This Privacy Policy describes how we, Vanilla Odyssey DE UG, collect, use, and protect your personal data when you access or use the Boombino platform.
The platform is operated by Vanilla Odyssey DE UG, Baumpieperweg 8, 21149 Hamburg, Germany. We are committed to protecting your privacy and handling your data in a transparent and secure manner.
Vanilla Odyssey DE UG acts as the controller for the processing described in this Privacy Policy.
Vendors providing services booked via the platform usually act as independent controllers for the processing necessary to perform their services.
Payment providers (e.g., Stripe) generally act as independent controllers for payment processing.
We collect and process the following categories of personal data:
We process your personal data for the following purposes:
We rely on the following legal bases:
We may share your data with the following categories of recipients:
No personal data will be shared with third parties unless required by law or necessary to fulfill our services.
Where personal data is transferred to countries outside the EEA, we use appropriate safeguards, such as adequacy decisions or the European Commission’s Standard Contractual Clauses (SCCs). Copies are available on request.
We retain personal data only for as long as necessary to fulfill the purposes of processing or to comply with legal obligations.
Booking and invoicing data: up to 10 years (statutory retention).
Support communications: up to 3 years after last interaction.
Technical logs: 14–90 days, unless required longer for security or legal purposes.
Marketing data: until consent is withdrawn or you opt out.
Under the GDPR, you have the right to:
The platform is intended for use by parents or legal guardians. We do not knowingly allow direct registration by children under the age of 16 without parental consent.
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you.
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. These include encryption, access controls, regular security testing, and a strict need-to-know principle for data access.
We may update this Privacy Policy from time to time. You will be informed of significant changes through the platform or by email. The updated policy will apply from the date of publication.
If you have any questions about this Privacy Policy or your personal data, you can contact us at:
