Webserver & Logfiles
In a nutshell: When visiting our website, your browser exchanges information with our provider's webserver. This data is automatically stored in so-called logfiles.
Purpose: Our provider's webservers process your data in order to deliver the requested website to your browser. We save all requests in logfiles to guarantee the security and functioning of our website.
Categories of data: Technical data (IP address, HTTP/User agent header fields, browser data, date and time of access, operating system).
Legal basis: Providing the requested online content and guaranteeing the security and functioning of our Platform are our legitimate interests. We thus process your data in accordance with Art 6 (1) (f) GDPR.
Retention period: Our provider deletes the logfiles automatically after 7 days. In case we require the logfiles for a longer time period (eg in case of a security incident), the storage period may be extended accordingly.
Recipients: Processors (Web Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany).
User account
In a nutshell: You can create a user account on our website. This allows you to use advanced features about your booking with us.
Purpose: If you choose to create a user account, we will process your data in order to provide you with the advanced features of the user account.
Categories of data: personal data (title, first and last name); contact details (address, telephone number, e-mail address); account number; data from the fulfilment of our contractual obligations; booking data (date, time, bookings, price, etc.); other data (password, display name, payment options, payment service provider information, payment details, transaction-ID etc.).
Legal basis: Providing the advanced features of an account is based on our legitimate business interest. Processing is therefore carried out according to Article 6(1)(f) of the GDPR.
Retention period: We will store your personal data for as long as you have a user account with us. If you delete your user account, we will also delete your data unless we have a legal obligation to retain it.
Recipients: Processor (Web Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany).
Newsletter
In a nutshell: We regularly provide interested customers information on updates on our products, services and marketing in our newsletter.
Purpose: If you subscribe, we process your data in order to send you our newsletter.
We process the following data: Contact details (name, address, e-mail address), interests.
Legal basis: We will send you our newsletter only if you have given your prior Opt-in consent. We thus process your data in accordance with Art 6 (1) (a) GDPR.
Retention period: We store your data until you withdraw your consent.
Recipients: Processor (Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg).
Booking requests and Travel bookings
In a nutshell: You can send us a booking request via our website or using the contact details provided in Section 1. We will process your data to prepare your travel offer and to carry out your booking.
Purpose: We process your data to handle your booking request, to arrange the individual travel contracts for you, and to perform our contractual obligations, including organizing and booking your trip.
Categories of data: personal data (title, first and last name); contact details (address, telephone number, e-mail address); booking data (travel dates, destinations, services requested, price, etc.); passport details; and where necessary for the booking and provided by you, special categories of data such as dietary requirements or health information.
Legal basis: We process your data for the purpose of taking steps prior to brokering and arranging contracts for you (in accordance with your booking request) and for the performance of a contract (travel brokerage) in accordance with Art 6 (1) (b) GDPR. If you provide us with special categories of personal data (e.g., health data), we process this data based on your explicit consent in accordance with Art 9 (2) (a) GDPR.
Retention period: We store your data for the duration of the contractual relationship and thereafter as required by statutory retention obligations. In general, we are legally obliged to retain booking and contract data for 7 years.
Recipients: Processors, including:
- (i) Web Host/E-Mail Server Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany.
- (ii) Proposal, billing and bookkeeping software: Runple GmbH, Dornbacher Str. 71-73/3/1, 1170 Vienna.
- (iii) Chikaya Safaris GmbH (see Section 1 for details).
-
(iv) To fulfill our contractual obligations, we may transfer your data to third parties involved in providing the travel
services, such as transportation providers, car rental companies, hotels, local agencies, and other service providers. In
case of legal disputes, data may be shared with lawyers, accountants, authorities, and courts.
Information on our payment service providers: If you choose card payment, payments are made through one of our payment service providers (eg Stripe or PayPal). Our payment service providers process your personal data as independent controllers. We may receive your payment information from our payment service providers. For more information on data protection, please refer to the privacy information of the individual payment service provider.
Cookies & similar technologies
In a nutshell: We use cookies and similar technologies (“Cookies”). Cookies allow us to store information on your device when you visit our website or use our app.
Purpose: Some cookies are strictly necessary to provide certain basic features of our website and app. Other cookies are required for web analytics or personalized advertising.
Legal basis: We use cookies that are not strictly necessary to provide certain basic features of our website and app only if you have given your prior opt-in consent.
Storage period: In general, all cookies we store on your device are automatically deleted after 2 months at the latest. Certain information is stored on your device permanently (e.g. local storage). You can manually delete all cookies at any time.
Recipients: Processor (Web Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany).