Privacy policy

This policy explains what personal data Public Holidays World (“we”, “us”) processes when you use publicholidaysworld.com, why, and what your rights are. We are the controller of this data. You can reach us through the contact form or at [email protected].

In short: there are no user accounts, no analytics and no tracking. We only receive personal data if you write to us.

1. What we process and why

Messages you send us

If you use the contact form or email us, we receive your name, your email address, the topic and your message. We use them only to read and answer your message and to keep a record of the conversation. The legal basis is our legitimate interest in answering enquiries (Article 6(1)(f) GDPR) or, where you ask about something before an agreement with us, steps taken at your request (Article 6(1)(b) GDPR). Messages from the form are delivered to our mailbox by Cloudflare’s email service.

Spam protection on the contact form

The contact form uses Cloudflare Turnstile to tell people from automated spam. Turnstile checks technical signals from your browser and connection (such as your IP address and browser characteristics). Cloudflare uses them for this check and says it does not use them for advertising. The legal basis is our legitimate interest in keeping the form free of spam (Article 6(1)(f) GDPR). SeeCloudflare’s Turnstile privacy addendum.

Suggesting your country

Our hosting provider adds a two-letter country code to each request, based on your IP address. The home page asks our server for this code to suggest your country’s holidays. We do not store the code and our code never sees your IP address.

Weather forecasts

Pages with a forecast ask our server for the weather at a fixed place, such as a capital city or a trip destination, never your own location. Our server fetches the forecast from a weather service and keeps a copy for 30 minutes. Nothing about you is passed to the weather service.

Hosting and security

The site is hosted by Cloudflare. Like any web host, Cloudflare processes technical data such as your IP address, browser type, the page requested and the time, to deliver the site and protect it from attacks and abuse. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f) GDPR). SeeCloudflare’s privacy policy.

Settings saved in your browser

If you choose the dark theme, pick your own leave days on a calendar, or answer an advertising consent question, the choice is saved in your browser’s local storage so the site remembers it. It stays on your device and is never sent to us. Details are in the cookie policy.

2. What we do not do

• We do not use analytics, tracking pixels or social media plugins.
• We do not create user profiles or accounts.
• We do not sell or rent personal data, and we do not use it for marketing.
• We do not make automated decisions about you.

3. Advertising

The site currently shows no advertising. If we add ads in the future, ads that use cookies will load only after you accept them, and we will update this policy and the cookie policy first.

4. Who receives data

We use Cloudflare, Inc. as our hosting, security, spam protection and email delivery provider. Cloudflare processes data on our behalf under a data processing agreement. We do not share your data with anyone else unless the law requires us to.

“Add to calendar” buttons open Google Calendar or Outlook in a new tab, with the holiday filled in. Those services are run by Google and Microsoft under their own privacy policies. The Apple / .ics option downloads a file and contacts no one.

5. Transfers outside the European Economic Area

Cloudflare may process data in countries outside the European Economic Area, including the United States. Such transfers are covered by the EU–US Data Privacy Framework, to which Cloudflare is certified, and by the European Commission’s Standard Contractual Clauses.

6. How long we keep data

• Messages and our replies: up to 12 months after the conversation ends, then deleted.
• Country detection and weather requests: not stored by us.
• Hosting and security logs: kept by Cloudflare for a limited period under its own retention rules.
• Settings in your browser: until you clear them.

7. Your rights

Under the GDPR (and similar laws elsewhere) you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Write to us through the contact form (topic “Privacy request”) or at[email protected]. We answer within one month.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work.

8. Children

The site is meant for a general audience and is not directed at children under 16. We do not knowingly collect their data.

9. Changes

We update this policy when our practices change. The date at the top shows the latest version. If a change matters to how we use your data, we will say so on the site.