Privacy policy

Who is responsible

Explorentia Limited, registered in Cyprus, is the data controller. For any question about this policy or about your data, write to info@explorentia.eu.

What we collect

In the visitor experience, when you scan a QR code in a village:

• a random identifier created in your browser, which links the steps of your visit and stays until you clear your browser data — we do not ask for your name
• before the route starts, your country, age range, gender and language — these answers are required to take part in a route
• which points you reached, when, and whether you completed the route
• your 1–5 star rating at each point, and any comment you write
• at the end of the route, how you heard about us and, only if you choose to give it, your e-mail address
• offers you unlocked and their redemption at a local business, including the total bill if the business enters it

On this website and in the visitor experience, only if you accept analytics:

• pages viewed, taps and clicks, and your browser, device type and approximate location (country and city), collected by our analytics provider
• recordings of how the screens were used, with everything you type hidden

Why we use it

• To run the route: remembering where you are, unlocking points, and issuing and honouring offers — each offer can be redeemed once.
• To understand who visits Cypriot villages and how routes are used, reported as totals and percentages.
• Analytics, only with your consent, to find where the service can be improved. You can withdraw consent at any time.
• To send you news about new routes and offers, only if you gave your e-mail address.
• To keep the service secure and prevent misuse of offers.

How long we keep it

Visit records, ratings, comments and e-mail addresses are currently kept until they are deleted; we are setting retention periods, and they will be stated here. You can delete your data at any time (see "Your rights"). Screen recordings are deleted by our analytics provider after 30 days.

Who else processes it

We use service providers who process data on our instructions, and we do not sell personal data.

• Hosting and content delivery: Amazon Web Services, Frankfurt (EU).
• Database: Neon, hosted on Amazon Web Services in Frankfurt (EU).
• Product analytics, only with your consent: PostHog, EU region.
• Videos on point and business pages: YouTube (in its privacy-enhanced mode) and Vimeo. Maps: OpenFreeMap. These providers receive your IP address and browser details when a video or a map loads.

Participating communities, local businesses and public authorities do not have access to the platform. A business sees only the offer you show it at the counter.

Where it is stored

Our database, files and analytics data are stored in the European Union. Some of our providers are companies based in the United States.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on consent, you can withdraw it at any time without affecting what happened before.

Because we do not ask for your name, we can find your data only through the browser you used or the e-mail address you gave us. During a route, open the language menu at the top of the screen and choose "Your data": it shows your visit code and lets you delete everything linked to it at once. You can also write to info@explorentia.eu quoting your visit code or that e-mail address, and we will answer within one month. If you are not satisfied, you can complain to the Office of the Commissioner for Personal Data Protection of Cyprus.

Children

The form includes an "Under 18" age group, so children may take part, for example with their family. We do not ask for a name, and the e-mail address is optional.

Changes

If this policy changes materially, the date at the top changes with it and the change is described here.