1. Data Controller
EU Border Authority is the data controller responsible for your personal data. You can reach our privacy team at privacy@euborder.com.
EU Border Authority Legal
This Privacy Policy explains how EU Border Authority collects, uses, and protects your personal data when you use our Schengen visa planning tools, dashboards, and related services.
Last updated: September 30, 2025
EU Border Authority is the data controller responsible for your personal data. You can reach our privacy team at privacy@euborder.com.
We offer an optional program that lets you contribute anonymized travel patterns to help improve the Services. Participation requires explicit opt-in and can be withdrawn at any time. Data collected for this program is hashed monthly, grouped to ensure k-anonymity (minimum group size of 20), generalized to month or quarter ranges, and protected with differential privacy noise. No personal identifiers, precise dates, or IP addresses are stored.
We process personal data based on contract performance (providing the Services), legitimate interests (security, product improvement), consent (optional analytics and marketing communications), and compliance with legal obligations.
We share data with trusted processors who provide infrastructure, analytics, customer support, or payment processing. Each processor signs GDPR-compliant agreements and may only use data on our behalf. We never sell personal information to third parties.
We retain account and travel history data while your account is active and for up to 24 months after closure, unless a longer period is required by law. Support records and audit logs are retained for security and compliance purposes.
Depending on your residence, you may have rights to access, rectify, delete, restrict, or transfer your personal data, as well as to object to processing. You can exercise these rights by contacting privacy@euborder.com. You also have the right to lodge a complaint with your local supervisory authority.
We implement industry-standard security measures including encryption in transit and at rest, strict access controls, regular security assessments, and anonymization safeguards for analytics data.
When personal data is transferred outside the EU/EEA we rely on approved transfer mechanisms such as Standard Contractual Clauses and conduct risk assessments to maintain equivalent protection.
We may update this Privacy Policy to reflect product or legal changes. Material updates will be communicated through the Service dashboard or by email. Continued use after an update constitutes acceptance of the revised Policy.