ChuDenSvit ("we", "us", "our") — a service for planning group and individual road trips, operated by ChuDenSvit (Suojarventie 8, Vuokatti, Finland), available at https://chudensvit.com. We act as the data controller under EU Regulation 2016/679 (GDPR).
Contact for data protection inquiries: info@chudensvit.com
| Data type | Purpose | Legal basis | Retention |
|---|---|---|---|
| Google account (name, email) | Authentication via Google OAuth | Contract performance (Art. 6(1)(b)) | Until account deletion |
| Trip data (routes, dates) | Route planning, group sync | Contract performance (Art. 6(1)(b)) | Until trip or account deletion |
| Geolocation (lat/lng) | Showing on map for trip participants (with your consent) | Consent (Art. 6(1)(a)) | 24 hours after disabling tracking |
| Passenger data (name, passport, date of birth) | Ticket booking | Contract performance (Art. 6(1)(b)) | Until deletion request |
| Pseudonymised IP address (hash) | Site visit analytics, abuse protection | Legitimate interest (Art. 6(1)(f)) | Until server restart (in-memory) |
| Browser User-Agent | Device analytics | Legitimate interest (Art. 6(1)(f)) | Until server restart (in-memory) |
We use only functional cookies required for login:
We do not use advertising or analytics cookies (Google Analytics, Facebook Pixel, etc.).
We use the following third-party service providers ("sub-processors") that may process personal data on our behalf or receive data in connection with your use of ChuDenSvit. Transfers outside the EU/EEA are governed by Standard Contractual Clauses (SCCs) under GDPR Art. 46(2)(c) unless an adequacy decision applies.
| Recipient | Purpose | Country | Legal basis |
|---|---|---|---|
| Google LLC | Authentication (OAuth), Maps display, Places search | USA (SCCs) | Art. 6(1)(b) + Art. 46(2)(c) |
| Mistral AI SAS | AI conversational assistant — processes your trip inputs and chat messages to generate route suggestions | France (EU) | Art. 6(1)(b) |
| TomTom N.V. | Traffic data overlay, reverse geocoding (road name during active navigation) | Netherlands (EU) | Art. 6(1)(b) |
| Resend Inc. | Transactional email: trip invitations, welcome messages, trip summaries | USA (SCCs, Resend DPA) | Art. 6(1)(b) |
| Duffel Technologies Ltd | Aviation ticket search — displays flight options for your route (no booking stored by ChuDenSvit) | United Kingdom (adequacy decision) | Art. 6(1)(b) |
| Telegram Messenger Inc. | Optional bot notifications for trip events — only if you connect your Telegram account | UAE / various | Art. 6(1)(a) — consent (opt-in only) |
| OpenStreetMap Foundation / Nominatim | Geocoding: converting place names to coordinates. Only place names are sent; no user identity data. | United Kingdom / EU | Art. 6(1)(b) |
| Project OSRM (Hasso-Plattner-Institut, DE) | Route calculation — driving routes and distances. Only route coordinates sent; no user identity data. | Germany (EU) | Art. 6(1)(b) |
| Overpass API (OpenStreetMap infrastructure) | POI search: hotels, fuel stations, rest stops near your route. Requests routed via our server — your IP is not exposed to Overpass. | EU (multiple mirrors) | Art. 6(1)(b) |
| Tankerkönig.de | Real-time fuel prices for German routes. Route coordinates sent to query nearby stations. | Germany (EU) | Art. 6(1)(f) — legitimate interest |
| ip-api.com | Country detection for analytics. IP sent once to determine country, then discarded. We never store your exact IP. | Netherlands (EU) | Art. 6(1)(f) — legitimate interest |
| Browser Push Service (Google FCM / Apple APNs / Mozilla, depending on your browser) |
Web push notifications for trip events — only after you explicitly grant permission in your browser. | Various | Art. 6(1)(a) — consent |
When you click a hotel or vignette link, you are redirected to a third-party partner (e.g. Booking.com, Vintrica, Mautwelt, VignetDirect). Once you leave ChuDenSvit, that partner's privacy policy applies. We label all affiliate links with "Affiliate link" / "Партнерське посилання".
Stripe (payment processing) and Sentry (error monitoring) are integrated in our codebase but not currently active. They will be added to this table — with prior notice per Section 9 — when activated.
In compliance with EU AI Act 2024/1689 Art. 50, we inform you that ChuDenSvit includes automated AI systems:
POST /api/me/exportPOST /api/me/delete or email
info@chudensvit.com. SLA: 30 days.httpOnly, Secure, SameSite=Lax flagsAfter submitting a deletion request (via the interface or email), your data will be anonymised within 30 calendar days in accordance with GDPR Art. 17. Some data may be retained longer where required by law (e.g., financial records — up to 7 years under EU law).
The service is intended for users aged 16 and over. We do not knowingly collect data from children under 16 years of age.
For material changes, we will notify you by email or in-app notification at least 30 days before they take effect. The current version is always available on this page.
If you have any questions about how we process your personal data, contact us: info@chudensvit.com
Map data: © OpenStreetMap contributors (ODbL licence). Routing: Project OSRM.