Privacy Policy

1. Information We Collect

1.1 Location Data

When you use our route tracking and discovery features, we collect:

• GPS coordinates: Precise location data to record and display your routes
• Route waypoints: Sequential location points that form your tracked routes
• Geographic information: Elevation, speed, and distance data associated with your routes

Legal basis: Processing is based on your explicit consent (GDPR Art. 6(1)(a)) when you activate GPS tracking features.

1.2 Account Information

If you create an account, we collect:

• Email address
• Username
• Password (encrypted)
• Profile information (optional)

Legal basis: Processing is necessary for the performance of a contract (GDPR Art. 6(1)(b)).

1.3 Usage Data

We automatically collect:

• Browser type and version
• Device information
• IP address
• Pages visited and features used
• Time and date of access

Legal basis: Legitimate interests (GDPR Art. 6(1)(f)) to improve our services and ensure security.

1.4 User-Generated Content

When you interact with our platform, we collect:

• Route names and descriptions
• Comments on routes
• Route ratings and reviews
• Photos or media you upload

2. How We Use Your Information

We use your information to:

• Provide services: Display your routes, enable route discovery, and facilitate community features
• Improve functionality: Analyze usage patterns to enhance user experience
• Communicate: Send service updates, respond to inquiries, and provide customer support
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal compliance: Comply with applicable laws and regulations

3. Location Data Consent

• Enable or disable location tracking at any time through your device settings
• Choose which routes are public or private
• Delete your location data from your account settings
• Withdraw consent for location tracking without affecting other services

Location tracking only occurs when you actively use our GPS tracking features. We do not collect location data in the background without your knowledge.

4. Data Sharing and Disclosure

4.1 Public Routes

If you choose to make a route public, the following information will be visible to other users:

• Route path and waypoints
• Route name and description
• Distance, elevation, and duration data
• Your username (if you choose to display it)

4.2 Third-Party Services

We may share data with trusted third-party service providers:

• Map providers: OpenStreetMap for displaying maps and routes
• Hosting services: Amazon Web Services (AWS) for data storage and processing
• Analytics: To understand usage patterns and improve our services

All third-party providers are contractually obligated to protect your data and use it only for specified purposes.

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Protect the rights and safety of our users

5. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account data: Until you delete your account or request data deletion
• Route data: Until you delete individual routes or your account
• Usage logs: Up to 12 months for security and analytics purposes
• Legal obligations: We may retain certain data longer if required by law

After the retention period, we will securely delete or anonymize your personal data.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for location tracking at any time

To exercise these rights, please contact us at info@tourino.ch. We will respond to your request within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access controls: Strict authentication and authorization mechanisms
• Regular audits: Security assessments and vulnerability testing
• Employee training: Staff are trained on data protection best practices

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our security measures.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze site usage and performance
• Provide personalized features

You can control cookie preferences through your browser settings. For detailed information, please see our Cookie Policy.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for countries with equivalent data protection laws
• Additional safeguards to protect your rights

10. Children's Privacy

Tourino is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete such data.

11. Third-Party Links

Our platform may contain links to external websites not operated by us. We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting a notice on our website
• Sending an email to registered users
• Updating the "Last updated" date at the top of this policy

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

14. Contact for Data Protection Inquiries

For data protection inquiries, please contact us at info@tourino.ch.