Plan a safari now

Data Protection

Customer Privacy Policy

As of: 03/23/2026

I. Controller

The controller for the processing of personal data in connection with the website safari-tansania.com and the intermediation services offered through it, within the meaning of the General Data Protection Regulation („GDPR“), is:

[Global Wild Traveling LLC (limited liability)]
[Address]
[Email: info@safari-tansania.com]
[further mandatory information]

A separately designated data protection officer does not currently exist.

Data protection requests can be directed to [Email: info@safari-tansania.com] be directed.

II. Subject Matter and Scope

This privacy policy informs about the type, scope, and purposes of processing personal data:

  • when using our website,
  • when contacting us,
  • for travel inquiries,
  • within the scope of mediating safari travel services,
  • when using the communication, analysis, and marketing services we employ.

Personal data is any information relating to an identified or identifiable natural person.

III. Website Provisioning and Hosting

When you visit our website, technically necessary information is processed by the end devices and browsers you use, as well as by our hosting infrastructure.

These include in particular:

  • IP address,
  • Date and time of access,
  • called content,
  • Referrer URL,
  • Browser type and browser version,
  • Operating system,
  • other technical device and connection data.

Processing is carried out for the following purposes:

  • Website deployment,
  • Maintaining IT security,
  • Error analysis,
  • Defense against improper or unlawful access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, technically stable, and functional operation of our website.

For hosting our website, we use STRATO. The website runs on WordPress.

IV. Contact and Travel Inquiries

When you contact us, especially via the contact form, email, telephone, WhatsApp, or other communication channels, we process the personal data you provide.

In the context of travel inquiries, this can include, in particular, the following data:

  • First and last name,
  • Email address,
  • Phone number,
  • Desired start of travel and travel period,
  • Number and age structure of travelers,
  • desired comfort level,
  • Desired start and end points,
  • Desired parks and itinerary,
  • Other voluntarily provided information.

Processing is carried out for the following purposes:

  • Processing your request,
  • Creating a custom quote,
  • Communication with you,
  • Initiation of a contractual relationship with the respective tour operator.

The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the processing is carried out for the performance of pre-contractual measures. Insofar as an inquiry does not have a specific contractual reference, the processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the orderly and efficient processing of incoming inquiries.

We use WP Forms to collect inquiries through our website.

V. Email Communication

Our business email communication takes place via Google Workspace.

If you communicate with us via email or if form data is submitted to our email infrastructure, we process the personal data contained in the communication, in particular:

  • Sender Information,
  • Contact details,
  • Communication content,
  • Communication times.

Processing is carried out for the following purposes:

  • Processing your request,
  • Communication within the framework of mediation,
  • Documentation of business transactions.

The legal basis is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR. Our legitimate interest lies in reliable and appropriate business communication.

VI. Internal Offer and Travel Planning via Replit

For internal planning, calculation, and structuring of safari requests, we use our own software solution that is operated via Replit.

In the scope of this usage, we process in particular:

  • Name,
  • Email address,
  • Phone number,
  • Travel dates,
  • Itinerary,
  • Offer parameters,
  • any other travel-related information you wish to provide us with as part of your request.

Processing is carried out exclusively internally by our employees for the following purposes:

  • Offer creation,
  • Travel planning,
  • Mediation processing.

The legal basis is Article 6(1)(b) GDPR.

Replit processes data in the United States of America. To the extent that personal data is transferred to a third country in this process, this is done in compliance with Art. 44 et seq. of the GDPR. We would like to point out that data transfers to third countries may involve a level of data protection that differs from the law of the European Union.

VII. Support for Bid Creation Using OpenAI

OpenAI API integrated via Replit can be used for technical support in creating individual proposal content.

Based on our current technical setup, no names, email addresses, phone numbers, or other personally identifiable customer data are transmitted to OpenAI.

To the extent that technical connection or system data is processed exceptionally in connection with the use of the API, this shall be done exclusively to the extent necessary for the technical provision thereof.

VIII. Communication with Tour Operators in Tanzania

As we act solely as an intermediary, we transmit personal data to the respective tour operator in Tanzania in the course of processing travel inquiries and bookings, insofar as this is necessary for the creation of offers, coordination, initiation of contracts, or execution of contracts.

During the inquiry and quotation calculation stage, the following data, among others, can be transmitted:

  • Name of the requesting person,
  • Travel dates,
  • Desired route,
  • desired accommodation or comfort level,
  • desired parks,
  • Participant structure.

We will only forward your email address and phone number to the respective tour operator once full payment has been received and these details are necessary for the further processing of the booked trip.

We do not collect or store copies of passports or traveler data as a general rule. If the tour operator requires such data for the trip, it is usually requested directly from the customer by the tour operator and processed independently by them.

The legal basis for the transfer of personal data to the tour operator is Art. 6(1)(b) GDPR.

To the extent that personal data is transferred to recipients in Tanzania, we supplementarily rely on Article 49(1)(b) GDPR, insofar as the transfer is necessary for the performance of pre-contractual measures at your request or for the performance of a contract requested by you.

The respective tour operator is solely responsible for data protection concerning the data processing carried out by them.

IX. Booking and Payment Processing

If a booking is made, we process the data required for booking settlement, payment allocation, and commercial documentation.

Since we currently only offer bank transfer as a payment method, the following data in particular may be processed:

  • Account holder name,
  • Payment amount,
  • Payment date,
  • Purpose,
  • any further information transmitted as part of the transfer.

Payment will be made to a business account at Qonto. As part of account management and payment processing, personal data may be processed by Qonto and the respective banks involved.

The legal basis is Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR, insofar as statutory retention and proof obligations exist.

X. Booking Appointments via Calendly

For booking consultation appointments, we use Calendly as a service integrated into our website.

When using the Calendly integration and during the appointment booking process, the following data may be processed in particular:

  • IP address,
  • Device and browser information,
  • Date and time of call,
  • Name,
  • Email address,
  • Phone number,
  • Appointment dates,
  • voluntary notices.

Processing is carried out for the following purposes:

  • Terminorganisation,
  • Carrying out pre-contractual measures.

The legal basis is Art. 6(1)(b) GDPR. To the extent that cookies or comparable technologies are used in connection with the integration, this is done in addition on the basis of your consent in accordance with Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

In connection with the use of Calendly, personal data may be processed in third countries, particularly in the USA.

XI. Communication via WhatsApp and WhatsApp Widget

You have the option to contact us via WhatsApp. In this case, we will process, in particular:

  • Phone number,
  • names shown on WhatsApp,
  • News content,
  • attached files,
  • Communication times.

Processing takes place to handle your request or to communicate within the scope of an existing or intended mediation.

The legal basis is Art. 6(1)(b) GDPR and, where necessary, Art. 6(1)(f) GDPR.

WhatsApp is a service of the Meta Group. In connection with the use of WhatsApp, personal data may also be processed outside the European Union or the European Economic Area. Their own data protection regulations also apply to processing by WhatsApp or Meta.

Furthermore, on our website, we use a WhatsApp plugin or widget provided by [Name of plugin/plugin provider]. When you access the relevant function, technical data, including IP address, browser data, and usage information, may be transmitted to the plugin provider and, if applicable, to WhatsApp or Meta.

To the extent that cookies or comparable technologies are used or data is transferred to third parties, this is done exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

XII. Cookies and Consent Management

Our website uses cookies and comparable technologies.

Technically necessary cookies and comparable technologies are used to the extent required for:

  • website deployment,
  • ensuring their safety,
  • the storage of your privacy settings.

The legal basis for the use of technically necessary technologies is Section 25 (2) of the TDDDG. Where the use is followed by processing of personal data, this is based on Article 6 (1) lit. f GDPR or Article 6 (1) lit. b GDPR.

We only use analysis, marketing, and other non-technically necessary technologies if you have previously given your express consent.

The legal basis for this is Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TTDSG.

The management of your consents is handled by our in-house consent tool.

XIII. Analysis, Marketing, and Third-Party Services

We use various analytics, marketing, and third-party services on our website. These services are only used with your consent, unless they are technically necessary in individual cases.

The legal basis is Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the German Telecommunications Telemedia Data Protection Act (TDDDG).

In connection with the services listed below, data may be transferred to third countries, particularly to the United States of America.

Google Tag Manager

We use Google Tag Manager for technical management and integration of other services. Google Tag Manager is used for controlling tags and scripts.

Google Analytics 4

We use Google Analytics 4 to analyze user behavior on our website.

In particular, the following can be processed:

  • Usage data,
  • technical identifiers,
  • Device information,
  • approximate location data,
  • Interactions with our website.

Google Ads conversion tracking and Google Ads remarketing

We use Google Ads to measure the effectiveness of our advertising and to serve interest-based ads.

In this context, the following can be tracked in particular:

  • whether and by what route users reached our website via ads,
  • whether certain actions were carried out there.

Google Maps

Content from Google Maps may be embedded on our website. When such content is loaded, your IP address and usage data in particular may be transmitted to Google.

Microsoft Clarity

We use Microsoft Clarity to analyse user behaviour on our website and to optimise our online offering.

The following in particular may be processed:

  • mouse movements,
  • scrolling behaviour,
  • click behaviour,
  • technical device data,
  • pages visited.

Microsoft Advertising / Bing Ads

We use Microsoft Advertising to evaluate advertising campaigns and to display interest-based ads.

In particular, the following can be processed:

  • data on ad impressions,
  • website visits,
  • conversions.

XIV. Social media presence

We maintain company profiles on the following platforms:

  • Instagram,
  • Facebook,
  • TikTok,
  • YouTube,
  • Pinterest,
  • WhatsApp.

When you visit our profiles on social networks, the respective platform operators process personal data under their own responsibility. This applies even if you do not have a user account on the platform in question.

The platform operators may provide us with aggregated statistical information about the reach, interactions and use of our content.

The legal basis for operating our social media profiles and for evaluating aggregated usage data is Art. 6(1)(f) GDPR. Our legitimate interest lies in presenting our company appropriately to the public and in communicating with prospective and existing customers.

If you contact us via a social media platform, we process the data you provide in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Where platform operators provide us with usage statistics for our company pages, joint responsibility with the respective platform operator may exist in that regard, insofar as this is provided for by law.

XV. Newsletter

We do not currently send a newsletter.

Should a newsletter service be introduced in future, we will update this privacy policy accordingly and inform you separately about the associated data processing.

XVI. Retention period

As a rule, we store personal data from travel enquiries that do not lead to a booking for a period of up to 36 months from the last contact, provided that:

  • no statutory retention obligations preclude this,
  • Sie nicht zuvor wirksam die Löschung verlangen.

Daten, die im Rahmen der internen Planung und Angebotskalkulation über Replit verarbeitet werden, speichern wir grundsätzlich ebenfalls für einen Zeitraum von bis zu 36 Monaten, sofern keine abweichenden gesetzlichen oder vertraglichen Gründe eine längere Speicherung rechtfertigen.

Buchungsunterlagen, abrechnungsrelevante Daten sowie geschäftliche Korrespondenz speichern wir im Rahmen der jeweils geltenden handels-, steuer- und sonstigen gesetzlichen Aufbewahrungspflichten.

Nach Fortfall des jeweiligen Verarbeitungszwecks und Ablauf etwaiger gesetzlicher Aufbewahrungsfristen werden personenbezogene Daten gelöscht, sofern keine andere Rechtsgrundlage für eine weitere Verarbeitung eingreift.

XVII. Empfänger personenbezogener Daten

Personenbezogene Daten können, soweit dies im Einzelfall erforderlich ist, insbesondere an folgende Kategorien von Empfängern übermittelt werden:

  • Hosting- und IT-Dienstleister,
  • E-Mail- und Kommunikationsdienstleister,
  • Anbieter von Formular-, Termin- und Website-Funktionen,
  • Kreditinstitute und Zahlungsdienstleister,
  • Tour Operatoren in Tansania,
  • Analyse- und Werbedienstleister,
  • Anbieter sozialer Netzwerke und Kommunikationsplattformen,
  • Steuerberater, Rechtsberater und sonstige berufsmäßige Berater,
  • Behörden und öffentliche Stellen, soweit eine gesetzliche Verpflichtung besteht.

XVIII. Drittlandübermittlungen

Im Rahmen unserer Tätigkeit kann es zu einer Übermittlung personenbezogener Daten in Drittländer außerhalb der Europäischen Union bzw. des Europäischen Wirtschaftsraums kommen, insbesondere:

  • in die USA,
  • nach Tansania.

Eine derartige Übermittlung erfolgt ausschließlich auf Grundlage der datenschutzrechtlichen Vorgaben, insbesondere:

  • zur Durchführung vorvertraglicher Maßnahmen oder zur Vertragserfüllung,
  • auf Grundlage Ihrer Einwilligung,
  • auf Grundlage eines Angemessenheitsbeschlusses,
  • auf Grundlage geeigneter Garantien,
  • auf Grundlage eines sonstigen gesetzlich vorgesehenen Ausnahmetatbestands.

Nähere Informationen zu den im Einzelfall einschlägigen Übermittlungsgrundlagen können Sie jederzeit unter [Email: info@safari-tansania.com] anfordern.

XIX. Rechte der betroffenen Personen

Ihnen stehen im Rahmen der gesetzlichen Voraussetzungen insbesondere folgende Rechte zu:

  • Recht auf Auskunft gemäß Art. 15 DSGVO,
  • Recht auf Berichtigung gemäß Art. 16 DSGVO,
  • Recht auf Löschung gemäß Art. 17 DSGVO,
  • Recht auf Einschränkung der Verarbeitung gemäß Art. 18 DSGVO,
  • Recht auf Datenübertragbarkeit gemäß Art. 20 DSGVO,
  • Recht auf Widerspruch gemäß Art. 21 DSGVO,
  • Recht auf Widerruf einer erteilten Einwilligung gemäß Art. 7 Abs. 3 DSGVO mit Wirkung für die Zukunft.

Zur Geltendmachung Ihrer Rechte können Sie sich jederzeit an [Email: info@safari-tansania.com] wenden.

XX. Beschwerderecht bei einer Aufsichtsbehörde

Unbeschadet anderweitiger verwaltungsrechtlicher oder gerichtlicher Rechtsbehelfe steht Ihnen das Recht zu, sich bei einer Datenschutzaufsichtsbehörde über die Verarbeitung Ihrer personenbezogenen Daten zu beschweren.

XXI. Aktualität und Änderung dieser Datenschutzerklärung

Wir behalten uns vor, diese Datenschutzerklärung bei Änderungen der tatsächlichen oder rechtlichen Rahmenbedingungen anzupassen. Es gilt jeweils die auf unserer Website veröffentlichte aktuelle Fassung.