Privacy Policy

Version: 5 September 2026

I. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for the processing of personal data in connection with the website safari-tansania.com and the intermediation services offered through it is:

World Wild Traveling UG (haftungsbeschränkt), Kolonnenstr. 8, 10827 Berlin, Germany. Register court: Amtsgericht Frankfurt am Main, HRB 130604. VAT identification number: DE362114479. Email: info@safari-tansania.com.

There is currently no separately appointed data protection officer. Please send data protection enquiries to info@safari-tansania.com.

II. Subject matter and scope

This policy provides information on the nature, extent and purposes of the processing of personal data when using our website, when contacting us, for travel enquiries, in the course of the intermediation of safari travel services and when using the communication, analytics and marketing services we employ.

Personal data is any information relating to an identified or identifiable natural person.

III. Provision of the website and hosting

When you visit our website, we process technically required information: IP address, date and time of access, content accessed, referrer URL, browser type and version, operating system and other technical device and connection data.

The processing serves the provision of the website, IT security, error analysis and the defence against abusive access. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in secure and stable operation.

Our website is operated via the Lovable platform. Data is held in a PostgreSQL database and a file store operated in a data centre within the European Union (Ireland).

IV. Contact and travel enquiries

When you contact us – by form, email, telephone, WhatsApp or any other channel – we process the data you provide. For travel enquiries this may include: first and last name, email address, telephone number, desired travel start and period, number and age structure of travellers, desired comfort level, start and end points, desired parks and route, and information provided voluntarily.

The purposes are handling your enquiry, preparing an individual offer, communicating with you and initiating a contractual relationship with the tour operator being arranged. The legal basis is Art. 6(1)(b) GDPR, and for enquiries without a specific contractual link Art. 6(1)(f) GDPR.

We use a form we developed ourselves to record enquiries. The data is stored exclusively in our own database within the European Union; no transfer to an external form provider takes place.

V. Email communication

Our business email communication runs via Google Workspace. Sender and contact data, communication content and times are processed in order to handle your enquiry, to communicate in the course of an intermediation and to document business transactions. The legal bases are Art. 6(1)(b) and (f) GDPR.

VI. Internal offer and trip planning

For the internal planning, calculation and structuring of safari enquiries we use our own software solution operated via Replit. Name, email address, telephone number, travel dates, route, offer parameters and other travel-related details are processed. The processing takes place exclusively internally for offer preparation, trip planning and handling the intermediation. The legal basis is Art. 6(1)(b) GDPR.

Replit processes data in the United States of America. Insofar as this involves a transfer to a third country, it takes place in compliance with Art. 44 et seq. GDPR. We point out that transfers to third countries may involve a level of data protection different from that under European Union law.

VII. Support in preparing offers

For technical support in preparing individual offer content, an OpenAI interface integrated via Replit may be used. Under our current technical set-up, no names, email addresses, telephone numbers or other personal customer data are transferred to OpenAI. Insofar as technical connection or system data is exceptionally processed, this occurs only to the extent required for providing the service.

VIII. Communication with tour operators in Tanzania

As we act exclusively as an intermediary, we transfer personal data to the tour operator envisaged in Tanzania insofar as this is necessary for preparing the offer, coordination, initiating the contract or performing the contract. At the enquiry stage this concerns name, travel dates, desired route, accommodation or comfort level, desired parks and the composition of the party.

We generally transfer your email address and telephone number only after payment has been received in full, where this data is required for carrying out the booked trip. We do not generally collect or store passport copies or passport data.

The legal basis is Art. 6(1)(b) GDPR, supplemented by Art. 49(1)(b) GDPR. The respective tour operator is independently responsible for the processing it carries out.

IX. Booking and payment processing

If a booking is made, we process the data required for handling the intermediation, allocating payments and commercial documentation. As we currently offer bank transfer only, this is in particular the account holder's name, payment amount, payment date and payment reference.

Payment is made to a business account with Qonto. In the course of account management, personal data may be processed by Qonto and the credit institutions involved. The legal bases are Art. 6(1)(b) and (c) GDPR.

X. Appointment booking via Calendly

We use Calendly for booking consultation appointments. IP address, device and browser information, date and time of access, name, email address, telephone number, appointment details and voluntary messages may be processed.

The legal basis is Art. 6(1)(b) GDPR. Insofar as cookies or comparable technologies are used, this additionally takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. The embedding is only loaded after your consent. This may involve processing in third countries, in particular in the USA.

XI. Communication via WhatsApp

You can contact us via WhatsApp. Telephone number, displayed name, message content, attachments and communication times are processed in order to handle your enquiry or to communicate in the course of an intermediation. The legal bases are Art. 6(1)(b) and, where necessary, (f) GDPR.

WhatsApp is a service of the Meta group. Processing may also take place outside the European Union; in addition, the privacy policies of WhatsApp and Meta apply.

We use technically required cookies and comparable technologies insofar as this is necessary for providing the website, its security and storing your privacy settings. The legal basis is Section 25(2) TDDDG.

We use analytics, marketing and other technologies that are not technically required only after your express consent. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Your consents are managed via a consent tool we implemented ourselves. Before you give your consent, no analytics or marketing technologies are loaded. We store your selection in your browser and take it into account on every further visit. You can change it at any time via the link “Marketing Settings and Cookies” in the footer.

XIII. Analytics, marketing and third-party services

These services are used only on the basis of your consent. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. This may involve data transfers to third countries, in particular to the United States.

Google Tag Manager: serves the technical management and embedding of further services and the control of tags and scripts.

Google Analytics 4: analysis of usage behaviour. Usage data, technical identifiers, device information, approximate location data and interactions with our website may be processed.

Google Ads (conversion tracking and remarketing): measuring the effectiveness of advertising measures and displaying interest-based advertising. It can be traced whether and by which route users reached our website via ads and whether certain actions took place there.

Google Maps: on individual pages we embed map material. When it is accessed, IP address and usage data may be transferred to Google. On tour and destination pages we use static map images without an external map script.

Microsoft Clarity: analysis of user behaviour. Mouse movements, scrolling and clicking behaviour, technical device data and pages accessed may be processed.

Microsoft Advertising: evaluation of advertising campaigns and display of interest-based advertising. Data on ad contacts, website visits and conversions may be processed.

We maintain company profiles on Instagram, Facebook, TikTok, YouTube, Pinterest and WhatsApp. When you visit these presences, the respective platform operators process personal data under their own responsibility, even if you do not hold a user account there.

Aggregated statistical information on reach, interactions and usage may be made available to us. The legal basis for operating our presences and evaluating aggregated usage data is Art. 6(1)(f) GDPR. If you contact us via a platform, we process your details under Art. 6(1)(b) or (f) GDPR. Where provided for by law, joint responsibility may exist with regard to usage statistics.

We do not currently send a newsletter. Should a newsletter offering be introduced in future, we will supplement this policy and provide separate information on the processing involved.

XVI. Storage period

We generally store data from travel enquiries that do not lead to a booking for up to 36 months from the last contact, unless statutory retention obligations stand in the way and you have not previously validly requested erasure. Data processed for internal planning is generally also stored for up to 36 months.

We store booking documents, billing-related data and business correspondence within the scope of commercial, tax and other statutory retention obligations. Once the purpose of processing has lapsed and any periods have expired, the data is erased.

XVII. Recipients of personal data

Personal data may, where necessary in the individual case, be transferred to the following categories of recipients: hosting and IT service providers, email and communication service providers, providers of form, appointment and website functions, credit institutions and payment service providers, tour operators in Tanzania, analytics and advertising service providers, providers of social networks, tax and legal advisers, and authorities where a legal obligation exists.

XVIII. Third-country transfers

Personal data may be transferred to third countries outside the European Union, in particular to the USA and to Tanzania. Such a transfer takes place exclusively on the basis of the data protection requirements: for the performance of pre-contractual measures or for the performance of a contract, on the basis of your consent, an adequacy decision, suitable safeguards or another statutory exception. Further information can be requested at info@safari-tansania.com.

XIX. Rights of data subjects

Within the scope of the statutory requirements you are entitled to: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of consent given (Art. 7(3)) with effect for the future.

To exercise these rights, please contact info@safari-tansania.com.

XX. Right to lodge a complaint

Without prejudice to other remedies, you have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

XXI. Currency and amendment

We reserve the right to amend this privacy policy when the factual or legal framework changes. The current version published on our website applies in each case.