Privacy Policy
This Privacy Policy describes how LUKTEK SRL ("LUKTEK," "we," "us," or "our") collects, uses, and discloses your information in connection with your use of the HolidaysMap API and related services (the "Service").
By accessing or using our Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect very limited personal information directly from you when you register for an account and interact with our Service:
- Account Information: When you create an account, we collect your name, email address, and a password. This information is essential for setting up and managing your access to the API.
- Communications: If you contact us via email, we will retain your email and any information you provide in those communications to assist you and improve our support services.
- Authentication Token: We use essential cookies to store an authentication token, which is necessary to keep you logged into your account and ensure the proper functioning of our Service.
We do not collect sensitive personal data. Specifically:
- We do not collect IP addresses.
- We do not collect user agent strings or detailed technical information about your browser/client.
- We do not collect the parameters of your API requests (e.g., country, date, format) and do not associate any usage data with individual users or accounts beyond the basic request count necessary for billing.
- We do not collect payment card details. All payment processing is handled securely by our third-party payment processor, Stripe. We do not store your full payment card information on our servers.
2. How We Use Your Information
We use the information we collect solely for the following purposes:
- To Provide and Maintain the Service: This includes setting up your account, authenticating your access to the API, and ensuring the smooth operation of the HolidaysMap API.
- To Manage Your Account: For purposes such as allowing you to log in, recover your password, and manage your subscription.
- To Provide Customer Support: To respond to your inquiries, assist with technical issues, and provide general support.
We do not use your information for marketing or advertising purposes.
3. Sharing Your Information
We do not share your personal information with third parties, except in the following limited circumstances:
- Payment Processing: We use Stripe as our third-party payment processor. When you make a purchase, your payment information is provided directly to Stripe and is subject to their privacy policy. We do not receive or store your full payment card details.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
4. Data Retention
We retain your personal information (name, email, password) for as long as your account is active. If you delete your account, your information will be removed from our active databases within one month.
Email communications are retained to maintain a record of our interactions and improve ongoing support.
5. Data Security
We are committed to protecting the security of your information. We implement reasonable technical and organizational measures designed to protect your personal data from unauthorized access, use, alteration, or disclosure. These measures include, but are not limited to:
- Using SSL/TLS encryption (HTTPS) for data in transit.
- Storing passwords using strong hashing algorithms.
- Implementing access controls to restrict unauthorized access to systems where personal data is stored.
6. Your Data Protection Rights (GDPR)
As a user of our Service, you have certain data protection rights, which include:
- The Right to Access: You have the right to request copies of your personal data we hold.
- The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The Right to Erasure ("Right to be Forgotten"): You have the right to request that we erase your personal data, under certain conditions.
- The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
- The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us at the email address provided below.
You also have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe your rights have been violated. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).
7. Children's Privacy
Our Service is not intended for individuals under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will also inform you via email prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, feel free to reach out to us.