Privacy Policy

Your Data Controller

Personal Data We Collect

How We Collect Your Personal Data

How We Use Your Personal Data

Data Security

Retention period

Your Rights

Data Protection Officer (Questions, Complaints, and Concerns)

Your Data Controller

This privacy policy covers personal data processed by JackJack Ltd, 7 Sadler Copse, Leeds, LS16 8NW, UK, [email protected] (hereafter referred to as “we”, “us”, “our”, etc.) We are a Data Controller of your personal information that you enter via the interrailplanner.com website and web application.

We know you care about your privacy rights, and we take that seriously. This privacy policy covers our policies and practices regarding our collection and use of your personal data, and sets forth your privacy rights. By using our website, you agree to our privacy policy.

Personal Data We Collect

Our website collects personal data by itself or through third parties. Data we collect are:

  • Cookies
  • Usage data
  • Plan data
  • Email address
  • First name
  • Last name
  • Phone number.

Other personal data collected may be described in other sections of this privacy policy or by dedicated explanation text when we collect the data. This data may be provided by you or collected automatically when using this web application.

Any use of cookies - or of other tracking tools - by this website or by the owners of third party services used by this web application, unless stated otherwise, serves to identify users and remember their preferences, for the sole purpose of providing the service required by the user.

If you do not provide certain pieces of personal data, the web application might not function correctly.

You are responsible for any third party’s personal data obtained, published, or shared through this website and confirm that you have the third party's consent to provide the data to us.

How We Collect Your Personal Data

We may collect your personal data when:

  • You contact us directly
  • You create an account on our website
  • You sign up for emails
  • You visit our website
  • You use our web application to create and edit a plan
  • We receive data from a third party, in accordance with the relevant laws
  • We receive data from our partners, in accordance with the relevant laws.

How We Use Your Personal Data

We use your personal data for the provision of services we offer on our website, as well as for the following purposes:

Registration and authentication

By registering or authenticating, you allow us to identify you and give you access to dedicated services.

Third parties may provide registration and authentication services if the you choose this option. In this case, this web application will be able to access some data stored by these third party services for registration or identification purposes. You can find out more about the various registration methods below.

Direct registration (This website)

To register an account by filling out our registration form, we need the following data:

  • Email address
  • Password.

Facebook Authentication (Facebook, Inc.)

Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and is connected to the Facebook social network.

Personal data collected:

  • Various types of Data as specified in the privacy policy of the service.

Place of processing: US – Privacy Policy

Google Authentication (Google, Inc.)

Google Authentication is a registration and authentication service provided by Google, Inc. and is connected to the Google+ social network.

Personal data collected:

  • Various types of Data as specified in the privacy policy of the service.

Place of processing: US – Privacy Policy

Contacting our users

From time to time, we might wish to contact you to show you new information, promotions or simply to answer your queries. You can find out below under what conditions we will process your personal data for this purpose.

Customer support (This website)

By emailing us or filling in our customer support contact form with your data, you authorise us to use your details to reply to requests for information, quotes, or any other kind of request as indicated by the form’s header. We may also forward the contents of this contact form to experts within our company or our partners for the purpose of answering your queries.

Personal data collected:

  • Email address
  • First name
  • Last name
  • Phone number
  • Plan data.

Account communications (This website)

If you register an account on this website, we may need to contact you about that account on occasion. For example, if you forget your password and need to reset it.

Personal data collected:

  • Email address

Mailing List & Direct Email Marketing (This website)

When you opt in to receive direct marketing emails from us, your email address will be added to our mailing list. Members of this mailing list may receive email messages containing information of commercial or promotional nature. These emails may concern this website, products related to our service offered by our affiliate partners, or other products offered by JackJack Ltd. We may also send you emails to help improve our products, such as a survey. You can unsubscribe in the footer of every email and you can update your email preferences here.

Personal data collected:

  • Email address
  • First name
  • Plan data
  • Last name.

Managing contacts and sending messages

This type of services makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with you.

These services may also collect the following data:

  • Data concerning the date and time when the message was viewed by you
  • Interaction data, such as whether you clicked on links included in the message.

Cloudy

Cloudy.email is an email address management and message sending service.

Personal data collected:

  • Email address
  • Data concerning the date and time when the message was viewed by you
  • Interaction data, such as whether you clicked on links included in the message.

Place of processing: Denmark – Privacy Policy

Analytics

The services contained in this section enable us to monitor and analyse web traffic and can be used to keep track of user behaviour in order to improve our services.

Analytics collected directly (This website)

This website uses an internal analytics system that does not involve third parties.

Personal data collected:

  • Cookies
  • Usage data
  • Plan data.

Google Analytics (Google, Inc.)

Google Analytics is a web analysis service provided by Google, Inc. (“Google”). Google utilizes the data collected to track and examine the use of this website, to prepare reports on its activities and share them with other Google services.

Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Personal data collected:

  • Cookies
  • Usage data.

Place of processing: US – Privacy Policy

You can Opt Out of Google Analytics here.

Google Tag Manager (Google, Inc.)

Google Tag Manager is an analytics service provided by Google, Inc.

Personal data collected:

  • Cookies
  • Usage data.

Place of processing: US – Privacy Policy

Publishing Industry Reports

We may aggregate your and other users’ anonymised plan data to create and publish general insights and reports about Interrailing habits and trends.

Advertising

This type of services allows your data to be utilised for advertising communication purposes by email or displayed in the form of banners and other advertisements on this website, possibly based on your interests.

This does not mean that all personal data are used for this purpose.

Commercial affiliation

This type of services allows this website to display advertisements for third party products or services. Ads can be displayed either as advertising links or as banners using various kinds of graphics.

Clicks on the icon or banner posted on the website are tracked by the third-party services listed below, and are shared with this website. You can opt out of such services here.

For more details of which data are collected, please refer to the privacy policy of each service.

Awin (Axel Springer Group)

Awin is a commercial affiliation service provided by Axel Springer Group.

Personal data collected:

  • Cookies
  • Usage data.

Place of processing: Germany – Privacy Policy

Optimise (Optimise Media Group Limited)

Optimise is a commercial affiliation service provided by Optimise Media Group Limited.

Personal data collected:

  • Cookies
  • Usage data.

Place of processing: UK – Privacy Policy

GetYourGuide Partner & Affiliate Network (GetYourGuide Deutschland GmbH)

GetYourGuide Partner & Affiliate Network is a commercial affiliation service provided by GetYourGuide Deutschland GmbH.

Personal data collected:

  • Cookies
  • Usage data.

Place of processing: Germany – Privacy Policy

ACPRail Affiliate Program (ACP Marketing (Ireland) Limited)

ACPRail Affiliate Program is a commercial affiliation service provided by (ACP Marketing (Ireland) Limited).

Personal data collected:

  • Cookies
  • Usage data.

Place of processing: Ireland – Privacy Policy

Booking.com Affiliate Partner Centre (Booking.com BV)

Booking.com Affiliate Partner Centre is a commercial affiliation service provided by Booking.com (BV)

Personal Data collected:

  • Cookies
  • Usage data.

Place of processing: Netherlands – Privacy Policy

CJ Affiliate by Conversant (Conversant LLC)

CJ Affiliate by Conversant is a commercial affiliation service provided by Conversant LLC.

Personal Data collected:

  • Cookies
  • Usage data.

Place of processing: US – Privacy Policy

Performance Horizon (Performance Horizon Group Ltd)

Performance Horizon is a commercial affiliation service provided by Performance Horizon Group Ltd.

Personal Data collected:

  • Cookies
  • Usage data.

Place of processing: UK – Privacy Policy

Hosting and backend infrastructure

This type of services has the purpose of hosting data and files that enable this website to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of this website. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the personal data are stored.

However, the data is being stored according to GDPR principles at all times.

DigitalOcean (DigitalOcean Inc.)

DigitalOcean is a hosting service provided by DigitalOcean Inc.

Personal data collected:

  • Various types of Data as specified in the privacy policy of the service.

Place of processing: US – Privacy Policy

Data Security

Methods of processing

We process your data in a proper manner and will take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the data.

The data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In addition to us, in some cases, the data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as data processor by us. The updated list of these parties may be requested from us at any time.

Place

The Data is processed at the Data Controller's operating offices and in any other places where the parties involved with the processing are located. For further information, please contact us.

Retention period

The Data is kept for the time necessary to provide the service requested by you, or stated by the purposes outlined in this document, and the you can always request that we suspend or remove the data. We will delete your data if you choose to delete your account.

Your Rights

This Privacy Policy is intended to provide information with regards to collection, processing and use of your data. You can always contact us at [email protected] if you have any further questions or with to exercise these rights.

At any time, you can contact us to withdraw consent, suspend further processing, object to our use of data for marketing purposes, demand access and/or a copy of your data, amend your data, or request for it to be deleted. These rights are explained in more details in the section below.

The Right to Information

Contact us at [email protected] at any time to request information about the purpose of processing, the categories of personal data we use, whom we share your data with, how we obtained the data, and how long we will store it for.

The Right to Access

You have the right to obtain a copy of your personal data, along with other additional information. We will confirm whether we process your data and provide you with a copy if we do, along with other information not provided in our privacy policy (see The Right to Information).

The Right to Rectification

You can make a rectification request if you want to rectify inaccurate personal data. We will respond to your request within a month. We will in most cases restrict the processing of your data while we are verifying its accuracy.

The Right to Erasure

You have the right to have your personal data erased which applies in some cases. These are:

  • It is no longer necessary for the purpose we originally collected it for
  • You want to withdraw your consent
  • If your legitimate interests outweigh ours
  • There is a legal obligation
  • The data relates to children
  • The data is processed for direct marketing purposes
  • Unlawful processing.

The Right to Restrict Processing

You can request that we restrict the processing of personal data when:

  • You contest its accuracy
  • The data is unlawfully processed but you oppose its erasure
  • You need the data to verify a legal claim
  • We are considering whether your legitimate interests outweigh ours.

The Right to Portability

You can receive the personal data you have stored with us in a commonly readable, interoperable format for your own use across various other services. We can move the data for you to another service, or we can send the data to you directly.

Rights Related to Automated Decision Making Including Profiling

We will only carry out automated decision-making and profiling operations if:

  • They are necessary for entry into or performance of a contract
  • We’ve received your explicit consent
  • We have a legal obligation to do so.

You have the right to request human intervention or challenge such decisions.

Data Protection Officer (Questions, Complaints, and Concerns)

We have appointed a data protection officer for you to contact if you have any questions about our privacy policy or personal data handling practices. Our data protection officer’s name and contact information are as follows:

Ozren Ćuk
Crionis
Eugena Kvaternika 49
Vukovar, Croatia
+385 92-335-77-25

Last updated on May 22, 2018.