1. Introduction
We respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or book one of our small-group adventure tours.
Omaya Travel is the data controller responsible for your personal data.
2. What Information We Collect
We may collect the following types of personal data:
- Identity Data: Name, surname
- Contact Data: Email address, phone number
- Booking Information: Tour preferences, travel dates, special requests
- Payment Information: Billing details (processed securely via third-party providers)
- Technical Data: IP address, browser type, device information
- Usage Data: Pages visited, time spent on our website
We also collect certain information automatically through cookies and similar technologies. For more details, please see our Cookie Policy.
3. How We Use Your Data
We use your personal data to:
- Process and manage your bookings
- Communicate with you regarding your tours
- Provide customer support
- Improve our website and services
- Send marketing communications (only with your consent)
- Comply with legal obligations
We also use cookies and similar technologies to analyze website traffic, personalize content, and improve user experience.
4. Legal Basis for Processing (GDPR)
We process your data under the General Data Protection Regulation (GDPR) based on:
- Contract: To fulfill your booking
- Consent: For marketing communications, cookies, and tracking technologies
- Legal obligation: For accounting and regulatory compliance
- Legitimate interests: To improve our services and website
5. Third-Party Services
We use trusted third-party services to operate our business and improve our services, including:
- Google Analytics – to understand how visitors use our website
- Meta Platforms, Inc. (Meta Ads / Facebook Pixel) – to measure and optimize advertising campaigns
- Email marketing providers (e.g. Mailchimp or similar) – to send newsletters and updates
These providers may process your data on our behalf and may use cookies or similar technologies.
6. Sharing Your Data
We may share your data with:
- Payment processors
- Tour guides and local partners (only when necessary for your trip)
- IT and website service providers
- Analytics and advertising partners (with your consent)
- Legal or regulatory authorities when required
We never sell your personal data.
7. International Transfers
Some of our third-party providers (such as Google and Meta) may transfer your data outside the European Economic Area (EEA).
In such cases, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission.
8. Data Retention
We retain your personal data only as long as necessary:
- Booking and financial records: up to 5–7 years (to comply with legal and tax obligations)
- Marketing data: until you withdraw your consent or unsubscribe
- Analytics and cookie data: in accordance with our Cookie Policy
9. Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (including for marketing and cookies)
You also have the right to lodge a complaint with your local data protection authority.
10. Data Security
We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.
11. Third-Party Links
Our website may contain links to other websites. We are not responsible for their privacy practices.
12. Children’s Privacy
OOur services are intended for individuals aged 16 and over.
We may collect and process personal data of individuals aged 16–17 for the purpose of booking and participating in our tours. Where required, we may request consent from a parent or legal guardian.
We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have collected such data, we will take steps to delete it.
If you believe that a child under 16 has provided us with personal data, please contact us.
13. Updates to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page.
14. Contact Us
If you have any questions about this Privacy Policy or your data, please contact us:
Company Name: Omaya Travel
Email: info@omayatravel.com