Plan a safari now

Data Protection

Customer Privacy Policy

As of: 03/23/2026

I. Controller

The controller for the processing of personal data in connection with the website safari-tansania.com and the intermediation services offered through it, within the meaning of the General Data Protection Regulation („GDPR“), is:

[Global Wild Traveling LLC (limited liability)]
[Address]
[Email: info@safari-tansania.com]
[further mandatory information]

A separately designated data protection officer does not currently exist.

Data protection requests can be directed to [Email: info@safari-tansania.com] be directed.

II. Subject Matter and Scope

This privacy policy informs about the type, scope, and purposes of processing personal data:

  • when using our website,
  • when contacting us,
  • for travel inquiries,
  • within the scope of mediating safari travel services,
  • when using the communication, analysis, and marketing services we employ.

Personal data is any information relating to an identified or identifiable natural person.

III. Website Provisioning and Hosting

When you visit our website, technically necessary information is processed by the end devices and browsers you use, as well as by our hosting infrastructure.

These include in particular:

  • IP address,
  • Date and time of access,
  • called content,
  • Referrer URL,
  • Browser type and browser version,
  • Operating system,
  • other technical device and connection data.

Processing is carried out for the following purposes:

  • Website deployment,
  • Maintaining IT security,
  • Error analysis,
  • Defense against improper or unlawful access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, technically stable, and functional operation of our website.

For hosting our website, we use STRATO. The website runs on WordPress.

IV. Contact and Travel Inquiries

When you contact us, especially via the contact form, email, telephone, WhatsApp, or other communication channels, we process the personal data you provide.

In the context of travel inquiries, this can include, in particular, the following data:

  • First and last name,
  • Email address,
  • Phone number,
  • Desired start of travel and travel period,
  • Number and age structure of travelers,
  • desired comfort level,
  • Desired start and end points,
  • Desired parks and itinerary,
  • Other voluntarily provided information.

Processing is carried out for the following purposes:

  • Processing your request,
  • Creating a custom quote,
  • Communication with you,
  • Initiation of a contractual relationship with the respective tour operator.

The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the processing is carried out for the performance of pre-contractual measures. Insofar as an inquiry does not have a specific contractual reference, the processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the orderly and efficient processing of incoming inquiries.

We use WP Forms to collect inquiries through our website.

V. Email Communication

Our business email communication takes place via Google Workspace.

If you communicate with us via email or if form data is submitted to our email infrastructure, we process the personal data contained in the communication, in particular:

  • Sender Information,
  • Contact details,
  • Communication content,
  • Communication times.

Processing is carried out for the following purposes:

  • Processing your request,
  • Communication within the framework of mediation,
  • Documentation of business transactions.

The legal basis is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR. Our legitimate interest lies in reliable and appropriate business communication.

VI. Internal Offer and Travel Planning via Replit

For internal planning, calculation, and structuring of safari requests, we use our own software solution that is operated via Replit.

In the scope of this usage, we process in particular:

  • Name,
  • Email address,
  • Phone number,
  • Travel dates,
  • Itinerary,
  • Offer parameters,
  • any other travel-related information you wish to provide us with as part of your request.

Processing is carried out exclusively internally by our employees for the following purposes:

  • Offer creation,
  • Travel planning,
  • Mediation processing.

The legal basis is Article 6(1)(b) GDPR.

Replit processes data in the United States of America. To the extent that personal data is transferred to a third country in this process, this is done in compliance with Art. 44 et seq. of the GDPR. We would like to point out that data transfers to third countries may involve a level of data protection that differs from the law of the European Union.

VII. Support for Bid Creation Using OpenAI

OpenAI API integrated via Replit can be used for technical support in creating individual proposal content.

Based on our current technical setup, no names, email addresses, phone numbers, or other personally identifiable customer data are transmitted to OpenAI.

To the extent that technical connection or system data is processed exceptionally in connection with the use of the API, this shall be done exclusively to the extent necessary for the technical provision thereof.

VIII. Communication with Tour Operators in Tanzania

As we act solely as an intermediary, we transmit personal data to the respective tour operator in Tanzania in the course of processing travel inquiries and bookings, insofar as this is necessary for the creation of offers, coordination, initiation of contracts, or execution of contracts.

During the inquiry and quotation calculation stage, the following data, among others, can be transmitted:

  • Name of the requesting person,
  • Travel dates,
  • Desired route,
  • desired accommodation or comfort level,
  • desired parks,
  • Participant structure.

We will only forward your email address and phone number to the respective tour operator once full payment has been received and these details are necessary for the further processing of the booked trip.

We do not collect or store copies of passports or traveler data as a general rule. If the tour operator requires such data for the trip, it is usually requested directly from the customer by the tour operator and processed independently by them.

The legal basis for the transfer of personal data to the tour operator is Art. 6(1)(b) GDPR.

To the extent that personal data is transferred to recipients in Tanzania, we supplementarily rely on Article 49(1)(b) GDPR, insofar as the transfer is necessary for the performance of pre-contractual measures at your request or for the performance of a contract requested by you.

The respective tour operator is solely responsible for data protection concerning the data processing carried out by them.

IX. Booking and Payment Processing

If a booking is made, we process the data required for booking settlement, payment allocation, and commercial documentation.

Since we currently only offer bank transfer as a payment method, the following data in particular may be processed:

  • Account holder name,
  • Payment amount,
  • Payment date,
  • Purpose,
  • any further information transmitted as part of the transfer.

Payment will be made to a business account at Qonto. As part of account management and payment processing, personal data may be processed by Qonto and the respective banks involved.

The legal basis is Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR, insofar as statutory retention and proof obligations exist.

X. Booking Appointments via Calendly

For booking consultation appointments, we use Calendly as a service integrated into our website.

When using the Calendly integration and during the appointment booking process, the following data may be processed in particular:

  • IP address,
  • Device and browser information,
  • Date and time of call,
  • Name,
  • Email address,
  • Phone number,
  • Appointment dates,
  • voluntary notices.

Processing is carried out for the following purposes:

  • Terminorganisation,
  • Carrying out pre-contractual measures.

The legal basis is Art. 6(1)(b) GDPR. To the extent that cookies or comparable technologies are used in connection with the integration, this is done in addition on the basis of your consent in accordance with Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

In connection with the use of Calendly, personal data may be processed in third countries, particularly in the USA.

XI. Communication via WhatsApp and WhatsApp Widget

You have the option to contact us via WhatsApp. In this case, we will process, in particular:

  • Phone number,
  • names shown on WhatsApp,
  • News content,
  • attached files,
  • Communication times.

Processing takes place to handle your request or to communicate within the scope of an existing or intended mediation.

The legal basis is Art. 6(1)(b) GDPR and, where necessary, Art. 6(1)(f) GDPR.

WhatsApp is a service of the Meta Group. In connection with the use of WhatsApp, personal data may also be processed outside the European Union or the European Economic Area. Their own data protection regulations also apply to processing by WhatsApp or Meta.

Furthermore, on our website, we use a WhatsApp plugin or widget provided by [Name of plugin/plugin provider]. When you access the relevant function, technical data, including IP address, browser data, and usage information, may be transmitted to the plugin provider and, if applicable, to WhatsApp or Meta.

To the extent that cookies or comparable technologies are used or data is transferred to third parties, this is done exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

XII. Cookies and Consent Management

Our website uses cookies and comparable technologies.

Technically necessary cookies and comparable technologies are used to the extent required for:

  • website deployment,
  • ensuring their safety,
  • the storage of your privacy settings.

The legal basis for the use of technically necessary technologies is Section 25 (2) of the TDDDG. Where the use is followed by processing of personal data, this is based on Article 6 (1) lit. f GDPR or Article 6 (1) lit. b GDPR.

We only use analysis, marketing, and other non-technically necessary technologies if you have previously given your express consent.

The legal basis for this is Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TTDSG.

The management of your consents is handled by our in-house consent tool.

XIII. Analysis, Marketing, and Third-Party Services

We use various analytics, marketing, and third-party services on our website. These services are only used with your consent, unless they are technically necessary in individual cases.

The legal basis is Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the German Telecommunications Telemedia Data Protection Act (TDDDG).

In connection with the services listed below, data may be transferred to third countries, particularly to the United States of America.

Google Tag Manager

We use Google Tag Manager for technical management and integration of other services. Google Tag Manager is used for controlling tags and scripts.

Google Analytics 4

We use Google Analytics 4 to analyze user behavior on our website.

In particular, the following can be processed:

  • Usage data,
  • technical identifiers,
  • Device information,
  • approximate location data,
  • Interactions with our website.

Google Ads conversion tracking and Google Ads remarketing

We use Google Ads to measure the effectiveness of our advertising and to serve interest-based ads.

In this context, the following can be tracked in particular:

  • whether and by what route users reached our website via ads,
  • whether certain actions were carried out there.

Google Maps

Content from Google Maps may be embedded on our website. When such content is loaded, your IP address and usage data in particular may be transmitted to Google.

Microsoft Clarity

We use Microsoft Clarity to analyse user behaviour on our website and to optimise our online offering.

The following in particular may be processed:

  • mouse movements,
  • scrolling behaviour,
  • click behaviour,
  • technical device data,
  • pages visited.

Microsoft Advertising / Bing Ads

We use Microsoft Advertising to evaluate advertising campaigns and to display interest-based ads.

In particular, the following can be processed:

  • data on ad impressions,
  • website visits,
  • conversions.

XIV. Social media presence

We maintain company profiles on the following platforms:

  • Instagram,
  • Facebook,
  • TikTok,
  • YouTube,
  • Pinterest,
  • WhatsApp.

When you visit our profiles on social networks, the respective platform operators process personal data under their own responsibility. This applies even if you do not have a user account on the platform in question.

The platform operators may provide us with aggregated statistical information about the reach, interactions and use of our content.

The legal basis for operating our social media profiles and for evaluating aggregated usage data is Art. 6(1)(f) GDPR. Our legitimate interest lies in presenting our company appropriately to the public and in communicating with prospective and existing customers.

If you contact us via a social media platform, we process the data you provide in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Where platform operators provide us with usage statistics for our company pages, joint responsibility with the respective platform operator may exist in that regard, insofar as this is provided for by law.

XV. Newsletter

We do not currently send a newsletter.

Should a newsletter service be introduced in future, we will update this privacy policy accordingly and inform you separately about the associated data processing.

XVI. Retention period

As a rule, we store personal data from travel enquiries that do not lead to a booking for a period of up to 36 months from the last contact, provided that:

  • no statutory retention obligations preclude this,
  • you have not previously made a valid request for erasure.

As a rule, we also store data processed via Replit as part of internal planning and quote calculation for a period of up to 36 months, unless differing legal or contractual grounds justify longer storage.

We store booking documents, billing-relevant data and business correspondence in accordance with the applicable commercial, tax and other statutory retention obligations.

Once the respective processing purpose no longer applies and any statutory retention periods have expired, personal data is deleted, provided no other legal basis applies for further processing.

XVII. Recipients of personal data

Where necessary in an individual case, personal data may be transmitted in particular to the following categories of recipients:

  • hosting and IT service providers,
  • email and communication service providers,
  • providers of form, appointment and website functions,
  • banks and payment service providers,
  • tour operators in Tanzania,
  • analytics and advertising service providers,
  • providers of social networks and communication platforms,
  • tax advisors, legal advisors and other professional advisors,
  • authorities and public bodies, insofar as a legal obligation exists.

XVIII. Transfers to third countries

In the course of our activities, personal data may be transferred to third countries outside the European Union or the European Economic Area, in particular:

  • to the USA,
  • to Tanzania.

Any such transfer takes place exclusively on the basis of data protection requirements, in particular:

  • Carrying out pre-contractual measures.
  • on the basis of your consent,
  • on the basis of an adequacy decision,
  • on the basis of appropriate safeguards,
  • on the basis of another derogation provided for by law.

You can request further information about the transfer bases applicable in an individual case at any time at [Email: info@safari-tansania.com] request

XIX. Rights of data subjects

Subject to the statutory requirements, you have in particular the following rights:

  • right of access pursuant to Art. 15 GDPR,
  • right to rectification pursuant to Art. 16 GDPR,
  • right to rectification pursuant to Art. 16 GDPR,
  • right to restriction of processing pursuant to Art. 18 GDPR,
  • right to data portability pursuant to Art. 20 GDPR,
  • right to object pursuant to Art. 21 GDPR,
  • right to withdraw consent given pursuant to Art. 7(3) GDPR with effect for the future.

To exercise your rights, you can contact us at any time at [Email: info@safari-tansania.com] contact

XX. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

XXI. Currency and amendment of this privacy policy

We reserve the right to amend this privacy policy in the event of changes to the factual or legal circumstances. The current version published on our website applies in each case.