EU Border Authority Legal

Privacy Policy

This Privacy Policy explains how EU Border Authority collects, uses, and protects your personal data when you use our Schengen visa planning tools, dashboards, and related services.

Last updated: September 30, 2025

1. Data Controller

EU Border Authority is the data controller responsible for your personal data. You can reach our privacy team at privacy@euborder.com.

2. Information We Collect

  • Account data: name, email address, authentication credentials, and subscription tier.
  • Travel planning data: trip histories, countries visited, entry and exit dates, and notes you enter to calculate compliance.
  • Support communications: messages sent to customer support or feedback forms.
  • Technical data: device type, browser, and diagnostic logs collected to keep the Services secure and reliable.

3. Optional Anonymized Analytics

We offer an optional program that lets you contribute anonymized travel patterns to help improve the Services. Participation requires explicit opt-in and can be withdrawn at any time. Data collected for this program is hashed monthly, grouped to ensure k-anonymity (minimum group size of 20), generalized to month or quarter ranges, and protected with differential privacy noise. No personal identifiers, precise dates, or IP addresses are stored.

4. How We Use Data

  • Deliver core calculator functionality and personalized travel dashboards.
  • Send service updates, security alerts, and billing notifications.
  • Provide customer support and troubleshoot issues.
  • Improve product performance and develop new features (anonymized analytics only when opted in).
  • Meet legal obligations, including responding to lawful requests from authorities.

5. Legal Bases

We process personal data based on contract performance (providing the Services), legitimate interests (security, product improvement), consent (optional analytics and marketing communications), and compliance with legal obligations.

6. Data Sharing

We share data with trusted processors who provide infrastructure, analytics, customer support, or payment processing. Each processor signs GDPR-compliant agreements and may only use data on our behalf. We never sell personal information to third parties.

7. Data Retention

We retain account and travel history data while your account is active and for up to 24 months after closure, unless a longer period is required by law. Support records and audit logs are retained for security and compliance purposes.

8. Your Rights

Depending on your residence, you may have rights to access, rectify, delete, restrict, or transfer your personal data, as well as to object to processing. You can exercise these rights by contacting privacy@euborder.com. You also have the right to lodge a complaint with your local supervisory authority.

9. Security

We implement industry-standard security measures including encryption in transit and at rest, strict access controls, regular security assessments, and anonymization safeguards for analytics data.

10. International Transfers

When personal data is transferred outside the EU/EEA we rely on approved transfer mechanisms such as Standard Contractual Clauses and conduct risk assessments to maintain equivalent protection.

11. Changes

We may update this Privacy Policy to reflect product or legal changes. Material updates will be communicated through the Service dashboard or by email. Continued use after an update constitutes acceptance of the revised Policy.