Last update: March 6, 2026.
Data controller
Controller: MZIAN
Privacy contact: contact@mzian.com.
Data we process
- account and booking data;
- browsing/search interest signals (city, activity, activity type);
- contact form submissions;
- technical security signals (anti-abuse and fraud prevention).
Purposes and legal bases
- booking and customer operations (contract);
- handling contact requests (pre-contractual steps/contract);
- product and search improvement, interest analytics (legitimate interest);
- platform security and abuse prevention (legitimate interest);
- legal obligations.
Behaviour tracking
For signed-in users, behaviour tracking is mainly processed server-side from existing requests.
- anti-noise deduplication window: 10 seconds;
- used for product analytics and CRM insights;
- no solely automated legal/significant decision is made on this basis.
Retention
- behaviour/interest data: up to 5 years (
TRACKING_RETENTION_DAYS=1825); - contact requests without commercial follow-up: up to 3 years after last contact;
- longer storage only when legally required or needed to defend legal claims.
Your rights
You can request access, rectification, erasure, restriction, objection and portability (subject to legal conditions).
Contact: contact@mzian.com.