Privacy Policy

As of: July 2026

Camino Unlimited Ltd

Centris Business Gateway, Level 4/W

Triq Is-Salib, Tal-Imriehel, Zone 3

Central Business District (CBD), BKR 3020 Birkirkara, Malta

Email: info@caminoninja.com

We process personal data only to the extent necessary to provide our services or where you have given your explicit consent. In doing so, we comply with the provisions of the General Data Protection Regulation (GDPR), Maltese data protection law, and the applicable national data protection laws of EU member states.

When you visit our website or use our app, technical data is automatically transmitted and temporarily stored: IP address (anonymized), date and time of access, pages and features accessed, browser and device type, and operating system.

Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest in secure and stable operations). Retention period: up to 30 days, followed by automatic deletion.

When you create an account, we collect the following information: your email address, the display name you choose, your password (stored in encrypted form, so we cannot read it), and the date and time of registration.

Legal basis: Art. 6(1)(b) of the GDPR (performance of a contract). Retention period: until the account is deleted, and thereafter until the expiration of statutory retention periods.

Content that you voluntarily post (reviews, pilgrimage reports, comments, photos) is publicly visible on the platform. You can delete your own content at any time. Anonymized or aggregated data may continue to be used even after your account has been deleted.

Legal basis: Article 6(1)(b) of the GDPR.

If you contact us by email, we will process the data you provide (name, email address, message content) solely for the purpose of handling your inquiry.

Legal basis: Article 6(1)(f) of the GDPR. Retention period: up to 3 years after the correspondence is concluded.

We use analytics services to understand how our platform is used and to further develop it. In doing so, we collect aggregated and, where possible, anonymized usage data (pages viewed, time spent on the site, usage flows). We do not create personal profiles for advertising purposes.

Legal basis: Art. 6(1)(a) of the GDPR (consent via cookie banner) or (f) of the GDPR in the case of full anonymization. You can object to the collection of analytics data at any time via our cookie settings.

Our platform is operated by professional cloud hosting providers. These providers process technical data under a data processing agreement (in accordance with Article 28 of the GDPR) exclusively on our instructions.

Legal basis: Article 6(1)(b) and (f) of the GDPR.

If you enable push notifications in the app, we'll store an anonymous device token for delivery. You can disable push notifications at any time in your device's app settings.

Legal basis: Article 6(1)(a) of the GDPR (consent).

If you use paid features, the payment process is handled entirely by the respective app store provider (Apple App Store / Google Play Store). We do not receive any complete payment information. The app store provider processes payment information in accordance with its own privacy policy.

Legal basis: Article 6(1)(b) of the GDPR.

We use cookies and similar technologies to ensure the platform functions properly and to improve it. For details on the types, purposes, and retention periods of these cookies, please see our Cookie Policy (caminoninja.com/cookie-policy).

We use technically necessary cookies based on Article 6(1)(f) of the GDPR. For all other cookies, we obtain your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time via our cookie settings.

Some of the services we use may process data outside the EU/EEA. In such cases, we ensure that an adequate level of data protection is guaranteed—for example, through the European Commission’s standard contractual clauses (Art. 46(2)(c) of the GDPR) or other appropriate safeguards.

You have the following rights with respect to us:

– Right of access (Art. 15 of the GDPR): What data we process about you.

– Rectification (Art. 16 of the GDPR): Correction of inaccurate or incomplete data.

– Erasure (Art. 17 GDPR): Erasure of your data, provided that no legal retention requirements prevent it.

– Restriction of processing (Art. 18 GDPR): Restriction of processing at your request.

– Data portability (Art. 20 GDPR): Receive your data in a machine-readable format.

– Right to object (Art. 21 GDPR): Right to object to processing based on legitimate interests.

– Withdrawal of Consent (Art. 7(3) GDPR): You may withdraw your consent at any time, effective for the future.

To exercise your rights: info@caminoninja.com

You have the right to file a complaint with the competent data protection supervisory authority. The competent authority for us is:

Office of the Information and Data Protection Commissioner (IDPC)

Level 2, Airways House, High Street, Sliema SLM 1549, Malta

International Day of Peace website

As a user in Germany, you can alternatively contact the data protection supervisory authority in your federal state.

We use technical and organizational security measures to protect your data against tampering, loss, destruction, or unauthorized access. These include encrypted data transmission (TLS/HTTPS) and access controls.

We reserve the right to update this Privacy Policy in the event of changes to our services or the legal landscape. The most current version is available on this page. In the event of significant changes, we will notify registered users by email.

Last updated: July 2026 – Camino Unlimited Ltd, Malta