Privacy policy

1. General information on data protection

The following notes provide a basic overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified (e.g. name, address, email address, or user behaviour).

Who is responsible for data collection on this website?

Data processing on this website is carried out by the operator of this website, who is also the responsible party in the sense of the applicable data protection regulations. In this case, this is:

AYANNA – guided tours and more
Marianne Deistler
Am Stadtpark 93
D-90409 Nürnberg, Germany

Phone: +49 (0) 911 3650135
Email: info@ayanna-guided-tours.com

The operator of these pages takes the protection of your personal data quite seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

What data do we collect and how?

Log files:

Each time you access this website, information is automatically sent to our website server by the browser used on your terminal device. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until automated deletion:

– IP address of the requesting computer

– Date and time of access,

– Name and URL of the file accessed

– Website from which the access is made (referrer URL)

– Browser used and, if applicable, the operating system of your computer

We host our website with IONOS SE (Elgendorfer Str. 57, 56410 Montabaur) and have signed a order processing contract with this provider. This is a contract required by data protection law and ensures that this provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

The above data is processed by us in order to ensure a user-friendly smooth connection of the website, to evaluate the system security and stability, and for other administrative purposes.

An evaluation of the data to draw conclusions about your data or for marketing purposes does not take place in this context.

2. Data collection on this website with your consent

If you would like to contact us, you are welcome to use the contact form available on the website, send us an email, or simply call us. Depending on the communication channel, different data will be collected by us.

Contact form

If you send us inquiries via contact form, your data from the inquiry form, including the contact data you entered there, will be stored by us for the purpose of processing the inquiry. In the case of any follow-up questions. They will also be transmitted to our local guides/partners in South Africa so that they can send you individual and non-binding tour offers. The data will then be passed on only after you give consent.

Inquiry by email and telephone

If you contact us via contact form, email, or telephone, the data you send us in this way will be stored and processed by us for the purpose of processing your request. With your consent, it will be transmitted to our local guides/partners in South Africa.

The processing of data provided via contact form, by email, or telephone is based on Art. 6, para. 1, lit. b GDPR or, if the contact is made for purposes other than the initiation or performance of a contract or the implementation of pre-contractual measures, on the basis of your consent (Art. 6, para. 1, lit. a GDPR). The consent can be revoked at any time. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). The mandatory legal provisions – in particular, the retention periods – shall remain unaffected.

We would like to point out that data transmission over the Internet (e.g. communication by email) may contain security gaps. A complete protection of the data against access by third parties is not possible.

3. General notes and mandatory information

Further legal basis for the processing of personal data

The legal bases for the collection and processing of personal data when visiting our website are already listed above. The following legal basis must also be taken into consideration when processing personal data:

· When processing personal data that is necessary for the performance of a contract to which the data subject is the party, Art. 6, para. 1, lit. b GDPR shall be the legal basis for the processing. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

· If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6, para. 1, lit. c GDPR is the relevant legal basis for the processing.

· If processing is necessary to protect a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedom of the data subject do not override the former interest, this processing is based on the legal basis in Art. 6, para. 1, lit. f GDPR.

Disclosure of data

A transfer of your personal data to third parties for purposes other than those listed below does not take place.

We will only share your personal information with third parties if:

· you have given your express consent in accordance with Art. 6, para. 1, sentence 1, lit. a GDPR

· the disclosure is necessary in accordance with Art. 6, para. 1, sentence 1, lit. f GDPR for the assertion, exercise, or defence of legal claims, and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

· in the event that there is a legal obligation for disclosure in accordance with Art. 6, para. 1, sentence 1, lit. c GDPR

· this is legally permissible and necessary in accordance with Art. 6, para. 1, sentence 1, lit. b GDPR for the processing of contractual relationships with you

Storage period and data deletion

The collected personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. However, further storage may take place if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the responsible party is subject. Blocking or deletion of the data takes place when a storage period prescribed by the aforementioned standards expires unless further storage of the data is necessary for the conclusion or fulfilment of a contract.

Data security

In order to prevent unauthorised access to your personal data by third parties, we use a state-of-the-art encryption process. You can recognise this by the display of the key or lock symbol in the status bar of your browser. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties.

Your rights as a data subject

If your personal data is processed, you are the data subject in accordance with the GDPR, and you have the following rights against the responsible party:

· in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the right to rectification, erasure, restriction of processing, or objection, the right of complaint, the origin of your data if it has not been collected by us as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details

· in accordance with Art. 16 GDPR, the right to immediately demand the correction of incorrect or completion of your personal data stored by us;

· in accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us unless the processing is necessary in order to be able to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise, or defence of legal claims

· in accordance with Art. 18 GDPR, the right to the restriction of the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful but you object to its erasure and we no longer require the data but you need it for the assertion, exercise, or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR

· in accordance with Art. 20 GDPR , the right to data portability (i.e. the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller)

· in accordance with Art. 7, para. 3 GDPR, the right to revoke your consent at any time.. This has the consequence that we may no longer continue the data processing based on this consent in the future

· in accordance with Art. 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of our company headquarters.

In addition, if your personal data is processed on the basis of legitimate interests in accordance with Article 6, para. 1, sentence 1, lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDP, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object; this is implemented by us without specifying a particular situation.

You can assert these rights against us at any time. To do so, please contact us directly. The contact details can be found at the beginning of this privacy policy.