Privacy Notice

1. Controller

Data controller: Dudás Ádám EV / BeachPackr, 9121 Győrszemere, Erdősor 24, Hungary. Privacy contact: hello@beachpackr.com.

2. Data processed

Depending on how you use BeachPackr, we process contact details, billing details, booking dates, accommodation or airport handover/return details, optional flight numbers, transaction and invoice references, customer-service communications, technical security data, and records showing which legal/safety versions were acknowledged.

3. Purposes and legal bases

• Contract: booking, payment, delivery, return, support and refunds.
• Legal obligations: accounting, invoicing, tax and mandatory consumer records.
• Legitimate interests: platform security, fraud prevention, service-quality evidence, legal claims and operational troubleshooting, balanced against customer rights.
• Consent: only where expressly requested for optional processing such as non-essential marketing/cookies.

4. Recipients

We share only data necessary for the relevant purpose with the certified local operator fulfilling the booking, payment provider Stripe, invoicing provider Billingo, hosting/email/IT suppliers and professional advisers or authorities where legally required. Contractual safeguards and role allocation are used with service providers.

5. International transfers

If a supplier processes personal data outside the EEA, BeachPackr uses an applicable lawful transfer mechanism and appropriate safeguards where required.

6. Retention

Operational booking data is normally retained for up to 24 months after the rental unless a longer period is necessary for a dispute or legal obligation. Invoice/accounting data is retained for the legally required period, configured for the merchant as 8 years. Security logs are retained only for a proportionate troubleshooting/security period.

7. Your rights

Subject to GDPR conditions, you may request access, correction, erasure, restriction, objection or portability, and may withdraw consent where processing relies on consent. You may complain to the competent supervisory authority. Contact hello@beachpackr.com to exercise rights.

8. Data minimisation and security

BeachPackr limits partner access to fulfilment-relevant information and uses access controls, CSRF protection, rate limiting, two-factor authentication for administrators, encrypted application secrets, audit logging and backups as technical and organisational safeguards.