Privacy Policy
This privacy policy explains which personal data we process when you visit lifeisworthtravel.com and when our internal app “lifeisworthtravel Planner” (a TikTok and Meta app) is used. The German version is legally binding; this English version is provided for convenience.
1. Controller
Bling Bling GmbH
Peak Vienna, Floridsdorfer Hauptstraße 1
1210 Vienna, Austria
Email: office@bling-bling.at
For any questions about privacy, the app or data deletion, contact us at office@bling-bling.at.
2. Website
2.1 Hosting
This website is hosted by easyname GmbH, Vienna, Austria. The servers are located in the EU. easyname processes data on our behalf as a processor under a data processing agreement (Art. 28 GDPR).
2.2 Server log files
When you visit the website, technically necessary data is automatically stored in server log files: IP address, date and time, requested page, referrer URL, browser and operating system, and amount of data transferred. The purpose is the secure and stable operation of the website (error analysis, defence against attacks). The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Log files are deleted automatically by the host after a short period unless needed to investigate a security incident.
2.3 No cookies – only anonymous visitor statistics
This website sets no cookies, uses no advertising pixels and does not embed third-party fonts, videos or scripts. To understand which content is read and where visitors click, we only collect anonymous, aggregated statistics with a self-hosted script on our own server. Nothing is stored in your browser, no visitor is recognised and no usage profile is built, so no consent is required. Per page view we record: the page visited, the referring site (domain only), device type (mobile/tablet/desktop), browser language, campaign parameters (UTM), as well as clicks (position on the page, element clicked or link target), scroll depth reached and approximate time on page. The IP address is not stored; to count distinct visitors per day we derive only a truncated hash with a random value that changes daily, which cannot be attributed afterwards. There is no session recording and no capture of inputs, camera or screen. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR). The browser setting “Do Not Track” is respected. Aggregated data is deleted after 13 months at the latest.
2.4 External links
The website links to TikTok, Instagram and our other websites. Data is only transferred to these providers once you click a link; their privacy policies then apply. TikTok videos on the home page: only when you click “Show TikTok videos here” is TikTok’s embed service (TikTok Technology Limited, Ireland) loaded; your IP address and device information are transferred to TikTok and cookies may be set (Art. 6(1)(a) GDPR, consent by clicking). Via the contact form we process your name, e-mail address and message only to answer your request (Art. 6(1)(b) or (f) GDPR) and briefly your IP address for abuse protection (max. 1 hour).
2.5 Contact by email
If you email us, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed and no statutory retention obligations apply.
2.6 Newsletter: notification of new posts
You can enter your e-mail address to be notified by e-mail when a new post is published on this website. We use a double opt-in procedure: after signing up you receive an e-mail with a confirmation link; the subscription only becomes active when you click it. Unconfirmed sign-ups are deleted automatically after 7 days. We store: your e-mail address, language, time of sign-up and confirmation, the page on which you signed up and, until confirmation, a truncated hash of your IP address (abuse protection). The e-mails contain only notices about new posts – no third-party advertising, no tracking pixels, no open or click measurement. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every e-mail; this withdraws your consent and your data is deleted immediately. E-mails are sent from our own server (easyname, Vienna); addresses are never passed on to third parties. Whether you closed the newsletter box or signed up is remembered only locally in your browser (localStorage, no cookie) so that it does not appear again.
3. The “lifeisworthtravel Planner” app
3.1 What the app is
“lifeisworthtravel Planner” is an internal tool of Bling Bling GmbH. We use it solely to schedule and publish our own videos and posts to our own accounts on TikTok and Meta (Instagram, Facebook). The app is not offered to the public and third parties cannot sign up. It connects via the official interfaces (TikTok Login Kit and Content Posting API; Meta/Instagram Graph API).
3.2 Data processed
- Basic account information of connected accounts, e.g. account ID (Open ID), username, display name and profile picture, as released by the platform.
- Access tokens (access and refresh tokens) together with granted scopes and expiry, issued by the platform after login.
- Content we upload ourselves: videos, images, captions, hashtags, and the post's privacy and interaction settings.
- Scheduling and status data: planned publishing time, target account, publishing status and the post/publish ID returned by the platform.
Through the app we do not process data of other users, follower lists, private messages or content from accounts that are not ours.
3.3 Purpose and legal basis
The sole purpose is scheduling and publishing our own content to our own accounts. The legal basis is our legitimate interest in managing our social media presence efficiently (Art. 6(1)(f) GDPR) or – where a person connects an account themselves – their consent in the platform's authorisation dialog (Art. 6(1)(a) GDPR).
3.4 Storage location and security
Data is stored on our own server in Austria / the EU. Access tokens are stored encrypted and all transfers are encrypted (HTTPS). Only authorised staff of Bling Bling GmbH have access.
3.5 Sharing
We do not sell data and do not share it with third parties. Content is transmitted only to the platform on which we publish it (TikTok or Meta). Processing there is governed by the privacy policies of TikTok and Meta.
3.6 Retention
We keep account information and access tokens until the account is disconnected (in the app, in the platform's settings or by email to us). We then delete them promptly, at the latest within 30 days. Uploaded media and scheduling data are deleted once no longer needed for publishing, and at the latest when the account is disconnected. Posts already published remain on the platform until deleted there.
3.7 Revoking access
- TikTok: in the TikTok app go to Settings and privacy → Security → Apps and services (or “Manage app permissions”) and remove “lifeisworthtravel Planner”.
- Instagram/Facebook: remove the app under “Apps and websites” in your settings or in Accounts Center.
- By email: to office@bling-bling.at.
How to request deletion of all data is described on the data deletion page.
4. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw consent at any time with effect for the future. Please contact office@bling-bling.at.
If you believe the processing of your data violates data protection law, you may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at.
5. Changes
We update this policy when the website, the app or the law changes. The version published here applies.