Privacy Policy
1. Controller
The controller within the meaning of the GDPR is:
Flirtways B.V.
Eurode-Park 1/32
NL - 6461KB Kerkrade
Email: [email protected]
2. General Information
Personal data is processed in accordance with the General Data Protection Regulation (GDPR).
Legal bases include:
- Art. 6(1)(b) GDPR (contract performance)
- Art. 6(1)(a) GDPR (consent)
- Art. 6(1)(f) GDPR (legitimate interests)
3. Registration and Platform Use
The following data may be processed:
- Username
- Email address
- Encrypted password
- Voluntary profile information
- Profile photo
- Published travel stories and content
- User messages
- IP address and log data
Processing is carried out for:
- Providing the platform
- Performing the user contract
- Enabling communication
- Ensuring IT security
- Fraud prevention
Legal basis: Art. 6(1)(b) and (f) GDPR.
4. Publicly Visible Content
Ticketflirt is a community platform. Certain profile information and content are visible to other users.
This may include:
- Profile photo
- Username
- Profile description
- Travel stories
- Voluntarily published information
Users are responsible for deciding which information they choose to make publicly available.
Private messages are not publicly visible.
5. Premium Memberships
When booking paid features, payment data is processed via external payment providers.
Ticketflirt does not store full credit card information.
Legal basis: Art. 6(1)(b) GDPR.
6. Fraud Prevention and Security
To protect the community, communication data may be reviewed where there are concrete indications of unlawful activity.
Legal basis: Art. 6(1)(f) GDPR.
7. Use of Matomo (Self-Hosted)
This website uses Matomo for statistical analysis.
Matomo is operated on own servers. No data is transferred to third parties.
Collected data may include:
- anonymized IP address
- browser type
- operating system
- visited pages
- duration of visit
IP addresses are anonymized before storage.
Processing is based on Art. 6(1)(f) GDPR (legitimate interest in optimization).
8. Data Retention
Data is stored:
- as long as the account exists
- in accordance with statutory retention obligations
- until deletion is requested
9. Data Sharing
Data is shared only with:
- hosting and IT providers
- payment providers
- authorities where legally required
No data is sold or used for advertising purposes.
10. Rights of Data Subjects
Data subjects have the right to:
- access
- rectification
- erasure
- restriction
- data portability
- objection
- withdraw consent
Complaints may be lodged with a supervisory authority.