Last Updated: 15 January 2025

1. Introduction

We at Bora Travel & Tours (“we,” “us,” “our”) respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, process, and store your personal data when you use our Website (boratravel.de), including information you provide via our contact form.

2. Data Controller

• Name: Bora Travel & Tours
• Business Registration Number: L81819010J
• Address: Rruga Myslym Shyri, Nr.84, kati i dytë, Tiranë, 1001, Albania
• Email: info@boratravel.de
• Phone: +355 692040020

For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, Bora Travel & Tours is the “Data Controller.”

3. Personal Data We Collect

• Contact Form Data: Name, Surname, Email, Phone Number, and any additional information you choose to share to inquire about or book our tours in Albania.
• Cookies & Tracking: We use cookies and similar technologies to enhance the user experience and to track usage patterns on our Website.

4. Purpose & Legal Basis for Processing

• Responding to Inquiries & Providing Services: We use the data you provide in the contact form to respond to your requests, plan tours, and offer related travel services. The legal basis is Contract Performance (Art. 6(1)(b) GDPR) and/or Legitimate Interests (Art. 6(1)(f) GDPR) where a direct request is made.
• Email Marketing (Opt-In Only): We may send marketing emails about our tours and offers only if you have explicitly opted in. The legal basis is Consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
• Cookies & Website Analytics: We use cookies to analyze website traffic and improve user experience. Where required, we obtain your consent (Art. 6(1)(a) GDPR). For essential cookies, the legal basis is Legitimate Interest (Art. 6(1)(f) GDPR).

5. Data Sharing & Transfers

• We do not sell or trade your personal data to third parties.
• We may share data with service providers (e.g., hosting providers) who help us operate our Website or communicate with customers, under strict data protection agreements.
• If data is transferred outside the European Economic Area (EEA), we ensure it’s done with adequate safeguards (e.g., Standard Contractual Clauses).

6. Data Retention

We keep your personal data for as long as needed to fulfill the purposes for which it was collected, or until you request deletion. For marketing emails, we retain data until you unsubscribe or otherwise withdraw consent.

7. Your Rights Under GDPR

You have the right to:

• Access the personal data we hold about you.
• Rectify any inaccurate or incomplete data.
• Erase your personal data (right to be forgotten), under certain conditions.
• Restrict or Object to our processing, under certain conditions.
• Data Portability, to receive your data in a structured, commonly used format.
• Withdraw Consent at any time (where processing is based on consent), without affecting the lawfulness of processing based on consent before its withdrawal.
• Lodge a Complaint with a supervisory authority if you believe we are violating data protection laws.

8. Cookie Usage

We use both essential and non-essential cookies. Essential cookies enable core functionality (e.g., security). Non-essential cookies (e.g., analytics or marketing) are used only with your consent, if required by law. You can control cookies via your browser settings or any cookie banner provided.

9. Data Security

We implement SSL encryption and industry-standard security measures to protect your data from unauthorized access, alteration, or destruction.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. Your continued use of the Website after such changes constitutes your acceptance of the updated policy.

11. Contact Us

For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact us:

Phone: +355 692040020

Email: info@boratravel.de