Privacy Policy

This Privacy Policy complies with the EU General Data Protection Regulation (GDPR) and explains how YowJourney collects, uses, stores, and protects your personal data.

1. Data Controller

YowJourney
Email: yowjourney.com@gmail.com

2. Legal Basis for Data Processing

We process your personal data on the following legal bases according to GDPR:

• Consent (Article 6(1)(a)): For marketing communications and analytics
• Contract performance (Article 6(1)(b)): To provide our services
• Legitimate interests (Article 6(1)(f)): For security and service improvement
• Legal obligations (Article 6(1)(c)): To comply with legislation

3. Data We Collect

3.1 Data provided voluntarily:

• Name and contact information
• Profile data and preferences
• User content (reviews, comments)

3.2 Automatically collected data:

• IP address and location data
• Device and browser information
• Website usage data (via cookies)
• Server logs

3.3 Third-party data:

• Social media data (when authorizing)
• Analytics data from partners

4. Purposes of Data Processing

We use your data for:

• Service provision: account creation, content personalization
• Communications: responding to inquiries, technical support
• Service improvement: usage analysis, new feature development
• Security: fraud prevention and abuse detection
• Marketing: newsletters and advertising (only with your consent)
• Legal compliance: fulfilling legal obligations

5. Data Sharing with Third Parties

We may share your data with:

5.1 Service providers:

• Hosting provider (Vercel)
• Analytics services (Google Analytics)
• Authentication and database (Supabase)
• Content management (Sanity CMS)
• Mapping services (Leaflet, OpenStreetMap, CARTO)

5.2 Legal requirements:

• Law enforcement agencies upon official requests
• During mergers and acquisitions

All transfers are made with appropriate data protection safeguards.

6. International Data Transfers

When transferring data outside the EEA, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCC)
• Certification programs

7. Data Retention Periods

• Active accounts: until account deletion by user
• Inactive accounts: 3 years from last activity
• Logs and analytics: 12 months
• Legal obligations: as required by legislation

8. Your Rights Under GDPR

You have the following rights:

8.1 Right of access (Article 15)

Request a copy of your personal data

8.2 Right to rectification (Article 16)

Correct inaccurate or incomplete data

8.3 Right to erasure (Article 17)

Delete your data under certain conditions

8.4 Right to restrict processing (Article 18)

Limit processing under certain circumstances

8.5 Right to data portability (Article 20)

Receive data in a structured format

8.6 Right to object (Article 21)

Object to data processing

8.7 Right to withdraw consent (Article 7)

Withdraw consent at any time

To exercise your rights, contact us at: yowjourney.com@gmail.com

9. Security Measures

We apply modern technical and organizational measures:

• Data encryption during transmission and storage
• Access control with principle of least privilege
• Regular security audits
• Staff training on data protection
• Pseudonymization and anonymization where possible

10. Breach Notification

In case of personal data security breaches, we will:

• Notify the supervisory authority within 72 hours
• Notify users when there's high risk to their rights and freedoms

11. Children and Minors

Our service is not intended for persons under 16 years old. We do not intentionally collect children's data.

12. Automated Decision Making

We may use automated processing for:

• Content personalization
• Fraud detection
• User behavior analytics

You have the right not to be subject to decisions based solely on automated processing.

13. Complaints

You have the right to lodge a complaint with a data protection supervisory authority:

• In the EU: the authority of your usual residence country
• In Ukraine: the Commissioner for Personal Data Protection

14. Policy Changes

We may update this Policy. Significant changes will be communicated through:

• Email notifications
• Website notifications

15. Contact Information

For data protection inquiries, contact:

Email: yowjourney.com@gmail.com