Privacy Policy
At Famaway, we build a family-travel concierge for parents in Vienna. We take your privacy seriously and collect the minimum data needed to deliver what you ask us for. This policy explains what we collect, why, and how you control it, in plain language — as required under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
1. Who we are
Controller: Famaway (founder: Rozafa Ramadani Mavriqi), Vienna, Austria.
Contact for privacy questions: privacy@famaway.app
General contact: contact@famaway.app
2. What data we collect
When you request a free itinerary PDF
We ask for:
- Email address — so we can send you the PDF.
- First name — so the email feels human, not a form letter.
- Age groups in your family (optional) — age ranges like 3–6 or 7–10, so we can send you relevant tips later if you’ve opted in. We never ask for your children’s names, exact birthdates, photos, or any identifying information about minors.
Technical data
When you visit famaway.app, our hosting provider may log standard server data (IP address, browser type, referring page, timestamp) for security and debugging. We do not use analytics cookies at this time. We do not track you across other websites.
3. Why we process your data (lawful basis)
Under GDPR Article 6(1)(a), we process your data on the basis of your explicit consent, which you give by ticking the consent boxes in our itinerary form. You give us two separate, independent consents:
- Required consent: “Yes, send me the PDF itinerary by email.” This is the only data use tied to the service you requested.
- Optional consent: “Also send me occasional Vienna family tips from Famaway.” This is separate, optional, and you can withdraw it anytime (every email has an unsubscribe link).
We do not use any pre-ticked boxes and we do not bundle these consents together. You get the PDF whether you opt into the newsletter or not.
4. How long we keep your data
- If you only consented to the PDF: we keep your email for 90 days after delivery (in case you reply and ask follow-up questions), then delete it.
- If you also opted into the newsletter: we keep your email for as long as you stay subscribed. One click on the unsubscribe link in any email removes you permanently within 48 hours.
- Server logs: kept by our host for a maximum of 14 days for security purposes.
5. Who we share your data with
We do not sell your data. Ever. We use a small number of carefully chosen processors (GDPR Art. 28) that handle data on our behalf under written agreements:
- Formspree (form delivery) — receives your submission and forwards it to our inbox. EU Standard Contractual Clauses in place. Formspree privacy policy.
- Our email provider — stores the email thread between you and us. Details provided on request.
- Our website host — serves famaway.app and handles basic server logs. Details provided on request.
We do not share your data with advertisers, data brokers, or any third parties for marketing purposes.
6. International transfers
Where any of our processors transfer data outside the European Economic Area (EEA), the transfer is covered by EU Standard Contractual Clauses or an equivalent legal mechanism approved under GDPR.
7. Your rights under GDPR
You have the following rights at any time. To exercise any of them, email privacy@famaway.app — we’ll reply within 30 days (usually within 48 hours).
- Right of access (Art. 15): ask us for a copy of everything we hold about you.
- Right to rectification (Art. 16): ask us to correct any inaccurate data.
- Right to erasure / “right to be forgotten” (Art. 17): ask us to delete your data. We’ll do it unless we have a legal obligation to keep it.
- Right to restrict processing (Art. 18): ask us to pause processing while we resolve a query.
- Right to data portability (Art. 20): get a copy of your data in a portable format (CSV).
- Right to object (Art. 21): tell us to stop processing your data for marketing. We’ll stop immediately.
- Right to withdraw consent (Art. 7(3)): you can withdraw either consent at any time. Withdrawal doesn’t affect lawful processing that already happened.
- Right to lodge a complaint: you can complain to the Austrian Data Protection Authority (Datenschutzbehörde) at dsb.gv.at.
8. Children’s privacy
Famaway is designed for parents. We do not knowingly collect any personal data from children. We ask parents about age groups in the family (e.g. “3–6”), not children’s names, birthdates, or photos. If you believe we’ve accidentally collected data about a child, email privacy@famaway.app and we’ll delete it immediately.
9. Cookies
famaway.app currently uses only strictly necessary technical cookies required for the site to function (e.g. to remember your session on the interactive plan builder). We do not set advertising, analytics, or tracking cookies. Because we only use strictly-necessary cookies, no cookie consent banner is required under the ePrivacy Directive.
If we introduce analytics in the future, we will update this policy and ask for your consent before any non-essential cookies are set.
10. Security
We protect your data with encryption in transit (HTTPS/TLS), access controls, and regular review of our processors’ security. If a personal-data breach occurs that poses a risk to your rights, we will notify you and the Austrian DSB within 72 hours, as required by GDPR Art. 33–34.
11. Changes to this policy
If we materially change how we process your data, we’ll update this page and notify subscribers by email. Minor wording updates are reflected in the “Last updated” date at the top.
12. Questions
Privacy is a real thing, not a checkbox. If any of this is unclear, or you’d like more detail on how we handle something specific, please email privacy@famaway.app and we’ll get back to you personally.