Privacy policy

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Principles of data processing

Personal data means any information that can directly or indirectly identify a person. We process only the data needed for the relevant purpose and delete it once that purpose and any statutory retention obligations no longer apply.

We do not use solely automated decision-making, including profiling, and we do not sell personal data.

Hosting and server log data

This website is hosted by dogado GmbH, Antonio-Segni-Straße 11, 44263 Dortmund. The hosting provider processes data on our behalf where necessary to provide and secure the website.

When a page is accessed, the following information in particular may be processed in server log files:

• IP address of the accessing device,
• date and time of access,
• page or file requested and amount of data transferred,
• referrer URL, browser type, operating system and hostname.

Log data is deleted when it is no longer required for operational or security purposes and no legal obligations or legitimate grounds require continued retention.

Contact, trip enquiries and services

If you contact us by email or telephone, we process your contact details and the information in your message to handle your enquiry and answer any follow-up questions.

If your enquiry concerns a trip, an offer or a contract, processing is carried out to take pre-contractual steps or perform the contract under Article 6(1)(b) GDPR. For general enquiries, processing is based on our legitimate interest in reliable communication under Article 6(1)(f) GDPR.

For paid services, we may also process address, booking, invoicing and payment data. Contract and accounting data is retained in accordance with commercial and tax-law requirements. Other contact data is deleted once the enquiry has been fully resolved, unless a retention obligation or legitimate reason requires otherwise.

Mailchimp newsletter

If you subscribe to our newsletter, the link on our website takes you to an external registration page operated by Mailchimp . Mailchimp is provided by The Rocket Science Group LLC d/b/a Mailchimp, an Intuit group company.

Data processed and purpose

For registration, we process your email address and any additional information you provide voluntarily. The time of registration and confirmation, IP address and technical delivery data may also be stored. This data is used to send the newsletter, document proper registration and, where enabled, evaluate delivery technically.

Consent and double opt-in

Registration is completed through a confirmation email (double opt-in). Your address is added to the active mailing list only after confirmation. The legal basis for registration and delivery is your consent under Article 6(1)(a) GDPR.

Withdrawal and unsubscribe

You may withdraw your consent at any time with effect for the future. Use the unsubscribe link at the end of any newsletter or email info@middleeastexcursion.com. After unsubscribing, your address is removed from the active mailing list. We may retain data documenting previous consent, based on our legitimate interests, for as long as necessary to defend against possible claims.

Performance measurement

Where newsletter performance measurement is enabled, Mailchimp may use individualised links or small image files to determine whether a message was delivered or opened and which links were clicked. This analysis helps improve our newsletters and is carried out only within the scope of your consent.

Processing outside the EU

Mailchimp may process data in the United States and other countries. Under Mailchimp’s Data Processing Addendum, transfers to the United States rely on the EU–US Data Privacy Framework and, where required, the European Commission’s Standard Contractual Clauses.

Google Fonts

To display fonts consistently, the website loads font files through Google Fonts. Your browser establishes a connection to Google servers. Your IP address, browser and device information, the page requested, time and referrer URL may in particular be transmitted.

The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Processing by affiliated companies in third countries, particularly the United States, cannot be ruled out.

Processing is based on our legitimate interest in presenting the website consistently and legibly under Article 6(1)(f) GDPR. Further information is available in the Google privacy policy.

Route map with Leaflet and OpenStreetMap

The Route page contains an interactive map. The Leaflet map library is loaded through unpkg.com ; map tiles are retrieved from servers operated by the OpenStreetMap Foundation .

When the map loads, technically required connection data such as IP address, browser and device information, time, referrer URL and requested map tiles is transmitted to the relevant servers. Our map does not request your device location.

The integration is based on our legitimate interest in presenting the itinerary clearly under Article 6(1)(f) GDPR. Further information is provided in the OpenStreetMap Foundation privacy policy.

External links and social networks

Our website contains ordinary links to external services including Facebook, Instagram, X/Twitter, Mailchimp and Flickr. No social media plugins are embedded. Only when you click an external link do you leave our website, after which the provider may process connection and usage data under its own privacy terms.

The respective provider is responsible for the content and data processing on linked services.

Cookies and audience measurement

We currently use no analytics, advertising or profiling services of our own on this website. Externally loaded content or linked pages may use cookies or similar technologies under the relevant provider’s terms. This applies in particular to the external newsletter registration page and the functions provided there.

SSL/TLS encryption and data security

This website uses an encrypted HTTPS connection, helping protect transmitted data from unauthorised interception. We also take appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. Complete protection during internet transmission cannot, however, be guaranteed.

Your data protection rights

Subject to the statutory requirements, you have in particular the following rights:

• access to information about the processing of your data (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure of your data (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• objection to processing based on legitimate interests (Art. 21 GDPR).

You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, simply email info@middleeastexcursion.com. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is in particular the Brandenburg Commissioner for Data Protection and Access to Information.

Changes to this privacy policy

We update this privacy policy when the website, services used or legal requirements change. The current version published on this page applies.