Privacy Policy | Tramvina

1. What this notice covers

Tramvina is an editorial publication and reservation-enquiry directory for resort accommodation. We treat the safeguarding of personal records, and openness about how we use them, as a core commitment at every point of contact.

This notice covers the collection, organisation, use, transfer, and protection of your information across every part of Tramvina, from browsing ratings to submitting a room request.

2. Categories of information gathered

To return accurate availability, verified assessments, and reliable enquiry confirmations, we handle several categories of record:

Who you are and how to reach you: Full name, form of address, preferred language, region of residence, email address, and any telephone number you supply when registering or submitting an enquiry.
Reservation preferences: Check-in and check-out dates, room type and bedding choice, suite tier, dietary requirements, accessibility needs, and hotel loyalty references.
Billing and payment confirmation records: Cardholder name, truncated card indicators, billing address, and transaction confirmation tokens handled by accredited payment processors. Full card numbers are never stored on Tramvina servers.
Device telemetry and technical metadata: Your IP address, browser build, operating system, the page that referred you, time zone setting, device identifiers, and timestamps for page interactions.

3. Legal grounds and operational purposes

Tramvina processes records only where a recognised legal basis applies: performance of a contract, legitimate business interest, compliance with a statutory duty, or your explicit consent. The operational purposes are:

Passing on your request: Relaying your dates and requirements to the property's reservations desk so it can answer with current availability.
Content customisation: Shaping featured rankings and travel guidance around your preferred destinations and resort types.
Protecting the service: Safeguarding digital infrastructure, validating the legitimacy of transactions, and shielding users from unauthorised profile access.
Service messages: Issuing reservation updates, confirmation vouchers, itinerary reminders, and essential service notifications.
Statutory adherence: Meeting accounting, tax reporting, and record-keeping requirements set by the applicable administrative authorities.

4. Disclosure and partners

There is no sale, rental, or leasing of personal identifiers to unrelated commercial entities. Disclosures occur strictly under contractual protection to the parties below:

Partner properties: Listed hotels receive the minimum needed — name, travel dates, and room requirements — to process your request.
Payment processors: Billing information travels encrypted to accredited payment gateways that maintain current PCI-DSS validation.
Technical infrastructure partners: Enterprise-grade data centres and delivery networks store encrypted backups to maintain uptime and disaster resilience.
Authorities where the law requires: We disclose where compelled by subpoena, court order, or statutory mandate, or where vital individual interests are at stake.

5. Cookies and analytics

Cookies and browser storage let us recognise repeat visitors, remember currency and layout preferences, evaluate site performance, and preserve session integrity. You retain complete control through your browser, but switching off essential cookies degrades enquiry functionality.

6. Security and retention

We apply multi-layered administrative, technological, and physical defences — TLS 1.3 transport encryption, AES-256 storage encryption, separated database clusters, and access limited by role — to guard against unauthorised access, loss, or alteration.

Records are held only as long as needed to complete an enquiry, resolve a question, satisfy audit requirements, or meet a statutory retention period. Once that period ends, records are permanently erased or irreversibly anonymised.

7. Rights and choices available to you

Depending on where you live, and after identity verification, you can exercise these rights:

Access and inspection: Obtain a portable copy of the personal records we hold and confirm how they are being handled.
Correction: Have inaccurate, incomplete, or outdated details corrected without undue delay.
Erasure: Have your data removed once processing is no longer required by law or by the purpose it served.
Limiting processing: Limit how we process your data while accuracy or a legitimate interest is being examined.

Opt-out and your choices

How your personal information is gathered and used remains under your control. Subject to your location and the applicable legislation, you may exercise these opt-outs:

Data sharing and sale: Where the CCPA/CPRA in California or similar laws in other jurisdictions apply, you can opt out of your personal information being sold or shared with third parties. We do not sell personal information in the ordinary meaning of the term, though some data is shared with trusted partners to deliver or improve the service.
Cookie controls: Use your browser's settings, or the consent tool on this site, to manage or reject cookies and other tracking technologies.
Marketing messages: You can stop receiving promotional email or newsletters at any time by using the unsubscribe link in any message, or by contacting us directly.
Withdrawal of consent: Consent given earlier can be withdrawn whenever you choose, without affecting the lawfulness of any processing that took place while the consent was in force.

To exercise any of these rights, or to make an opt-out request, please contact us at [email protected] or use our contact form.

8. Revisions

We may update this notice as regulations or our systems change. Significant revisions are published here with a fresh effective date; continuing to use the site afterwards signifies acceptance.