Privacy policy

Who is responsible?

The data controller is Take5. Questions about your data? Email info@take5.travel.

What data do we process?

Data you provide: if you email us, we process your email address and the content of your message.

Usage data: on a visit we log technical data (IP address, browser type, pages viewed) and — with your consent — analytics cookies to improve the site.

Referrals: when you click through to a tour operator we record that click (destination, trip, time) so any commission can be attributed to us.

Why, and on what legal basis?

To show and secure the site (legitimate interest), to answer your query (steps at your request), to analyse and improve the site (consent, via the cookie banner), and to account for our affiliate commission (legitimate interest).

Sharing with third parties

We never sell your data. We share only what is necessary with the operator you click through to (via a referral link) and with processors that help us (e.g. hosting and analytics), always under a data-processing agreement.

Holiday assistant

When you use the holiday assistant, we send what you type, together with your earlier questions in the same conversation, to Anthropic in the United States. Anthropic turns your question into search filters and writes the answer; the trips and prices always come from our own data. We do not send your name, email address or IP address.

Anthropic acts as our processor under a data-processing agreement with standard contractual clauses for transfers outside the EU, and under its commercial terms does not use this data to train models. Legal basis: steps at your request. Please don't type anything into the assistant you don't want to share, such as names or health information.

Account and email

You can create an account with just your email address: you log in with a link we email you (valid for 15 minutes, usable once), without a password. We then keep your email address, the trips you save with your notes, your email preferences and a log of your consents (when, which wording, with a hashed IP address). You stay logged in for 30 days while you use the site. Legal basis: providing the service you ask for; for the newsletter your consent, which you confirm through a link in your email and can withdraw any time with one click.

To send login, confirmation and unsubscribe emails we currently use Microsoft (Microsoft 365 / Exchange Online, within the EU Data Boundary) as our processor, under a data-processing agreement. Microsoft only receives your email address and the content of the email.

We delete login links after 24 hours and unconfirmed newsletter sign-ups after 30 days. We keep your account until you delete it. Under My account you can download your data and delete your account straight away; after that we only keep a hashed version of your email address if you had unsubscribed, so that we do not email you again.

Retention

We keep data no longer than necessary: email correspondence up to 24 months after handling, and aggregated/pseudonymised statistics for as long as useful for analysis.

Your rights

You have the right to access, rectify, erase, restrict, object and to data portability. Send a request to info@take5.travel. You may also lodge a complaint with your national data-protection authority.

Cookies

For cookies and similar technologies, see our separate Cookie policy at take5.travel/be/cookies/en.