Privacy policy

Controller

Nebu Reisen
Rotes Meer, Hurghada, Ägypten
Phone & WhatsApp: +20 115 007 7707
Email: info@nebu-reisen.de

Data we process

• Technical access data: IP address, time, requested URL, referrer, device, browser and operating-system information, and security logs.
• Inquiry and contact data: name, email, WhatsApp/telephone number, travel date, hotel or accommodation, departure point, passenger numbers, children’s ages, language, messages and consent record.
• Booking and account data: billing details, booked service, travellers, price, payment plan, order number, status and account information.
• Payment data: payment status, amount, currency and transaction reference. Full card or bank details are normally processed directly by the payment provider.
• Language and consent preferences: chosen language, approximate country from technical headers and locally stored consent choices. We do not access precise GPS location.

Purposes and lawful bases

• Operating, securing and troubleshooting the website: our legitimate interest in a secure, functional service.
• Answering inquiries and pre-contract guidance: steps taken at your request before entering a contract.
• Bookings, service delivery, accounts and payments: performance of a contract and pre-contract steps.
• Invoices, tax, commercial and evidential obligations: compliance with legal obligations.
• WhatsApp, email and telephone communication: contract performance, your request or consent where required.
• Optional analytics, marketing or external media: only with consent. You can withdraw it at any time through “Cookie settings”.

Recipients and service providers

Depending on how you use the site, access is limited to providers that need it: hosting and infrastructure providers (Cloudways and its infrastructure partners), WordPress/WooCommerce support, email providers, Stripe for payments, Meta/WhatsApp for communications you choose, Cloudflare Turnstile for spam protection, and local guides, transport companies, airlines, ticket providers or other suppliers needed for the booked service. Payment and communication providers also process some data as independent controllers under their own privacy notices.

International transfers

Our excursions are delivered in Egypt, and providers may process data in the United Kingdom, EU, United States or other countries. Where data-protection law requires it, transfers rely on an adequacy decision, standard contractual clauses, necessity for contract performance or another lawful safeguard. We limit transferred data to what is necessary.

Retention

We keep data only while needed for its purpose, contract performance, handling claims or mandatory record-keeping. Uncompleted inquiries are periodically deleted or anonymised when no further response is expected. Booking, payment and invoice records remain for the applicable statutory periods. Account data remains until the account is deleted unless law requires longer storage. Security logs are normally retained only for a short period.

Your rights

Subject to legal conditions, you may request access, correction, erasure, restriction, portability and object to processing. You may withdraw consent at any time for the future. You may also complain to the data-protection authority responsible for you or us. Email info@nebu-reisen.de to exercise a right. We may request reasonable proof of identity.

WhatsApp and Meta

If you choose WhatsApp, your telephone number, messages and necessary booking or inquiry details are processed through WhatsApp. WhatsApp/Meta’s own privacy terms also apply. Use email if you do not want this processing. Internal team notifications sent through Meta contain only information needed to handle the request.

Payments through Stripe

Card payments and deposits, where offered, are handled through Stripe. Stripe receives information needed for payment processing, fraud prevention and legal checks. Nebu Reisen does not store full card details.

Security, children and changes

We use appropriate technical and organisational security measures. Online bookings may be placed only by adults; information about travelling children is used only to plan and deliver the booked service. We update this policy when services or law change. The current version is always available here.

Data deletion

You may request deletion of personal data that is no longer required by emailing info@nebu-reisen.de. Include your booking or inquiry reference where available. Mandatory record-keeping and evidential obligations remain unaffected.