Privacy Policy

Cookie notice

Our website currently only uses necessary cookies that are required for the website to run in your browser.

Preamble

In this privacy policy we, Chikaya Safaris GmbH, Seilerstätte 13, 1010 Vienna, Austria, FN 672018 m (“we”, “us”), will explain how we obtain and use your personal data in connection with our services (“Services”) and our website chikayasafaris.com (“Website”).

Controller

The controller for all processing of your personal data described below is:

If you have any questions or concerns about data protection or wish to exercise your rights in relation to your personal data, please contact us directly.

Webserver & Logfiles

In a nutshell: When visiting our website, your browser exchanges information with our provider's webserver. This data is automatically stored in so-called logfiles.

Purpose: Our provider's webservers process your data in order to deliver the requested website to your browser. We save all requests in logfiles to guarantee the security and functioning of our website.

Categories of data: Technical data (IP address, HTTP/User agent header fields, browser data, date and time of access, operating system).

Legal basis: Providing the requested online content and guaranteeing the security and functioning of our Platform are our legitimate interests. We thus process your data in accordance with Art 6 (1) (f) GDPR.

Retention period: Our provider deletes the logfiles automatically after 7 days. In case we require the logfiles for a longer time period (eg in case of a security incident), the storage period may be extended accordingly.

Recipients: Processors (Web Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany).

User account

In a nutshell: You can create a user account on our website. This allows you to use advanced features about your booking with us.

Purpose: If you choose to create a user account, we will process your data in order to provide you with the advanced features of the user account.

Categories of data: personal data (title, first and last name); contact details (address, telephone number, e-mail address); account number; data from the fulfilment of our contractual obligations; booking data (date, time, bookings, price, etc.); other data (password, display name, payment options, payment service provider information, payment details, transaction-ID etc.).

Legal basis: Providing the advanced features of an account is based on our legitimate business interest. Processing is therefore carried out according to Article 6(1)(f) of the GDPR.

Retention period: We will store your personal data for as long as you have a user account with us. If you delete your user account, we will also delete your data unless we have a legal obligation to retain it.

Recipients: Processor (Web Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany).

Newsletter

In a nutshell: We regularly provide interested customers information on updates on our products, services and marketing in our newsletter.

Purpose: If you subscribe, we process your data in order to send you our newsletter.

We process the following data: Contact details (name, address, e-mail address), interests.

Legal basis: We will send you our newsletter only if you have given your prior Opt-in consent. We thus process your data in accordance with Art 6 (1) (a) GDPR.

Retention period: We store your data until you withdraw your consent.

Recipients: Processor (Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg).

Booking requests and Travel bookings

In a nutshell: You can send us a booking request via our website or using the contact details provided in Section 1. We will process your data to prepare your travel offer and to carry out your booking.

Purpose: We process your data to handle your booking request, to arrange the individual travel contracts for you, and to perform our contractual obligations, including organizing and booking your trip.

Categories of data: personal data (title, first and last name); contact details (address, telephone number, e-mail address); booking data (travel dates, destinations, services requested, price, etc.); passport details; and where necessary for the booking and provided by you, special categories of data such as dietary requirements or health information.

Legal basis: We process your data for the purpose of taking steps prior to brokering and arranging contracts for you (in accordance with your booking request) and for the performance of a contract (travel brokerage) in accordance with Art 6 (1) (b) GDPR. If you provide us with special categories of personal data (e.g., health data), we process this data based on your explicit consent in accordance with Art 9 (2) (a) GDPR.

Retention period: We store your data for the duration of the contractual relationship and thereafter as required by statutory retention obligations. In general, we are legally obliged to retain booking and contract data for 7 years.

Recipients: Processors, including:

• (i) Web Host/E-Mail Server Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany.
• (ii) Proposal, billing and bookkeeping software: Runple GmbH, Dornbacher Str. 71-73/3/1, 1170 Vienna.
• (iii) Chikaya Safaris GmbH (see Section 1 for details).
• (iv) To fulfill our contractual obligations, we may transfer your data to third parties involved in providing the travel services, such as transportation providers, car rental companies, hotels, local agencies, and other service providers. In case of legal disputes, data may be shared with lawyers, accountants, authorities, and courts.

Information on our payment service providers: If you choose card payment, payments are made through one of our payment service providers (eg Stripe or PayPal). Our payment service providers process your personal data as independent controllers. We may receive your payment information from our payment service providers. For more information on data protection, please refer to the privacy information of the individual payment service provider.

Cookies & similar technologies

In a nutshell: We use cookies and similar technologies (“Cookies”). Cookies allow us to store information on your device when you visit our website or use our app.

Purpose: Some cookies are strictly necessary to provide certain basic features of our website and app. Other cookies are required for web analytics or personalized advertising.

Legal basis: We use cookies that are not strictly necessary to provide certain basic features of our website and app only if you have given your prior opt-in consent.

Storage period: In general, all cookies we store on your device are automatically deleted after 2 months at the latest. Certain information is stored on your device permanently (e.g. local storage). You can manually delete all cookies at any time.

Recipients: Processor (Web Host: TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany).

Transfer of personal data outside the EU/EEA

Depending on your booking request (your chosen itinerary) the following may be recipients of your data and are located outside the EU/EEA:

• Wilderness Safaris Ltd, c/o Dale International Trust Company Limited, 7th Floor, Two Tribeca Tower, Tribeca Central Trianon, 72261, Mauritius
• African Bush Camps Limited, Suite 1, Staple House, Eleanor’s Cross, Dunstable, Bedfordshire, LU6 1SU, United Kingdom
• Natural Selection Safaris (Pty) Ltd, Unit E, Critech House, Stibitz Street, Westlake, Cape Town, 7945, South Africa
• Voetspore Car Rental, Corner of Lynnwood Road, Simon Vermooten Rd, Lynnwood, Pretoria, 0184, South Africa
• Sothern Eco Adventures, Boseja Ward, 0476 Maun, Botswana
• Safari Addicts, Plot 50311, Boseja Ward, Maun, Botswana

We only transfer your data to (i) countries for which the EU Commission has determined that they provide an adequate level of data protection or (ii) if we take measures to ensure that the respective recipient provides an adequate level of data protection (in particular by concluding EU Standard Contractual Clauses, “SCC”). With respect to all the above-mentioned recipients, we are providing for appropriate safeguards by entering binding SCC, enforceable by data subjects in the EEA. These clauses have been enhanced with additional safeguards, based on the guidance of the European Data Protection Board.

Transfer of data to supervisory authorities, courts and other third parties

We are subject to numerous legal regulations. In certain cases, we may be legally obliged to disclose your personal data to courts or other authorities upon their request. In any case, we will make sure that the protection of your data is maintained.

Right of access

You have the right to request access to your personal data and to obtain information, inter alia, on the purpose of processing, the categories of data concerned, from which source the personal data originate, the recipients of your data, the duration of storage, etc.

Right to rectification, erasure & restriction of processing

If we process inaccurate or incomplete personal data, you have the right to rectification or completion of such data. You may also request the deletion of the personal data which have been processed unlawfully. Please note that you may exercise these rights only in respect of inaccurate, incomplete or unlawfully processed data. If it is unclear whether your personal data is inaccurate, incomplete, or unlawfully processed you may request us to restrict the processing of your data until this issue has been resolved.

Please note that these rights complement each other which means that you can request us to either rectify or complete or delete your data.

Right to object

If we process your data based on our legitimate interest, you have the right to object to the processing of your personal data on grounds relating to your particular situation. If you exercise your right, we will ask you to provide your reasons. You further have the right to object where we process your personal data for direct marketing purposes (e.g. discount offers for our products and services similar to those you have already purchased).

Right to revoke consent

If we process your data based on your consent, processing will only take place in accordance with the purposes set out in the separate declaration of consent and to the extent you agreed therein. Any consent given may be revoked at any time with future effect (for example, you may object to the processing of your personal data for marketing and promotional purposes if you no longer consent to processing in the future).

Right to data portability

In certain cases, you have the right to receive your personal data processed by us in a structured, commonly used and machine-readable format (i.e. right to data portability). Where technically feasible, you may instruct us to transmit your data to a third party of your choice, unless data portability would require unreasonable efforts, affect the rights and freedoms of others or violate any legal obligations.

Right to appeal

If you have any concerns regarding data protection law, we hope that you will contact us first and we can address your concerns. However, despite all our efforts to ensure the protection and integrity of your data, you might remain dissatisfied. If you consider that we are unlawfully using your data, you may lodge a complaint with the Austrian Data Protection Authority.