Privacy policy for Seychelles Pro

• No account, no sign-in. The app sends me no data on its own.
• What you create in the app stays on your device.
• No ads, no analytics, no tracking.
• For some features the app fetches data from Central Bank of Seychelles.

Responsible for the app Seychelles Pro is:

For any question about data protection, write to [email protected]. There is no data protection officer, because the law does not require one for a business of this size.

The app stores on your device your trip (dates, airport, travellers, plan), your favourites, travel documents you add, exchange rates, your reading progress and your settings. The maps are built into the app; it loads nothing from a map server.

This data lives only on your device; I have no access to it. It is needed for the features you use (section 25(2) no. 2 TDDDG, Art. 6(1)(b) GDPR). Deleting the app removes it.

If backups are turned on (iCloud or Google), the operating system includes the app data in them. You control this in your device settings; Apple’s or Google’s terms apply.

The app asks for a permission only when you use the feature. You can revoke any permission in your device settings at any time; the rest of the app keeps working. The legal basis is your permission in the system dialog (Art. 6(1)(a) GDPR, section 25(1) TDDDG).

• Location: The app shows your location as a dot on the map. The app asks only while it is open, never in the background. Your location does not leave your device and is not stored.
• Camera: You can photograph receipts and tickets to keep them as travel documents. They stay in the app on your device.
• Photos: You can add images from your library as travel documents. The app sees only the images you pick.
• Files and sharing: You can add documents from Files, share your trip as text, file or PDF and import a shared trip. You decide in the share sheet what you share and with whom.
• Reading aloud: The app can read guides aloud with your device’s voices.

For some features the app fetches public data from these services. It does not sign in anywhere and sends no identifier of yours. The legal basis is providing the feature you use (Art. 6(1)(b) GDPR).

• Central Bank of Seychelles (Central Bank of Seychelles, Victoria, Seychelles): Current Seychelles rupee exchange rates, at most every six hours, when you open the currency converter. Sent are no further details and your IP address. The server is in a country without an adequacy decision. It receives only your IP address, which it needs to send the public data asked for. The transfer is necessary for the feature you use in the app (Art. 49(1)(b) GDPR).

The buttons for flight, hotel and tour search lead to Aviasales, Hotellook and KKday. These are affiliate links through Travelpayouts. So the search fits right away, the link contains your travel dates, departure airport, number of travellers, currency and language. Directions links open Apple Maps or Google Maps with the destination, not your location.

An affiliate link opens in your browser or in the provider’s app. Only then does the provider learn of your visit and may set cookies; its privacy policy applies. If you buy something there, I may earn a commission, but receive no data about you. Your price stays the same.

If you tap feedback or report a bug in the app, your mail app opens with a prepared message. Bugs go to [email protected], suggestions and corrections for places to [email protected]. The message already contains the app version and operating system, for places the place name and for suggestions your search term. You see everything before sending and can edit or delete it; only what you send yourself is sent.

I use your message only to help you and delete it once the matter is settled. The legal basis is your use of the app (Art. 6(1)(b) GDPR) or my legitimate interest in answering (Art. 6(1)(f) GDPR). The mailboxes are hosted by STRATO GmbH, Berlin, as my processor.

When you download or update the app, Apple or Google process data such as your account details and device ID under their own responsibility. I have no influence on this. From the stores I receive only aggregated statistics (such as downloads per country) and crash reports not linked to you, if you allowed sharing them in your device settings.

Where I process personal data about you, you have these rights:

• Access to your data (Art. 15 GDPR)
• Correction of wrong data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Receiving your data in a common format (Art. 20 GDPR)
• Withdrawal of consent, at any time and for the future (Art. 7(3) GDPR)

Objection (Art. 21 GDPR): Where processing rests on a legitimate interest (Art. 6(1)(f) GDPR), you may object to it at any time on grounds relating to your particular situation. I then stop, unless there are compelling legitimate grounds that override your interests, or the processing serves legal claims.

An informal email to [email protected] is enough. You may also lodge a complaint with a data protection authority (Art. 77 GDPR), for example the one responsible for me:

www.baden-wuerttemberg.datenschutz.de

I do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

When the processing changes, I update this policy. The date at the top shows the last revision. The German version prevails.