Data Protection Policy

Data We Collect

AmmTrain.com processes only necessary information for reservations:

• Booking Data: Names, contact details, travel dates, accommodation preferences
• Payment Information: Processed securely via PCI-compliant systems (not stored)
• Technical Data: IP addresses, device info for security monitoring

How We Protect Your Data

Technical Measures

• SSL encryption for all data transmissions
• Regular security audits and penetration testing
• Payment processing via PCI DSS Level 1 compliant partners

Organizational Measures

• Limited employee access to sensitive data
• Mandatory privacy training for all staff
• Secure document disposal protocols

Data Retention

• Active bookings: Until 12 months after travel completion
• Financial records: 7 years for tax compliance
• Marketing data: Until opt-out request
• Cookies: Session cookies expire when browser closes

Your Rights

Under GDPR/CCPA

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Delete your data (subject to legal requirements)
• Portability: Receive your data in machine-readable format
• Opt-out: Object to marketing or data sharing

To exercise these rights, contact support@ammtrain.com with "Data Request" in the subject line.

Third-Party Data Sharing

AmmTrain.com only shares data with:

• Payment processors: Required for transaction completion
• Analytics providers: Google Analytics (anonymized data only)
• Legal authorities: When required by law

We never sell personal data to third parties.