Privacy
What this site processes, why, for how long, and your rights. Last updated 10 October 2026.
Who is responsible
In short
No accounts, no cookies, no analytics, no advertising and no tracking of what you read. The only personal data we process by default is what your browser necessarily sends when it asks for a page, and what you choose to write to us.
When you visit the site
What: your IP address, the time, the address of the page you asked for, the response status and your browser’s user-agent string. What you type into the place search is sent to our server to return suggestions; it is not stored against you.
Why: to deliver the site, to find faults, and to detect and stop abuse and attacks. This is our legitimate interest in operating and securing the site (Art. 6(1)(f) GDPR). It is not used for profiling, statistics or marketing, and it is not combined with anything else.
How long: logs that can contain your IP address are deleted after 7 days. Short-lived counters that damp abusive request rates are held in server memory for about a minute and are never written to disk.
Who sees it: only us and the hosting provider that runs the server (below). We do not sell or share it.
When you write to us
If you email info@latynextravel.com we process your address and what you write in order to answer you (Art. 6(1)(f) GDPR; or Art. 6(1)(b) if you ask us for something). We keep the correspondence for as long as it takes to deal with your enquiry and any follow-up, and then delete it, unless we need it to establish or defend a legal claim. You may of course decline to write to us; nothing on the site requires it.
Links to partners
At the moment this site contains no links to partner services and records no clicks. If that changes, this section is updated before the first such link is live.
What happens on other sites
Bookings, payments, claims, insurance and visa applications are handled by the operator or provider you go to, not by us. Data you give them — passport details, payment card, claim documents, health or accessibility needs — is theirs to protect and is governed by their notices. We never ask for it.
Who processes data on our behalf
Hetzner Online GmbH
Hosting: the dedicated server, in Germany, on which the site and its database run
Request metadata handled by the server we operate: IP address, user agent, requested URL, timestamp. The catalogue database holds places, connections and page states only — no personal data.
Processing location: Germany (EU)
Google LLC (Google Drive)
Off-server storage of encrypted database backups
Encrypted backup files only. They are encrypted before they leave the server, with a key that Google does not hold.
Processing location: Determined by Google; not chosen by us
That is the complete list: no analytics provider, no advertising network, no email platform and no CRM.
Your rights
You may ask us for access to your personal data, its correction or erasure, restriction of processing and portability, and you may object to processing based on legitimate interest. In practice, because we hold almost nothing that identifies you, a request will often be answered by saying so. Write to info@latynextravel.com.
You have the right to lodge a complaint with a supervisory authority — in the EU country where you live or work, or where you think the rules were broken. Ours is the Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), Tatari 39, 10134 Tallinn, Estonia; aki.ee.