Privacy policy (GDPR)

Data controller

For this demonstration, the student project team acts as the notional data controller. No real data controller is legally established.

Data we collect

Account data: name, email address and, optionally, a phone number.

Usage data: bookings, reviews and messages created within the demonstration.

Technical data: session cookies required for authentication.

Purpose of processing

Data is used only to operate the demonstration features such as authentication, simulated bookings, reviews and owner-renter messaging.

Legal basis

Processing relies on your consent and on the performance of the simulated service. Since the platform is fictional, no data is used for marketing or profiling.

Data retention

Demonstration data is kept only for the duration of the academic project and may be deleted or reset at any time without notice.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to its processing. In this fictional context these rights are illustrative; you may still request removal of any test data you created.

Contact

Requests related to this illustrative policy can be addressed to the project team via the course's official channels.