1. Who we are
AwayPlanner ("we", "us", "our") operates an online platform that enables users to search, compare and book travel services related to football away matches, including flights, accommodation and optional travel-related services.
We act as a commercial intermediary, facilitating and processing bookings on behalf of third-party travel service providers.
Data controller
AwayPlanner B.V.
[Registered address]
Chamber of Commerce number: [KvK number]
The Netherlands
2. What personal data we collect
Depending on how you use our platform, we may collect the following categories of personal data.
a) Booking, identification and address data
- Full name
- Date of birth (where required by airlines or partners)
- Nationality
- Passport or travel document details (where required for booking, check-in, security or regulatory purposes)
- Billing address
- Residential address (where required for payment processing, fraud prevention, compliance or partner requirements)
b) Contact data
- Email address
- Telephone number
c) Payment data
- Payment status
- Transaction references
- Payment method (partial or tokenised information only)
AwayPlanner does not store full payment card details. Payments are processed by secure third-party payment service providers.
d) Technical and usage data
- IP address
- Device and browser type
- Operating system
- Log files
- Date and time of access
3. Why we process personal data
We process personal data for the following purposes:
- To process and manage bookings
- To provide booking confirmations, travel documents and service communications
- To share necessary information with airlines, accommodation providers and other travel partners
- To collect and transmit required travel document information (such as passport details) to airlines and other travel providers where legally or operationally required
- To process billing, payments and fraud prevention checks
- To provide customer support
- To comply with legal, tax and regulatory obligations
- To ensure platform security and prevent misuse
- To analyse and improve our platform and services
We only collect personal data that is necessary and proportionate for the purposes described in this Privacy Policy.
4. Legal bases for processing
We process personal data based on one or more of the following legal grounds under the GDPR:
- Performance of a contract – processing bookings and travel services
- Legal obligation – compliance with tax, accounting and regulatory requirements
- Legitimate interests – fraud prevention, platform security, analytics and service improvement
- Consent – where required (for example, cookies or marketing communications)
Where processing is based on legitimate interests, we ensure that such interests are not overridden by your fundamental rights and freedoms.
5. Sharing personal data with third parties
We share personal data only where necessary to fulfil bookings or legal obligations.
This may include sharing data with:
- Airlines and accommodation providers
- Online travel agencies and booking partners (e.g. Kiwi.com)
- Optional service or protection providers (e.g. disruption protection, assistance services)
- Payment service providers
- Fraud prevention and compliance partners
- IT, hosting and infrastructure providers
This may include sharing address, billing and travel document information where required for payment processing, fraud prevention, regulatory compliance or partner requirements.
AwayPlanner does not sell personal data.
6. International data transfers
Some partners and service providers may be located outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as:
- adequacy decisions issued by the European Commission; or
- Standard Contractual Clauses approved under the GDPR.
7. Data retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Typical retention periods include:
- Booking and transaction data: up to 7 years for tax and accounting purposes
- Customer support communications: up to 3 years
- Technical logs and security data: up to 12 months, unless required longer for security or legal reasons
After these periods, data is securely deleted or anonymised.
8. Cookies
AwayPlanner uses cookies and similar technologies to ensure the proper functioning of the platform, analyse usage and improve user experience.
Cookies may include:
- strictly necessary cookies required for website operation
- analytical cookies to understand how users interact with the platform
Where required by law, we request your consent before placing non-essential cookies. You can manage cookie preferences through your browser settings.
9. Marketing communications
AwayPlanner may send service-related communications necessary for your booking (such as confirmations or updates).
We only send marketing communications where:
- you have given explicit consent; or
- permitted by applicable law.
You can unsubscribe from marketing communications at any time via the unsubscribe link in our emails or by contacting us.
10. Automated decision-making
AwayPlanner does not engage in automated decision-making or profiling that produces legal or similarly significant effects within the meaning of Article 22 GDPR.
Fraud prevention and risk checks may involve automated tools but always include human oversight.
11. Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure of your data (where legally applicable)
- Restrict processing
- Object to processing based on legitimate interests
- Data portability
- Withdraw consent at any time (where processing is based on consent)
You can exercise these rights by contacting [email protected].
12. Complaints
If you believe your privacy rights have been violated, you have the right to lodge a complaint with a supervisory authority.
In the Netherlands, this is the Autoriteit Persoonsgegevens.
You also have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence.
13. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.
However, no system can be guaranteed to be completely secure.
14. Children
AwayPlanner is not intended for use by individuals under the age of 18.
We do not knowingly collect personal data from minors.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
Any changes will be published on our website and become effective upon publication.
16. Contact
For questions about this Privacy Policy or how we process personal data, please contact: