Privacy Policy

Effective Date: 20 April 2026

Last Updated: 20 April 2026

Welcome to The Fabryk ("we," "our," "us"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have.

1. Who We Are

The Fabryk is the data controller for personal data collected through this website unless this policy says otherwise.

2. Data We Collect

Depending on how you use the site, we may collect:

• Contact and newsletter data: email address and newsletter preference selections when you subscribe through our forms.
• Usage and device data: pages viewed, approximate location, browser, device details, and pseudonymous identifiers from analytics and marketing tools.
• Comment data: information you submit in comment widgets (for example, name, email, comment content, and related metadata).
• Technical data: IP address and request details logged by hosting, CDN, security, and infrastructure providers.
• Local storage and cookie preference data: values such as localConsent and alreadyVisited used to remember UI and popup behavior.

3. How We Collect Data

• Directly from you when you submit a form or comment.
• Automatically through cookies, local storage, scripts, and embedded content.
• From third-party providers that power analytics, comments, affiliate, and embeds.

4. Why We Process Your Data (Legal Bases)

We process personal data under one or more of these GDPR legal bases:

• Consent: for newsletter subscriptions and for non-essential cookies and similar technologies where consent is required.
• Legitimate interests: to run, improve, secure, and monetize the site, including analytics, affiliate measurement, fraud prevention, and troubleshooting.
• Contract or pre-contract steps: where needed to respond to your direct requests.
• Legal obligation: where we must keep or disclose data under applicable law.

5. Cookies, Local Storage, and Similar Technologies

We use cookies and similar technologies for functionality, analytics, and marketing attribution. Some technologies may be set by third-party services we use.

Please review our Cookies Policy for details, including controls.

6. Third-Party Services and Data Sharing

We share data with service providers and partners that support site operations.

These may include:

• Analytics and audience tools: Google Analytics (GA4), Grow.
• Affiliate and travel partners: Stay22, Travelpayouts, GetYourGuide, and other affiliate networks and merchants linked on our site.
• Email and forms: Netlify Forms and Buttondown (newsletter provider).
• Comments: Cusdis.
• Embedded media and social platforms: YouTube, Instagram, TikTok, Spotify, Google Maps, and Google Calendar when embedded in pages.
• Infrastructure and media delivery: hosting/CDN/media providers used to serve content and protect performance.

These providers may process personal data under their own terms and privacy policies.

7. International Data Transfers

Some providers we use are located outside the European Economic Area (EEA). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs), adequacy decisions, or other lawful transfer mechanisms.

8. Data Retention

We retain personal data only as long as needed for the purposes described above.

• Newsletter data: until you unsubscribe or request deletion, subject to reasonable backup and compliance retention.
• Analytics and cookie identifiers: according to each provider's configuration and retention settings.
• Comment data: until removed by us, deleted by provider tooling, or deleted at your request where applicable.

9. Your Rights

Depending on your location, you may have rights to:

• Access personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Delete personal data.
• Restrict or object to certain processing.
• Data portability where applicable.
• Withdraw consent at any time for consent-based processing.
• Complain to your local data protection authority.

10. Security

We apply reasonable technical and organizational measures to protect personal data. Internet-based services are never completely risk-free, and no method of transmission or storage is 100% secure.

11. Children's Privacy

Our site is not directed to children under 16. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this policy from time to time to reflect legal, technical, or business changes. The "Last Updated" date above indicates the latest version.

13. Contact

For privacy questions or rights requests, contact us:

14. Related Notices

You can also review our Cookies Policy and Affiliate Disclaimer.

• This policy is provided for transparency and does not replace legal advice tailored to your specific obligations.