Calmcation.me is an editorial directory with no user accounts, no newsletter signup, and no booking engine. The data-processing footprint is small. This policy documents what is collected, by whom, on what basis, and how to exercise your rights under GDPR.
The data controller is the natural person operating Calmcation.me from Sweden. For all privacy-related correspondence, contact hello@calmcation.me. Swedish data protection law applies.
None. Calmcation.me does not operate user-account forms, newsletter signup, comments, or contact forms as of the last-updated date above. If any of that changes, this policy will be updated and a visible notice will be displayed on the site.
Our hosting provider (Vercel Inc.) records standard HTTP request information: IP address, user-agent, referring URL, requested URL, response code, and timestamp. These logs are retained by the provider for up to 30 days and are used only for security, debugging, and abuse prevention. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
When enabled (planned: Plausible or Umami), the analytics tool records aggregated, non-identifying information about page views, referrers, device class, and country. No cross-site cookies are set; no individual users are identified. Until analytics is active, this section is unused.
If you use the concierge feature, the text of your query and a shortlist of matching hotel metadata are transmitted to Google Vertex AI (Gemini) for processing. No user-identifying information is attached. Queries are not persisted on our servers after the response is returned. Google's own processing terms apply at cloud.google.com/terms/cloud-privacy-notice.
Calmcation.me does not set cookies of its own at the time of this policy. When a visitor clicks an affiliate link to Booking.com, Booking sets its own tracking cookies on the visitor's browser. Those cookies are controlled by Booking and governed by Booking.com's privacy policy. When analytics is added, a cookie consent banner will be shown for any cookies that are not strictly necessary.
Some processors are based in the United States (Vercel, Google). Transfers rely on the EU-US Data Privacy Framework and, supplementarily, on the European Commission's Standard Contractual Clauses.
Calmcation.me earns a commission when a visitor books a hotel via the "Check dates on Booking" links on the site. The price paid by the visitor is not affected. Calmcation.me does not accept payment from hotels for inclusion, placement, or positive editorial coverage.
Because Calmcation.me does not collect personal data directly, most requests should be directed to the relevant processor (Vercel, Booking.com, or a cookie-setting partner). Where Calmcation.me does hold or control your data, you have the following rights:
Calmcation.me is not directed at children under 13 and does not knowingly process personal data from children. If such data has been inadvertently collected, it will be deleted on notification to hello@calmcation.me.
Material changes will be reflected in the "last updated" date above. If collection practices change (for example, adding a newsletter), affected users will be notified through a visible notice on the site and, where applicable, renewed consent will be requested.