Privacy Policy

EasyInfluencer.travel

Last updated: 02.08.2026

Introduction

Thank you for visiting easyInfluencer.travel, which is owned and operated by the company under the name «EASYINFLUENCER.TRAVEL P.C.», headquartered in the Municipality of Athens (hereinafter "the Company"), acting as the Data Controller of the personal data it collects and processes in the context of the Platform's operation.

Before using the Platform, please read this Privacy Policy carefully.

The protection of your personal data is of the utmost importance to the Company. In order to comply with the requirements of Regulation (EU) 2016/679 (GDPR), this Policy informs you of the type of personal data we collect, the purposes and manner of their processing and protection, as well as your rights.

This Policy applies to all users of the Platform, namely Businesses and Creators, as well as to visitors of our website.

Definitions

On 25 May 2018, Regulation (EU) 2016/679 (hereinafter "the Regulation") on the protection of natural persons with regard to the processing of personal data entered into force, and was incorporated into Greek law by Law 4624/2019.

For the purposes of this document, the key definitions are as follows:

"Personal data": any information relating to an identified or identifiable natural person.

"Data subject": an identifiable natural person whose identity can be established directly or indirectly.

"Processing": any operation or set of operations performed on personal data, such as collection, storage, use, disclosure or erasure.

"Controller": the person who determines the purposes and means of processing personal data.

"Processor": the person who processes personal data on behalf of the Controller.

"Consent": any freely given, specific, informed and unambiguous indication of the data subject's wishes.

"Personal data breach": a breach of security leading to the accidental or unlawful destruction, loss, alteration or unauthorised access to personal data.

Data Subjects

The Company collects and processes personal data from:

Visitors to the website (via cookies and contact forms)
Businesses (hotels, resorts, accommodation providers, experience providers) using the Platform
Creators (digital content creators, travel influencers) who register and use the Platform
Business partners within the context of contractual relationships

The Company works only with individuals aged 18 and over. Proof of age may be required. The Company bears no liability if a user provides false information regarding their age.

Purposes of Processing

We process your data for the following purposes:

Platform operation: creation and management of Business and Creator accounts, provision of access to Platform tools, facilitation of the connection between Businesses and Creators.

Open Stay management: processing of information relating to Open Stays posted by Businesses and requests submitted by Creators.

Social media account connection: upon connecting Instagram or TikTok accounts, we collect and process profile data, content metrics and audience demographics, exclusively for the purpose of Creator verification and facilitating their connection with Businesses within the Platform.

AI content analysis: we use automated tools to analyse content produced by Creators (AI video analysis, auto-scan brand mention) exclusively for the purpose of verifying the performance of agreed deliverables and generating performance reports (ROI reports).

Rating system: we process ratings submitted by users to improve the quality of collaborations within the Platform.

Communication: responding to queries, requests and support questions.

Marketing: sending updates and communications relating to the Platform (with your express consent).

Cookies: we use cookies to ensure the smooth operation of the Platform and for analytics purposes. Analytics cookies are activated exclusively with your express consent via the cookie banner. For detailed information on the cookies we use, their types and how to manage them, please refer to the "Cookies" section below.

Legal compliance: fulfilment of tax, accounting, regulatory and judicial obligations.

Security and fraud prevention: ensuring the safe use of the Platform and preventing abuse.

Legal Basis for Processing

The processing of your data is lawful in accordance with Article 6 of the Regulation, as follows:

Performance of a contract (Article 6(1)(b)): for the creation and management of your account and the provision of Platform services.
Consent (Article 6(1)(a)): for marketing communications, analytics cookies and social media account connections.
Legitimate interests (Article 6(1)(f)): for Platform security and fraud prevention.
Legal obligation (Article 6(1)(c)): for tax and accounting compliance.

Types of Data We Collect

Registration data: full name or company name, email address, contact details, billing information.

Creator profile data: information provided upon registration, as well as data obtained through the connection of Instagram and TikTok accounts (number of followers, engagement rate, audience demographics, audience country).

Open Stay data: information submitted by Businesses when posting an Open Stay (dates, services, deliverables, target audience).

Performance data: content metrics (impressions, reach, saves, shares), results of AI content analysis, user ratings.

Usage data: information regarding how the Platform is used, cookies, IP address, browser type.

Financial data: subscription and billing details, processed through our payment provider Stripe.

OAuth Tokens and Social Media Data

The connection of TikTok and Instagram accounts to the Platform is carried out exclusively through the respective platforms' official OAuth login pages. The Company does not access, store or process users' passwords.

The Company obtains exclusively read-only access to the user's public profile statistics (such as follower count, engagement rate, username, profile photo and number of posts), solely for the purposes of Creator verification and facilitating their connection with Businesses within the Platform.

The Company is not able and is not authorised to publish content, send messages or take any action on behalf of the user through connected accounts.

OAuth access tokens are encrypted at rest and used exclusively for the above purposes. The user may disconnect any account at any time either through the Platform's dashboard settings or directly through the privacy settings of the respective platform (TikTok or Instagram), whereupon stored tokens are immediately deleted.

It is noted that connecting an Instagram account requires a Professional account (Business or Creator). Connecting one of the two platforms (TikTok or Instagram) is sufficient for use of the Platform.

Cookies

The Platform uses the following types of cookies:

Strictly necessary cookies: these are essential for the operation of the Platform (e.g. maintaining login sessions, security). They are activated automatically and do not require consent.

Analytics cookies: these collect anonymous information about how the Platform is used (e.g. pages visited, time spent) in order to improve the user experience. They are activated exclusively with your express consent via the cookie banner.

Third-party cookies: upon connecting Instagram (Meta) or TikTok accounts, these platforms may use their own cookies. Their use is governed by the respective privacy policies of those platforms.

Cookie management: you may manage or disable cookies through your browser settings or via the Platform's cookie banner. Disabling certain cookies may affect the functionality of the Platform.

Third Parties

Access to your data is restricted to authorised personnel and trusted third parties. The Company may share data with:

Technical service providers: hosting providers, cloud infrastructure, analytics tools.
Stripe: payment provider for the processing of subscriptions. Processes financial data and billing details exclusively for this purpose. Governed by its own Privacy Policy (stripe.com/privacy).
Renfluence: provides the Platform's AI creator analytics technology, acting as Data Processor under a written agreement and in full compliance with the GDPR. Processes Creator profile data and content performance data exclusively for the purposes of verification and matching within the Platform.
Workadu: provider of the electronic invoicing system connected to the Greek Tax Authority's myDATA platform. Processes names, email addresses and financial data of subscribers exclusively for the purposes of issuing tax documents and complying with Greek tax legislation.
Social media platforms: Instagram (Meta) and TikTok, in the context of account connections. Governed by their respective privacy policies.
Public authorities: when legally required.

All processors act in accordance with our instructions and are bound by strict confidentiality and security obligations.

International Data Transfers

Given the international nature of the Platform's operations, your data may be transferred outside the European Economic Area (EEA). Transfers are carried out only when:

the destination country has an adequacy decision from the European Commission, or
appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), or
another lawful derogation applies.

Data Retention

The Company retains your personal data for no longer than is necessary for the purposes described in this Policy:

Communication data: up to one (1) year from the resolution of your request.
Platform accounts: for as long as the account is active; following deactivation, for up to five (5) years for compliance purposes.
Social media OAuth tokens: deleted immediately upon account disconnection.
Performance data and ratings: retained for as long as the account is active.
Financial data: up to ten (10) years in accordance with Greek tax legislation.

Upon expiry of these periods, data is securely deleted or anonymised.

Automated Processing and Decision-Making

The Platform uses automated processes in the context of the following functions:

AI matching: automated matching of Creators with Businesses based on criteria such as audience country, language, engagement rate and content niche.

AI video analysis: automated analysis of Creator content to verify the performance of agreed deliverables (auto-scan brand mention, content verification).

Creator verification: automated verification of follower authenticity and engagement.

In accordance with Article 22 of the Regulation, you have the right not to be subject exclusively to automated processing that produces legal effects or significantly affects you. Specifically:

Every decision to accept or reject a Creator's request by a Business is made by the users themselves and not exclusively by automated systems.
If you believe that an automated process has affected you unfairly, you have the right to request human review by sending an email to info@easyinfluencer.travel.

Security of Processing

The Company implements appropriate technical and organisational measures to protect your data, including:

encryption of data at rest and in transit
encryption of OAuth tokens
firewalls and malware detection systems
restricted access limited to authorised personnel only
regular data backups

Your Rights

As Data Subjects, you have the following rights under the Regulation:

Right to information (Article 13): to receive information about the processing of your data.

Right of access (Article 15): to know what data we process about you and to receive a copy thereof.

Right to rectification (Article 16): to request the correction of inaccurate data.

Right to erasure (Article 17): to request the deletion of your data, where there is no legal obligation to retain it.

Right to restriction (Article 18): to request the restriction of processing.

Right to data portability (Article 20): to receive your data in a structured, machine-readable format.

Right to object (Article 21): to object to the processing of your data.

Right to lodge a complaint (Article 77): to lodge a complaint with the competent supervisory authority.

To exercise any of the above rights, please send an email to info@easyinfluencer.travel with the subject line "Exercise of GDPR Rights". We will respond within 30 days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):

Address: 1-3 Kifissias Avenue, 115 23 Athens, Greece
Telephone: +30 210 6475600
Email: contact@dpa.gr
Website: www.dpa.gr

Policy Amendments

The Company may amend this Policy at any time. In the event of a material amendment, users will be notified via a pop-up window upon their next login, requiring explicit acceptance before continued use of the Platform. The date of the last update is always indicated at the top of this document.

Governing Law

This Policy is governed by Greek law, as shaped by Regulation (EU) 2016/679 (GDPR) and the applicable national and European legislative framework. The Courts of Athens shall have jurisdiction over any disputes arising in connection with this Policy.

Contact

For any questions regarding this Policy or to exercise your rights:

Email: info@easyinfluencer.travel

Website: easyinfluencer.travel