Privacy policy

1. Controller

The controller for the processing of personal data on this website is:

Tour Ghada
Sheraton Road
Hurghada, Red Sea
Egypt
Owner: Karem Elshazly
Phone: +20 114 211 4711
Email: kontakt@tour-ghada.com

We have not appointed a data protection officer. For a business of our size there is no obligation to do so.

2. What this is about

We process personal data only as far as that is necessary to run the website and to arrange tours. Below you can read which data that is, why we process it, on what legal basis, how long we keep it and what rights you have.

3. Visiting the website and server log files

Every time a page is called up, our host automatically stores technical data: IP address, date and time, the page requested, the amount of data transferred, a message about whether the request succeeded, the browser type and operating system, and the page visited before.

Purpose: delivering the page, stability, security and defence against attacks.
Legal basis: Article 6(1)(f) GDPR, legitimate interest in secure operation.
Retention: usually seven days, then deleted automatically.

Hosting provider: The website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. We have a data processing agreement with the provider under Article 28 GDPR.

4. Cookies and storage in your browser

This website sets no cookies. None for analytics, none for advertising, and none of the technically necessary kind either: there is no login and no shopping basket that would need to keep a session.

Only one thing is stored, and only if you trigger it yourself: your shortlist. When you tap the heart on a tour, your browser saves the name of that tour in local storage so the list is still there on your next visit. This never leaves your device and never reaches us. You can clear it by unticking the hearts or by clearing site data in your browser.

Legal basis: Section 25(2) no. 2 TDDDG. You explicitly asked for this storage, so it needs no consent.

5. Contact form and email

If you write to us through the form or by email, we process your name, email address, the language you would like a reply in and the content of your message.

Purpose: dealing with your enquiry and answering follow-up questions.
Legal basis: Article 6(1)(b) GDPR for enquiries about a specific booking, otherwise Article 6(1)(f) GDPR.
Retention: six months after the enquiry is finally dealt with, unless we are required by law to keep it longer.

6. Booking a tour

For a booking we process: first and last name, email address, phone number, hotel and pickup place, preferred date, the number and ages of the participants, and any special notes you give us.

Purpose: arranging and running the tour, booking confirmation, coordinating the pickup.
Legal basis: Article 6(1)(b) GDPR, performance of the contract.
Retention: for the duration of the contract, then in line with commercial and tax retention periods.

Health information: if you voluntarily give us health information, about fitness to dive, pregnancy or food allergies for example, we process it only for your safety and only with your explicit consent under Article 9(2)(a) GDPR. You can withdraw that consent at any time.

7. Passing data to the operators on site

We arrange tours run by local businesses. So that someone can collect you and welcome you on board, we pass your name, the number of people, your hotel and the pickup time to the relevant operator. Without passing that on, the tour cannot be run.

Legal basis: Article 6(1)(b) GDPR.

Important: these businesses are in Egypt. There is no adequacy decision by the European Commission for Egypt. The transfer is therefore based on Article 49(1)(b) GDPR, because it is necessary to perform the contract you have asked for. We pass on only the data needed to run the tour.

8. Fonts

The website loads the Onest typeface from our own server. No connection to Google is made and no IP address is passed to third parties.

9. No advertising or analytics tools

At present we use no web analytics, no tracking and no advertising pixels. Should that change, we will ask for your consent first and add it to this text.

10. Legal bases at a glance

Processing	Legal basis
Running and securing the website	Art. 6(1)(f) GDPR
Enquiries and contact	Art. 6(1)(b) or (f) GDPR
Booking and running a tour	Art. 6(1)(b) GDPR
Health information	Art. 9(2)(a) GDPR
Transfer to Egypt	Art. 49(1)(b) GDPR
Keeping invoices	Art. 6(1)(c) GDPR

11. Your rights

You have the right to:

• access to the data stored about you, Article 15 GDPR
• rectification of incorrect data, Article 16 GDPR
• erasure, as far as no retention obligation stands in the way, Article 17 GDPR
• restriction of processing, Article 18 GDPR
• data portability, Article 20 GDPR
• object to processing based on legitimate interests, Article 21 GDPR
• withdraw consent with effect for the future, Article 7(3) GDPR

An email to kontakt@tour-ghada.com is enough for all of this. We reply within a month.

12. Right to complain

If you believe that the processing of your data breaches data protection law, you may lodge a complaint with a supervisory authority.

We have no establishment in the European Union. The authority responsible is therefore the one of the country where you habitually live or work, or of the place where the alleged breach happened.

13. Obligation to provide data

The details you give when booking are needed to perform the contract. Without them we cannot arrange the tour. Everything else is voluntary.

14. No automated decision-making

We use no automated decision-making and no profiling within the meaning of Article 22 GDPR.

15. Changes to this policy

We adapt this policy when the processing changes, because new services are added for example. The version published on this page is the one that applies.