Privacy Policy

§ 01Overview

This Privacy Policy explains how [COMPANY NAME] ("we," "us," or "our") collects, uses, and protects personal information when you visit etiasapply.eu.com (the "Site"). By using the Site, you agree to the terms of this Policy. If you do not agree, please do not use the Site.

We designed the Site to operate on a minimum-data basis. We collect personal information only where necessary to run the Site, respond to your requests, measure traffic, and comply with legal obligations.

§ 02Who we are (data controller)

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and similar laws, the data controller responsible for your personal information is:

§ 03Information we collect

3.1 Information you give us

• Newsletter subscription: your email address, if you subscribe to our weekly briefing.
• Contact inquiries: your name, email address, and the content of any message you send through the contact form or by email.
• Optional feedback: survey responses or comments you voluntarily submit.

3.2 Information collected automatically

• Log data: IP address, browser type and version, operating system, referring URL, pages viewed, date/time of access.
• Analytics data: aggregated, privacy-respecting usage metrics (page views, time on page, approximate geography at country level, device class) collected through a cookieless or cookie-based analytics tool disclosed in our Cookie Policy.
• Local storage: small values stored in your browser for features such as the 90/180 calculator, trip planner, and dark mode preference. These values stay on your device and are not transmitted to us.

3.3 Information we do not collect

We do not collect passport numbers, national ID numbers, dates of birth, travel itineraries linked to an identified individual, biometric data, payment card numbers, or any data submitted to third-party ETIAS, EES, or government systems. If a website is asking you for those details under our name, it is not us.

§ 04How we use information

• To operate and maintain the Site.
• To send the newsletter to subscribers (until they unsubscribe).
• To respond to your messages and contact requests.
• To understand how the Site is used and to improve content, navigation, and performance.
• To detect and prevent abuse, spam, and security incidents.
• To comply with legal, accounting, or reporting requirements.

§ 05Legal bases for processing (GDPR / UK GDPR)

§ 06Sharing & disclosure

We do not sell personal data. We do not share personal data with ETIAS resellers, travel marketers, or data brokers. We share limited personal data only with:

• Service providers (processors): hosting, email delivery, analytics, error logging, and customer-support tools, each acting on our documented instructions under a data processing agreement.
• Legal and safety recipients: where disclosure is required by law, to enforce our Terms, or to protect the rights, property, or safety of the Site, our users, or others.
• Business transfers: in the event of a merger, acquisition, or asset sale, personal data may be transferred, subject to this Policy or a successor.

§ 07International transfers

Some of our service providers are located outside the European Economic Area or the United Kingdom. Where personal data is transferred outside these areas, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or transfers to countries subject to adequacy decisions. A list of processors and transfer locations is available on request.

§ 08Data retention

• Newsletter email addresses: until you unsubscribe, plus up to 12 months in a suppression list to honor your opt-out.
• Contact form messages: up to 24 months after the last correspondence.
• Server and analytics logs: typically 14–90 days depending on the log type.
• Legal and tax records: the period required by applicable law.

§ 09Your rights (EU/UK residents)

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure (the "right to be forgotten");
• Restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent at any time, without affecting the lawfulness of prior processing;
• Lodge a complaint with your national supervisory authority — for EU residents, see the EDPB members list; for UK residents, the ICO.

To exercise any of these rights, contact us using the details in §14. We respond within the statutory timeframe (generally one month under GDPR).

§ 10US state privacy rights

Residents of California, Virginia, Colorado, Connecticut, Utah, and certain other US states with applicable privacy laws have additional rights, including the right to know, delete, correct, and opt out of certain processing (such as "sale" or "sharing" for cross-context behavioral advertising). We do not "sell" personal information as that term is defined by the CCPA/CPRA. To exercise your rights, contact us using the details in §14.

§ 11Children

The Site is intended for a general audience and is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, please contact us and we will delete it.

§ 12Security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, and loss — including TLS encryption in transit, access controls, and limited retention. No system is perfectly secure, and we cannot guarantee absolute security.

§ 13Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced on the Site. Continued use after an update constitutes acceptance of the revised Policy.

§ 14How to contact us

For privacy questions or to exercise your rights, contact:

Last reviewed April 20, 2026 · Policy version 1.0