Privacy Policy

1. Who we are

Vacanexus is a curated travel discovery platform operated from Luxembourg. We help travellers find their ideal vacation destination through a personalised quiz and a matching algorithm that runs in your browser. For any data-related enquiry, contact us at: [email protected]

2. What data we collect

Data you provide directly

• Quiz responses: your travel preferences, budget, group size, travel dates and destination interests — used solely to generate your personalized destination match and itinerary.
• Email address: if you choose to receive your itinerary by email or subscribe to our newsletter. Always optional and based on your explicit consent.

Data collected automatically

• Analytics data: pages visited, time spent on each page, the referring website, device type and your browser's time zone (used to estimate the country). This is collected by our own cookieless analytics. We do not store your IP address: a one-way hash of your IP address and browser, combined with a key that is destroyed every day, is used only to count visits within a single day and cannot be linked from one day to the next. Do Not Track and Global Privacy Control signals are honoured.
• Cookies: see our Cookie Policy for full details.
• Server logs: IP addresses and access times, retained for a maximum of 30 days for security purposes.

3. How we use your data

• To generate your personalised destination match and travel itinerary
• To send you your itinerary and travel recommendations by email, if requested
• To send our newsletter with travel inspiration, if you subscribed
• To improve our quiz, matching algorithm and website content
• To measure website performance and understand visitor behaviour
• To comply with legal obligations

4. Legal basis for processing (GDPR)

• Consent (Art. 6(1)(a)): for email collection, newsletter subscription and non-essential cookies
• Legitimate interests (Art. 6(1)(f)): for analytics and site security
• Contract performance (Art. 6(1)(b)): for delivering the quiz results and itinerary you requested

5. Third-party services and data sharing

We do not sell your personal data. We share data with trusted third-party services only as necessary:

• Brevo: email marketing platform — stores your email address if you subscribe.
• Travelpayouts: flight-search widget shown on the quiz results page; it is loaded from Travelpayouts' servers. If you book through it, Vacanexus may earn a commission at no extra cost to you.
• Affiliate links: apart from the Travelpayouts flight widget above, we have no active affiliate partnership. This policy will be updated before any new affiliate link is published.

6. Data retention

• Quiz responses (without email): not stored — processed in real-time and discarded
• Email addresses: retained until you unsubscribe or request deletion
• Analytics data: 400 days, stored on our hosting provider's servers (Hostinger)
• Server logs: 30 days maximum

7. Your rights under GDPR

As a resident of the EU/EEA, you have the right to: access your data, correct inaccuracies, request erasure, restrict processing, data portability, object to processing, and withdraw consent at any time.

To exercise any of these rights, email: [email protected]. We will respond within 30 days.

You may also lodge a complaint with the Luxembourg data protection authority: Commission Nationale pour la Protection des Données (CNPD) — cnpd.public.lu

8. Data security

We implement SSL encryption (HTTPS), restricted access controls and regular security monitoring to protect your personal data against unauthorized access, loss or disclosure.

9. International transfers

Some third-party providers (Brevo, Travelpayouts) may process data outside the EEA. Where this occurs, appropriate safeguards including Standard Contractual Clauses are in place.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website.

11. Contact

[email protected]