Privacy Policy

Privacy Policy

1. Introduction

This Privacy Policy explains how Birdmi (“Birdmi”, “we”, “us”, or “our”) collects, uses, processes, and protects your personal data when you use our platform at https://www.birdmi.com (the “Platform”).

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).


2. Data Controller

The data controller responsible for data processing is:

Birdmi.com
Albrechtstr. 16
10117 Berlin
Germany

Email: info@birdmi.com


3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information you provide

  • Name

  • Email address

  • Phone number

  • Billing and payment details

  • Booking information

3.2 Automatically collected data

  • IP address

  • Browser type and device information

  • Website usage data (analytics, cookies)

3.3 Third-party data

  • Payment data from providers such as PayPal or Stripe

  • Social login data (if applicable)


4. Legal Basis for Processing (Art. 6 GDPR)

We process your personal data based on:

  • Contract performance (Art. 6(1)(b)) – to process bookings

  • Legal obligations (Art. 6(1)(c)) – accounting, tax compliance

  • Legitimate interests (Art. 6(1)(f)) – improving services, fraud prevention

  • Consent (Art. 6(1)(a)) – marketing and cookies


5. Purpose of Data Processing

We use your data to:

  • Process bookings and payments

  • Communicate with you

  • Provide customer support

  • Improve our platform and services

  • Send marketing communications (with consent)


6. Sharing of Personal Data

We may share your personal data with:

  • Suppliers (tour providers) to fulfill bookings

  • Payment providers (e.g. PayPal, Stripe)

  • IT and hosting providers

All third parties are required to comply with applicable data protection laws.

Our Platform is hosted by third-party service providers who process data on our behalf under data processing agreements (Art. 28 GDPR).

Suppliers act as independent data controllers for the personal data they receive in order to provide the booked services. Their use of your data is governed by their own privacy policies.


7. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as:

  • EU Standard Contractual Clauses (SCCs)

  • Adequacy decisions by the European Commission


8. Data Retention

We retain personal data only as long as necessary:

  • Booking data: up to 10 years (legal/tax obligations)

  • Account data: until deletion request

  • Marketing data: until consent is withdrawn


9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable website functionality

  • Analyze traffic

  • Personalize content

Cookies that are not strictly necessary will only be used with your consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings on our Platform.


10. Your Rights (GDPR)

You have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Erase your data (“right to be forgotten”)

  • Restrict processing

  • Data portability

  • Object to processing

  • Withdraw consent at any time

To exercise your rights, contact: info@birdmi.com


11. Data Security

We implement appropriate technical and organizational measures, including:

  • SSL encryption

  • Secure servers

  • Access control


12. Third-Party Content

Our Platform may contain embedded content (e.g. YouTube). These providers may collect data independently.


13. Children’s Data

Our services are not directed at individuals under 18. We do not knowingly collect data from minors.


14. Changes to this Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page.


15. Contact

If you have any questions about this Privacy Policy:

Email: info@birdmi.com
Address: Albrechtstr. 16, 10117 Berlin, Germany


16. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged infringement.


17. Youtube Video

Our Platform may embed videos from YouTube, a service provided by Google Ireland Limited.

When you access a page containing a YouTube video, your browser may establish a connection to YouTube servers. In doing so, personal data (such as your IP address) may be transmitted to YouTube.

We use YouTube in enhanced privacy mode where possible. However, once you play a video, further data processing may occur.

For more information, please refer to YouTube’s Privacy Policy:
https://policies.google.com/privacy


18. Payments

We offer payment processing via third-party providers such as PayPal and Stripe.

When you make a payment, your payment data will be processed directly by these providers. We do not store full payment details such as credit card numbers.

The processing of payment data is necessary for the performance of a contract (Art. 6(1)(b) GDPR).

For more information, please refer to:
– PayPal Privacy Policy: https://www.paypal.com/privacy
– Stripe Privacy Policy: https://stripe.com/privacy


19. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.


© Birdmi. All rights reserved.

Live Chat