Preparing your journey...
Country Spotlight
Country of a thousand hills and home to the gorillas
Rwanda's thousand hills roll into volcanic forests where mountain gorillas roam through bands of mist.
Our itineraries blend conservation-led lodges with Kigali's creative scene for a journey that feels purposeful and uplifting.
Speak with our founders and field guides to tailor a Rwanda journey that reflects your pace and passions.
Select an itinerary card to open its full story.
Transparency about who we are and how you can reach the team behind Chikaya Safaris.
Company
Chikaya Safaris GmbH
Address
Seilerstätte 13/27, 1010 Wien
Business purpose (Unternehmensgegenstand)
Vermittlung von Reisen und Handel mit Waren aller Art
Firmenbuchnummer
FN 672018 m (Handelsgericht Wien)
Corporate seat
Vienna
Version 1 · January 2026
Our website currently only uses necessary cookies that are required for the website to run in your browser.
In this privacy policy we, Chikaya Safaris GmbH, Seilerstätte 13, 1010 Vienna, Austria, FN 553710 f (“we”, “us”), will explain how we obtain and use your personal data in connection with our services (“Services”) and our website chikayasafaris.com (“Website”).
The controller for all processing of your personal data described below is:
If you have any questions or concerns about data protection or wish to exercise your rights in relation to your personal data, please contact us directly.
In a nutshell: When visiting our website, your browser exchanges information with our provider's webserver. This data is automatically stored in so-called logfiles.
Purpose: Our provider's webservers process your data in order to deliver the requested website to your browser. We save all requests in logfiles to guarantee the security and functioning of our website.
Categories of data: Technical data (IP address, HTTP/User agent header fields, browser data, date and time of access, operating system).
Legal basis: Providing the requested online content and guaranteeing the security and functioning of our Platform are our legitimate interests. We thus process your data in accordance with Art 6 (1) (f) GDPR.
Retention period: Our provider deletes the logfiles automatically after 7 days. In case we require the logfiles for a longer time period (eg in case of a security incident), the storage period may be extended accordingly.
Recipients: Processors (Web Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany).
In a nutshell: You can create a user account on our website. This allows you to use advanced features about your booking with us.
Purpose: If you choose to create a user account, we will process your data in order to provide you with the advanced features of the user account.
Categories of data: personal data (title, first and last name); contact details (address, telephone number, e-mail address); account number; data from the fulfilment of our contractual obligations; booking data (date, time, bookings, price, etc.); other data (password, display name, payment options, payment service provider information, payment details, transaction-ID etc.).
Legal basis: Providing the advanced features of an account is based on our legitimate business interest. Processing is therefore carried out according to Article 6(1)(f) of the GDPR.
Retention period: We will store your personal data for as long as you have a user account with us. If you delete your user account, we will also delete your data unless we have a legal obligation to retain it.
Recipients: Processor (Web Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany).
In a nutshell: We regularly provide interested customers information on updates on our products, services and marketing in our newsletter.
Purpose: If you subscribe, we process your data in order to send you our newsletter.
We process the following data: Contact details (name, address, e-mail address), interests.
Legal basis: We will send you our newsletter only if you have given your prior Opt-in consent. We thus process your data in accordance with Art 6 (1) (a) GDPR.
Retention period: We store your data until you withdraw your consent.
Recipients: Processor (Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg).
In a nutshell: You can send us a booking request via our website or using the contact details provided in Section 1. We will process your data to prepare your travel offer and to carry out your booking.
Purpose: We process your data to handle your booking request, to arrange the individual travel contracts for you, and to perform our contractual obligations, including organizing and booking your trip.
Categories of data: personal data (title, first and last name); contact details (address, telephone number, e-mail address); booking data (travel dates, destinations, services requested, price, etc.); passport details; and where necessary for the booking and provided by you, special categories of data such as dietary requirements or health information.
Legal basis: We process your data for the purpose of taking steps prior to brokering and arranging contracts for you (in accordance with your booking request) and for the performance of a contract (travel brokerage) in accordance with Art 6 (1) (b) GDPR. If you provide us with special categories of personal data (e.g., health data), we process this data based on your explicit consent in accordance with Art 9 (2) (a) GDPR.
Retention period: We store your data for the duration of the contractual relationship and thereafter as required by statutory retention obligations. In general, we are legally obliged to retain booking and contract data for 7 years.
Recipients: Processors, including:
Information on our payment service providers: If you choose card payment, payments are made through one of our payment service providers (eg Stripe or PayPal). Our payment service providers process your personal data as independent controllers. We may receive your payment information from our payment service providers. For more information on data protection, please refer to the privacy information of the individual payment service provider.
In a nutshell: We use cookies and similar technologies (“Cookies”). Cookies allow us to store information on your device when you visit our website or use our app.
Purpose: Some cookies are strictly necessary to provide certain basic features of our website and app. Other cookies are required for web analytics or personalized advertising.
Legal basis: We use cookies that are not strictly necessary to provide certain basic features of our website and app only if you have given your prior opt-in consent.
Storage period: In general, all cookies we store on your device are automatically deleted after 2 months at the latest. Certain information is stored on your device permanently (e.g. local storage). You can manually delete all cookies at any time.
Recipients: Processor (Web Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany).
Depending on your booking request (your chosen itinerary) the following may be recipients of your data and are located outside the EU/EEA:
We only transfer your data to (i) countries for which the EU Commission has determined that they provide an adequate level of data protection or (ii) if we take measures to ensure that the respective recipient provides an adequate level of data protection (in particular by concluding EU Standard Contractual Clauses, “SCC”). With respect to all the above-mentioned recipients, we are providing for appropriate safeguards by entering binding SCC, enforceable by data subjects in the EEA. These clauses have been enhanced with additional safeguards, based on the guidance of the European Data Protection Board.
We are subject to numerous legal regulations. In certain cases, we may be legally obliged to disclose your personal data to courts or other authorities upon their request. In any case, we will make sure that the protection of your data is maintained.
You have the right to request access to your personal data and to obtain information, inter alia, on the purpose of processing, the categories of data concerned, from which source the personal data originate, the recipients of your data, the duration of storage, etc.
If we process inaccurate or incomplete personal data, you have the right to rectification or completion of such data. You may also request the deletion of the personal data which have been processed unlawfully. Please note that you may exercise these rights only in respect of inaccurate, incomplete or unlawfully processed data. If it is unclear whether your personal data is inaccurate, incomplete, or unlawfully processed you may request us to restrict the processing of your data until this issue has been resolved.
Please note that these rights complement each other which means that you can request us to either rectify or complete or delete your data.
If we process your data based on our legitimate interest, you have the right to object to the processing of your personal data on grounds relating to your particular situation. If you exercise your right, we will ask you to provide your reasons. You further have the right to object where we process your personal data for direct marketing purposes (e.g. discount offers for our products and services similar to those you have already purchased).
If we process your data based on your consent, processing will only take place in accordance with the purposes set out in the separate declaration of consent and to the extent you agreed therein. Any consent given may be revoked at any time with future effect (for example, you may object to the processing of your personal data for marketing and promotional purposes if you no longer consent to processing in the future).
In certain cases, you have the right to receive your personal data processed by us in a structured, commonly used and machine-readable format (i.e. right to data portability). Where technically feasible, you may instruct us to transmit your data to a third party of your choice, unless data portability would require unreasonable efforts, affect the rights and freedoms of others or violate any legal obligations.
If you have any concerns regarding data protection law, we hope that you will contact us first and we can address your concerns. However, despite all our efforts to ensure the protection and integrity of your data, you might remain dissatisfied. If you consider that we are unlawfully using your data, you may lodge a complaint with the Austrian Data Protection Authority.