Privacy policy
Last updated: 2026
Who we are
My Family Booking UG (haftungsbeschränkt), based in Berlin, Germany.
Contact: privacy@myfamilybooking.com
Data Protection Officer: [Name], dpo@myfamilybooking.com
What data we collect
- Account data: name, email, phone number, password (hashed).
- Child profile data: child name, date of birth, age — treated with extra care as it relates to minors.
- Search and booking data: destination searches, dates, booking history.
- Payment data: handled by Stripe — myFamilyBooking™ does not store card numbers.
- Usage data: pages visited, clicks, session duration via Google Analytics and Mixpanel.
- Communications: messages sent through the platform, support emails.
- Cookie data: see our cookie policy.
Why we collect it (legal basis)
- Contract performance: to process bookings and manage accounts.
- Legitimate interest: to improve the platform and prevent fraud.
- Consent: for marketing emails and non-essential cookies.
- Legal obligation: for tax and accounting records.
Children's data
Child profile data (name and age) is used only to personalise search results and pre-fill booking forms. It is never sold, shared with third parties for marketing, or used for profiling. Parents can delete child profiles at any time from account settings.
How long we keep data
- Account data: as long as the account is active + 2 years after deletion request.
- Booking data: 7 years for tax and legal compliance.
- Cookie and analytics data: 13 months.
Your rights under GDPR
- Right to access your data
- Right to correct inaccurate data
- Right to erasure (right to be forgotten)
- Right to restrict processing
- Right to data portability
- Right to object to processing
To exercise your rights, email privacy@myfamilybooking.com.
You also have the right to lodge a complaint with the supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Who we share data with
- Stripe — payment processing
- Google Analytics and Mixpanel — usage analytics
- Mailchimp — email communications
- Property vendors — only booking-relevant guest details shared
We never sell your data to third parties.
International transfers
Some tools (Google, Stripe) transfer data outside the EU. These transfers are covered by Standard Contractual Clauses.
Updates to this policy
We will notify users of material changes by email.