input is provided voluntarily by you (typed search).",[22,318],{},[105,320,322],{"id":321},"_47-flight-data-lookups","4.7 Flight Data Lookups",[10,324,325,327],{},[13,326,113],{}," Flight numbers or route queries you submit.",[10,329,330,332],{},[13,331,119],{}," To look up flight information (departure\u002Farrival times, airline) for transport legs in your itinerary.",[10,334,335,157],{},[13,336,125],{},[10,338,339,341,342],{},[13,340,195],{}," AviationStack (apilayer GmbH). See: ",[67,343,344],{"href":344,"rel":345},"https:\u002F\u002Faviationstack.com\u002Fprivacy",[80],[22,347],{},[105,349,351],{"id":350},"_48-transactional-email","4.8 Transactional Email",[10,353,354,356],{},[13,355,113],{}," Your email address, email delivery logs.",[10,358,359,361],{},[13,360,119],{}," To send account-related emails (registration confirmation, password reset, subscription receipts).",[10,363,364,157],{},[13,365,125],{},[10,367,368,371],{},[13,369,370],{},"Infrastructure:"," Emails are sent via SMTP through our hosting provider (IONOS SE, Germany). No third-party marketing platform is used.",[22,373],{},[105,375,377],{"id":376},"_49-analytics-google-analytics-4","4.9 Analytics (Google Analytics 4)",[10,379,380,382],{},[13,381,113],{}," Pages visited, session duration, browser type, operating system, approximate geographic location (country\u002Fregion level), referral source, anonymised IP address.",[10,384,385,387],{},[13,386,119],{}," To understand how users interact with Trevio in order to improve the product.",[10,389,390,392,393,396],{},[13,391,125],{}," Art. 6(1)(a) GDPR — ",[13,394,395],{},"your consent"," (provided via the cookie consent banner).",[10,398,399,401,402],{},[13,400,195],{}," Google LLC (USA). Data transfer covered by Google's Standard Contractual Clauses. See: ",[67,403,404],{"href":404,"rel":405},"https:\u002F\u002Fpolicies.google.com\u002Fprivacy",[80],[10,407,408,411],{},[13,409,410],{},"IP anonymisation:"," We have enabled IP anonymisation in Google Analytics 4 so that your full IP address is never stored by Google.",[10,413,414,417,418,423],{},[13,415,416],{},"Opt-out:"," You may withdraw consent at any time via the cookie settings link in the website footer, or by installing the ",[67,419,422],{"href":420,"rel":421},"https:\u002F\u002Ftools.google.com\u002Fdlpage\u002Fgaoptout",[80],"Google Analytics Opt-out Browser Add-on",".",[10,425,426,429,430,423],{},[13,427,428],{},"Retention in Google Analytics:"," Data retention is set to ",[13,431,432],{},"14 months",[22,434],{},[105,436,438],{"id":437},"_410-server-logs","4.10 Server Logs",[10,440,441,443],{},[13,442,113],{}," IP address, browser type, operating system, date\u002Ftime of request, pages accessed, HTTP status code.",[10,445,446,448],{},[13,447,119],{}," Security monitoring, debugging, and preventing abuse.",[10,450,451,453],{},[13,452,125],{}," Art. 6(1)(f) GDPR — our legitimate interest in maintaining the security and stability of the platform.",[10,455,456,458,459,461],{},[13,457,131],{}," Server logs are retained for a maximum of ",[13,460,135],{}," and then automatically deleted.",[22,463],{},[105,465,467],{"id":466},"_411-affiliate-redirect-links","4.11 Affiliate Redirect Links",[10,469,470,471,474],{},"When you click affiliate links (e.g. to Booking.com, GetYourGuide, Travelpayouts partners, or Airalo), you are redirected to third-party websites. ",[13,472,473],{},"Trevio does not place any tracking pixels or cookies"," in connection with these links. The destination website's own privacy policy and cookie settings apply from the point of redirect.",[22,476],{},[25,478,480],{"id":479},"_5-cookies","5. Cookies",[10,482,483,484,490],{},"Please refer to our separate ",[13,485,486],{},[67,487,489],{"href":488},"\u002Flegal\u002Fcookie-policy\u002F","Cookie Policy"," for a full breakdown of cookies used, their purpose, and how to manage your preferences.",[22,492],{},[25,494,496],{"id":495},"_6-data-sharing-and-third-parties","6. Data Sharing and Third Parties",[10,498,499],{},"We do not sell your personal data. We do not share your data with third parties for their own marketing purposes.",[10,501,502],{},"We share data only with the processors listed in Section 4 above, under Data Processing Agreements (DPAs), solely to deliver Trevio's services.",[10,504,505],{},[13,506,507],{},"Summary of processors:",[509,510,511,530],"table",{},[512,513,514],"thead",{},[515,516,517,521,524,527],"tr",{},[518,519,520],"th",{},"Processor",[518,522,523],{},"Country",[518,525,526],{},"Purpose",[518,528,529],{},"Safeguard",[531,532,533,548,561,573,585,599,612,624],"tbody",{},[515,534,535,539,542,545],{},[536,537,538],"td",{},"Stripe, Inc.",[536,540,541],{},"USA",[536,543,544],{},"Payment processing",[536,546,547],{},"SCC",[515,549,550,553,555,558],{},[536,551,552],{},"Anthropic, PBC",[536,554,541],{},[536,556,557],{},"AI (Tria) responses",[536,559,560],{},"DPA \u002F SCC",[515,562,563,566,568,571],{},[536,564,565],{},"Cloudflare, Inc.",[536,567,541],{},[536,569,570],{},"Document storage (R2)",[536,572,547],{},[515,574,575,578,580,583],{},[536,576,577],{},"Mapbox, Inc.",[536,579,541],{},[536,581,582],{},"Maps + geocoding",[536,584,547],{},[515,586,587,590,593,596],{},[536,588,589],{},"AviationStack (apilayer)",[536,591,592],{},"EU\u002FAT",[536,594,595],{},"Flight data",[536,597,598],{},"DPA",[515,600,601,604,606,609],{},[536,602,603],{},"IONOS SE",[536,605,59],{},[536,607,608],{},"Hosting + email",[536,610,611],{},"DPA (EU)",[515,613,614,617,619,622],{},[536,615,616],{},"Neon, Inc.",[536,618,541],{},[536,620,621],{},"Database hosting",[536,623,547],{},[515,625,626,629,631,634],{},[536,627,628],{},"Google LLC",[536,630,541],{},[536,632,633],{},"Analytics (GA4)",[536,635,547],{},[10,637,638],{},[13,639,640],{},"SCC = EU Standard Contractual Clauses (Art. 46(2)(c) GDPR)",[22,642],{},[25,644,646],{"id":645},"_7-international-data-transfers","7. International Data Transfers",[10,648,649],{},"Several of our processors are based outside the EU\u002FEEA (primarily the USA). In each case, data transfers are protected by:",[651,652,653,660],"ul",{},[654,655,656,659],"li",{},[13,657,658],{},"Standard Contractual Clauses (SCCs)"," approved by the European Commission, and\u002For",[654,661,662,663,666],{},"The processor's participation in the ",[13,664,665],{},"EU–US Data Privacy Framework"," where applicable.",[10,668,669,670,423],{},"You may request a copy of the relevant transfer safeguards by contacting us at ",[13,671,672],{},[67,673,97],{"href":96},[22,675],{},[25,677,679],{"id":678},"_8-your-rights-under-gdpr-art-1522","8. Your Rights under GDPR (Art. 15–22)",[10,681,682],{},"You have the following rights regarding your personal data:",[509,684,685,695],{},[512,686,687],{},[515,688,689,692],{},[518,690,691],{},"Right",[518,693,694],{},"What it means",[531,696,697,707,717,727,737,747,757],{},[515,698,699,704],{},[536,700,701],{},[13,702,703],{},"Access (Art. 15)",[536,705,706],{},"Request a copy of all data we hold about you",[515,708,709,714],{},[536,710,711],{},[13,712,713],{},"Rectification (Art. 16)",[536,715,716],{},"Correct inaccurate or incomplete data",[515,718,719,724],{},[536,720,721],{},[13,722,723],{},"Erasure (Art. 17)",[536,725,726],{},"Request deletion of your data (\"right to be forgotten\")",[515,728,729,734],{},[536,730,731],{},[13,732,733],{},"Restriction (Art. 18)",[536,735,736],{},"Limit how we process your data in certain circumstances",[515,738,739,744],{},[536,740,741],{},[13,742,743],{},"Portability (Art. 20)",[536,745,746],{},"Receive your data in a machine-readable format",[515,748,749,754],{},[536,750,751],{},[13,752,753],{},"Objection (Art. 21)",[536,755,756],{},"Object to processing based on legitimate interests",[515,758,759,764],{},[536,760,761],{},[13,762,763],{},"Withdraw consent (Art. 7(3))",[536,765,766],{},"Withdraw any consent given at any time (e.g. analytics cookies)",[10,768,769,770],{},"To exercise any of these rights, contact us at: ",[13,771,772],{},[67,773,97],{"href":96},[10,775,776,777,779],{},"We will respond within ",[13,778,135],{}," as required by Art. 12 GDPR.",[10,781,782,783,423],{},"For a detailed explanation of each right, see our ",[13,784,785],{},[67,786,788],{"href":787},"\u002Flegal\u002Fgdpr-rights\u002F","GDPR Rights Notice",[22,790],{},[25,792,794],{"id":793},"_9-right-to-lodge-a-complaint","9. Right to Lodge a Complaint",[10,796,797],{},"If you believe we have processed your data unlawfully, you have the right to lodge a complaint with a supervisory authority. The competent authority for Germany is:",[10,799,800,803,804],{},[13,801,802],{},"Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)","\nGraurheindorfer Str. 153\n53117 Bonn\nDeutschland\n",[67,805,806],{"href":806,"rel":807},"https:\u002F\u002Fwww.bfdi.bund.de",[80],[10,809,810],{},[811,812,813],"em",{},"Note: You may also contact the supervisory authority of the EU member state where you reside or work.",[22,815],{},[25,817,819],{"id":818},"_10-childrens-privacy","10. Children's Privacy",[10,821,822,823,827],{},"Trevio is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us immediately at ",[13,824,825],{},[67,826,97],{"href":96}," and we will delete it.",[22,829],{},[25,831,833],{"id":832},"_11-changes-to-this-policy","11. Changes to This Policy",[10,835,836],{},"We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and\u002For by displaying a prominent notice on the website. The \"Last updated\" date at the top of this page will always reflect the most recent version.",[10,838,839],{},"Continued use of Trevio after changes are posted constitutes acceptance of the updated policy.",[22,841],{},[25,843,845],{"id":844},"_12-contact","12. Contact",[10,847,848],{},"For any questions about this Privacy Policy or your data:",[10,850,851],{},[13,852,50],{},[10,854,855,65,857],{},[13,856,64],{},[67,858,70],{"href":69},[10,860,861,65,863],{},[13,862,75],{},[67,864,78],{"href":78,"rel":865},[80],[22,867],{},[10,869,870],{},[811,871,872],{},"© 2026 Trevio. All rights reserved.",{"title":874,"searchDepth":875,"depth":875,"links":876},"",2,[877,878,879,880,894,895,896,897,898,899,900,901],{"id":27,"depth":875,"text":28},{"id":43,"depth":875,"text":44},{"id":85,"depth":875,"text":86},{"id":102,"depth":875,"text":103,"children":881},[882,884,885,886,887,888,889,890,891,892,893],{"id":107,"depth":883,"text":108},3,{"id":141,"depth":883,"text":142},{"id":170,"depth":883,"text":171},{"id":214,"depth":883,"text":215},{"id":249,"depth":883,"text":250},{"id":286,"depth":883,"text":287},{"id":321,"depth":883,"text":322},{"id":350,"depth":883,"text":351},{"id":376,"depth":883,"text":377},{"id":437,"depth":883,"text":438},{"id":466,"depth":883,"text":467},{"id":479,"depth":875,"text":480},{"id":495,"depth":875,"text":496},{"id":645,"depth":875,"text":646},{"id":678,"depth":875,"text":679},{"id":793,"depth":875,"text":794},{"id":818,"depth":875,"text":819},{"id":832,"depth":875,"text":833},{"id":844,"depth":875,"text":845},"Effective date \u002F Gültig ab: 2026-05-01\nLast updated \u002F Zuletzt aktualisiert: 2026-05-01","md",{"effectiveDate":905,"updatedDate":905},"[EFFECTIVE DATE]",true,"\u002Flegal\u002Fprivacy-policy",{"title":5,"description":902},"legal\u002Fprivacy-policy","uCTxmFgCqlE-pYrB9E8_EmwnaUgr2n4CWG-OVS8gGuo",1779274022579]