GDPR Information
Information for users in the European Union and European Economic Area about your data protection rights.
Legal basis for processing
- Contract — processing needed to provide the tour editor and host your tours.
- Legitimate interests — security, fraud prevention, and service improvement where balanced against your rights.
- Consent — analytics and marketing cookies, where applicable.
Your rights (Articles 15–22)
You may have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase data in certain circumstances ("right to be forgotten")
- Restrict or object to processing
- Data portability for data you provided
- Withdraw consent at any time for consent-based processing
- Lodge a complaint with your local supervisory authority
International transfers
If data is processed outside the EU/EEA, we use appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where required.
Data controller vs processor
INDRUM acts as controller for account and platform data. Tour creators act as controllers for personal data contained in tours they publish. INDRUM processes that content as a processor on the creator's instructions.
Exercising your rights
Submit requests through dev@indrum.ro or your organization's INDRUM administrator. We respond within one month, extendable where permitted by law.