Privacy Policy
Controller
KOSOVAN VITALII, sole proprietor registered in Greece. Registered business address: Orestou 17, 12133 Peristeri, Attica, Greece. Greek Tax Identification Number (AFM/VAT): 169244141. Competent tax office: KEFODE ATTIKIS (ΚΕΦΟΔΕ ΑΤΤΙΚΗΣ). Email: vasilisshevhuk@gmail.com. For privacy requests use the same email address. No separate data protection officer is identified for this service.
Data and sources
We process trip inputs you supply (origin, destination, travel dates, budget, party size, interests and free-text notes), requested language, AI-generated itineraries, technical request information, purchase plan, Stripe Checkout session references and the correspondence you send us. The website may keep trip answers and a paid-session reference in your browser’s local storage. Payment-card details are collected by Stripe on its checkout, not by this website.
Purposes and legal bases
We process questionnaire data to prepare requested travel recommendations and fulfil paid purchases (GDPR Art. 6(1)(b)); purchase and accounting information to meet legal obligations where applicable (Art. 6(1)(c)); proportionate security, fraud prevention and error logs based on legitimate interests (Art. 6(1)(f)); and optional tracking only with consent where required (Art. 6(1)(a)). We do not sell your trip answers as marketing lists.
Processors and partner websites
Cloudflare provides hosting, Workers AI and D1 storage; Stripe processes checkout and payment verification; Travelpayouts supplies cached flight data. Clicking a Klook affiliate link leaves our site and is subject to that provider’s separate privacy and cookie policies. Some providers may act as independent controllers for their own services.
International transfers
Depending on service configuration, some providers may process personal data outside the EEA. Where required, lawful transfer mechanisms such as adequacy decisions or standard contractual clauses are relied on by the relevant providers. You can contact us for further information about arrangements relevant to your data.
Storage and retention
Paid-trip inputs and results are retained while needed to deliver and recover purchases, respond to disputes and comply with legal obligations; accounting records are kept for the periods required by applicable law. Technical security records are retained according to provider and operational retention policies. Browser-stored trip data remain until you clear them or the website removes them. You may request deletion of personal data that are no longer legally necessary; server-side deletion is handled on request, subject to applicable obligations.
Rights and complaints
Subject to legal conditions, you may request access, correction, deletion, restriction, portability, object to legitimate-interest processing or withdraw consent. Contact vasilisshevhuk@gmail.com. You may complain to the Hellenic Data Protection Authority at dpa.gr or another competent EU supervisory authority.
Cookies and local storage
The current site uses browser storage for preferences, draft trip answers and paid-session recovery. Stripe, Cloudflare and external partner websites may use their own cookies and security technologies. Non-essential analytics or marketing cookies must not be enabled without a lawful basis and any required consent. This notice should be updated if additional tracking is installed.
Security and access
Access to a saved itinerary is based on the associated Stripe payment session reference, which is sensitive. Keep recovery URLs private, avoid sharing screenshots containing session IDs and contact us if you suspect disclosure. We use safeguards but cannot promise absolute security.
Updates
Last updated: 3 November 2026.