Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you could be personally identified.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Controller" section of this privacy policy.

How do we collect your data?
Your data is collected in part by you providing it to us — for example, data you enter into a contact form. Other data is collected automatically or with your consent when you visit the website by our IT systems (e.g. browser type, operating system, time of page visit).

How do we use your data?
Some data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other service requests.

What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. You can withdraw consent to data processing at any time. You also have the right to request restriction of processing of your personal data and the right to lodge a complaint with the competent supervisory authority.

2. Hosting

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. When you visit our website, Vercel automatically collects and stores information including IP addresses, access times, browser type, and referring URLs. This is necessary for the technical provision of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). We have concluded a Data Processing Agreement (DPA) with Vercel.

3. General Information & Mandatory Disclosures

Controller

The controller responsible for data processing on this website is:

Apex Marketing Automation EOOD
EIK: 207453806
Sofia, Bulgaria
Email: legal@elsewheretrips.com

Storage Duration

Unless a specific storage period is stated, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. tax or commercial retention periods).

SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser.

4. Data Collection on This Website

Cookies

Our website uses cookies — small data packets stored on your device. Session cookies are deleted after your visit; persistent cookies remain until deleted. You can configure your browser to inform you about cookies and block them selectively. Disabling cookies may limit website functionality. Legal basis for necessary cookies: Art. 6(1)(f) GDPR.

Server Log Files

The website provider automatically collects and stores information in server log files transmitted by your browser: browser type and version, operating system, referrer URL, hostname, time of request, IP address. This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR.

Contact by Email

If you contact us by email, your message including all personal data (name, inquiry) will be stored and processed for the purpose of handling your request. Legal basis: Art. 6(1)(b) GDPR (contract) or Art. 6(1)(f) GDPR (legitimate interest).

Newsletter

If you subscribe to our newsletter, we require your email address and confirmation of consent. We use this data exclusively to send the requested information. You can unsubscribe at any time via the unsubscribe link in every newsletter. Legal basis: Art. 6(1)(a) GDPR.

Clerk (User Authentication)

We use Clerk (Clerk Inc., 660 King Street Unit 345, San Francisco, CA 94107, USA) for user registration and login. Clerk processes personal data including email address, IP address, device data, and session information on US servers. Clerk is certified under the EU-US Data Privacy Framework (DPF) since February 2024. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR. More info: https://clerk.com/privacy

Unsplash (Images)

This website uses images provided by Unsplash (Unsplash Inc., 500 rue Notre-Dame Ouest, Montréal, QC H2Y 1T9, Canada). When images are loaded, your IP address may be technically transmitted to Unsplash servers. Canada is recognized by the EU Commission as providing an adequate level of data protection. Legal basis: Art. 6(1)(f) GDPR. More info: https://unsplash.com/privacy

GetYourGuide (Affiliate Program)

This website participates in the GetYourGuide affiliate program (GetYourGuide Deutschland GmbH, Sonnenburger Str. 73–74, 10437 Berlin, Germany). We embed links to GetYourGuide through which we may earn a commission on bookings. GetYourGuide uses cookies to track the origin of bookings. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in determining affiliate commission). More info: https://www.getyourguide.com/privacy_policy

5. Your Rights

You have the right to: access your stored personal data (Art. 15 GDPR) · rectification of inaccurate data (Art. 16 GDPR) · erasure of your data (Art. 17 GDPR) · restriction of processing (Art. 18 GDPR) · data portability (Art. 20 GDPR) · object to processing (Art. 21 GDPR) · lodge a complaint with a supervisory authority (Art. 77 GDPR).

To exercise your rights, contact: legal@elsewheretrips.com