Privacy Policy

Please read our Private Policy carefully, this is a legal document. This policy explains our privacy practices for www.tovatraveltours.com, also named “Site”.

Should you have any questions, please email us: tovatraveltours@gmail.com.

Responsible according to Data Protection Act:

tova travel tours
in CONTU Verlag
Katharina Julia Müller
Pestalozzistr. 25
22305 Hamburg
Email: tovatraveltours@gmail.com

VAT Identification Number: DE346583473
according to §27a German Value Added Tax Act

Introduction
tova travel tours, herein also called “tova travel” and “We” or “Us” or “Our(s)”, is committed to our client’s privacy and security and to taking steps designed to secure your personal and financial information, which align with the policy of DSGVO that apply in Germany. We strongly believe your private details should be kept private and when you share personal information with us, we will make all reasonable steps to keep your details secure and private. We are committed to ensuring that your personal information is protected or only shared what is needed, for instance for Third Parties when needed. We outlay these events below.

Please note, this policy does not apply to the practices of Third Parties, who may also collect or receive data in connection with your use of the Services. Third Parties Policies are beyond our control.

We do not or will not sell your private information and condemn any of these practices.

tova travel tours understands that privacy is important to you and wants your experience when dealing with us to be as enjoyable and safe as possible. This policy describes and outlines why and how we, tova travel tours, handle your personal information, as well as when you use our website and services.

1. The type of personal information we collect and hold
tova travel tours does not collect sensitive information about You. Depending on the products and service You ask Us to provide, we will be required to collect some sensitive information when we are providing you with specialised services.

We require a variety of information from You to provide the Services to You when You visit our Site, make purchases, or interact with Us on social media. The type of personal information, tova travel tours asks for will depend on which of the travel products with tova travel tours you book on and the type of product or service you choose.

If we are not able to collect personal information about You we may not be able to provide You with the products, services or assistance You require. The collection, use or disclosure of Your personal information is needed to provide these.

By accepting this Privacy Policy, You are specifically consenting to Our collection of the data described below, to Our use of the data, to the processing of this data, and to Our sharing of the data with third-party processors as needed for Our legitimate business interests.

The information We collect may include: 

Personal Data
Personal Data is information that can be used to identify You specifically, including, for example, Your name, shipping address, e-mail address, telephone number, passport number, or demographic information like Your age, gender, or hometown. You consent to giving Us this information by providing it to Us voluntarily on Our website or any mobile application. You provide some of this information when You register with or make purchases from Our website. You may also provide this information by participating in various activities associated with Our site, including responding to blogs, contacting Us with questions, or participating in group training. Your decision to disclose this data is entirely voluntary. You are under no obligation to provide this information, but Your refusal may prevent You from accessing certain benefits from Our website or from making purchases.

Derivative Data
Derivative data is information that Our servers automatically collect about You when You access Our website, such as Your IP address, browser type, the dates and times that You access Our website, and the specific pages You view. If You are using a mobile application, Our servers may collect information about Your device name and type, Your phone number, and other interactions with Our application. Derivative data may also include data collected by third-party service providers, such as advertising and analytics providers, and may include cookies, log data, or web beacons. Cookies are discussed more fully below. Derivative data collected by third-party service providers generally does not identify a specific individual. 

Financial Data
Financial data is data that is related to Your payment method, such as credit card or bank transfer details. We collect financial data in order to allow You to purchase, order, return, or exchange products or services from Our website and any related mobile apps. Most financial data is transferred to Our payment processor, Stripe and Paypal or future payment service we may work with, which will then be listed here, too, and You should review these processors’ Privacy Policy to determine how they use, disclose, and protect Your financial data.

Stripe’s Privacy Policy: https://stripe.com/privacy
Paypal’s Privacy Policy: https://www.paypal.com/us/webapps/mpp/ua/privacy-full

Social Network Data
We may access personal information from social networking sites and apps, including Facebook, Instagram, LinkedIn, Threads, X, or other social networking sites or apps not named specifically here, which may include Your name, Your social network username, location, e-mail address, age, gender, profile picture, and any other public information. If You do not want Us to access this information, please go to the specific social networking site and change Your privacy settings.

Mobile Device Data
If You use Our website via a mobile device or app, We may collect information about Your mobile device, including device ID, model and manufacturer, and location information.

Mobile Apps Data
If You connect to Us using a mobile application, We may request geolocation information, which includes permission to track Your mobile device, in order to provide You with location based services. We may also request access to certain features on Your device, including Your device’s calendar, camera, contacts, social media accounts, Bluetooth, and storage. We may also send You “push notifications” regarding Your account or Our mobile application. If You wish to change Our access to any of this information, You may do so by changing Your device settings.

2. How we use your data/ information
Your information allows Us to offer You certain products and services, including the use of Our website, to fulfill Our obligations to You, to customize Your interaction with Our company and Our website, and to allow Us to suggest other products and services We think might interest You. We generally store Your data and transmit it to a third party for processing. However, to the extent We process Your data, We do so to serve Our legitimate business interests (such as providing You with the opportunity to purchase Our Services and interact with Our website or mobile app).

1. Create and administer Your account, and
2. Deliver any products or services purchased by You to You, and
3. Correspond with You, and
4. Process payments or refunds, and
5. Contact You about new offerings that We think You will be interested in, and
6. Interact with You via social media, and
7. Send You a newsletter or other updates about Our company or website, and
8. Deliver targeted advertising, and
9. Request feedback from You, and
10. Notify You of updates to Our product and service offerings, and
11. Resolve disputes in the event, and
12. Analyze trends to improve Our website and offerings, and
13. Administer contests or giveaways, and
14. Provide Your data to health services in the event, and
15. Compile anonymous statistical data for Our own use or for a Third Party’s use, and
16. Assist law enforcement as necessary, and
17. Prevent fraudulent activity on Our website or mobile app

3. Why we use your data
The information We collect and store is used primarily to allow Us to offer Our Services. In addition, Tova Travel Tours may collect, use, and process Your information based on the following grounds:

We may use and process Your data for Our legitimate business interests, which include, among other things, communicating with You, improving Our goods or services, improving Our website, and providing You with the information or products that You have requested.

Consent: We may use Your data, or permit selected Third Parties to use Your data, based on Your consent to Our use and sharing of that data. You may withdraw Your consent at any time, but doing so may affect Your ability to use Our website or other offerings.

Please note that we cannot be hold liable for Third Party’s Policies. 

Performance of a Contract: We may use and process Your information to enter into a contract with You and to perform Our contractual obligations to You.

As required by law: We may also use or process Your data as required for Us to comply with legal obligations.

4. Why we disclose your information

We may share Your information with Third Parties in certain situations. In particular, We may share Your data with Third Party processors as needed to serve Our legitimate business interests, which include administration of Our website, administration of Your account, entering into contracts with You, communicating with You, taking orders for goods or services, delivering, identifying trends, protecting the security of Our company and website, and marketing additional goods and services to You. The legal basis for Our disclosure of Your data is both Your Consent to this Privacy Policy and Our own right to protect and promote Our legitimate business interests.

Please note that we cannot be hold liable for Third Party’s Policies. 

The following are specific reasons why We may share Your information:

Third Party Processing: We may disclose Your information to third parties who assist Us with various tasks, including payment processing, hosting services, e-mail delivery, communications, and customer service. We may not always disclose these third-party processors if not required by law. We do not authorize them to use or disclose Your personal information except in connection with providing Our company with their services.

By Law: We may share Your data as required by law or to respond to legal process, including a subpoena, or as necessary to protect the rights, property, and safety of others. This includes sharing information with other parties to prevent or address fraud and to avoid credit risks. 

To Protect Our Company: We may use Your information to protect Our company, including to investigate and remedy any violations of Our rights or policies. We may also disclose Your information as reasonably necessary to acquire and maintain insurance coverage, manage risks, obtain financial or legal advice, or to exercise or defend against legal claims. 

Business Transfers: In the unlikely event Our company engages in a merger, acquisition, bankruptcy proceedings, dissolution, reorganization, or similar transaction or proceeding, We may transfer or share Your data as part of that proceeding. In such transitions, customer information is one of the business assets that is acquired by a third party. You acknowledge that such business transfers may occur and that Your personal information can continue to be stored, used, or processed as otherwise set forth in this privacy policy.

Interaction With Others: If You interact with others on Our website or mobile app, such as participating in a group chat or a group online course, other users may have access to some of Your data, including Your name, profile picture, and Your history of interaction with Our website, such as prior comments or posts.

Other Third Parties: We may share information with other future Third Parties for the purpose of conducting general business analysis. In this case, we will list them here, too.

External Links: Our website may include hyperlinks to other websites not controlled by Us. We suggest You exercise caution when clicking on a hyperlink. Although We use reasonable care in including a hyperlink on Our own web page, We do not regularly monitor the websites of these third parties and are not responsible for any damage or consequences You suffer by using these hyperlinks. We are not bound by the Privacy Policies of any third-party website that You access by a hyperlink, nor are they bound by ours. We encourage You to read the Policies of those third-party websites before interacting with them or making purchases. They may collect different information and by different methods than We do.

Other Purposes: We may disclose Your personal data as necessary to comply with any legal obligation or to protect Your interests, or the vital interests of others or Our company.

5. Cookies
Our websites rely on “cookies” to provide a number of services to you. A cookie is a piece of data, small text files sent to Us by Your computer, which a website sends to your browser and which is then stored on your computer or other internet enabled device. Cookies are generally one of two types, a session cookie or a persistent cookie. A session cookie is a temporary cookie that is placed on the device and remains until you leave one of our websites. A persistent cookie will remain on your device for a period of time or duration specified in the cookie despite you leaving our websites.

Cookies generally allow our websites you are browsing to interact more efficiently with your device. Tova Travel Tours uses cookies to collect and use information for a range of purposes, including; to maintain and improve the operation of our websites; track user preferences and product requirements to customise our websites and target and improve advertising or marketing relevance. We may also have an arrangement with third parties who may use our cookies to improve the relevance of our advertising to you on third party websites. You are able to use your browser settings to manage cookies. These settings may include deleting all or some cookies, not accepting any cookies or being notified when cookies are being used.

Upon Your first visit on Our website, You will be asked to “consent to cookies.” If You wish to disable cookies, You may do so through Your individual browser options. However, this may affect Your ability to use or make purchases from Our website. By continuing to use Our website and not disabling cookies on Your browser, You are consenting to Our use of cookies in accordance with the terms of this policy.

We may use any or all of the following types of cookies:

Essential Cookies: These cookies help Us run Our website and improve Your experience with Our website. These cookies may allow content to load more quickly or allow You to access “members only” or repeat-users sections of Our website.

Functionality Cookies: These cookies allow Us to remember Your preferences from earlier visits to Our website, including login information, so that You do not have to input the same information multiple times.

Social Media Cookies: These cookies allow Us to record when You have engaged with a social media tool while visiting Our website. For example, We may record that You have “liked” a certain aspect of Our website. The social media application may also share data with Us that You have allowed it to share. If You wish to change Your social media sharing settings, please visit the privacy settings of the social media network.

Advertising Cookies: We may work with third-party advertising partners who collect information about Your browsing habits on Our website in order to later display a relevant ad about Our services when You are on a third-party site such as a social media platform. These cookies may also allow Us to access Your location.

We may also partner with Third Party analytic companies, including Squarespace Analytics and Google Analytics. The analytic companies may also use cookies (described above) or other tracking technologies to analyze visitors’ use of Our website or mobile app to determine the popularity of the content, and better understand online activity. We do not transfer personal information to these third-party vendors. However, in order to access Our website, You must consent to the collection and use of Your information by these third-party analytic companies. You should review their Privacy Policy and contact them directly if You have questions. If You do not want any information to be collected and used by tracking technologies, visit the Network Advertising Initiative Opt-Out Tool or Digital Advertising Alliance Opt-Out Tool.

Google Analytics: You can opt-out of having Your activity on Our website made available to Google Analytics by installing the Google Analytics opt-out browser add-on. This add-on prevents Google Analytics from retrieving information about Your visits to Our website. Please visit https://policies.google.com/privacy for further information.

Meta: You can opt-out of Meta’s interest-based ads by visiting:
https://www.facebook.com/help/568137493302217
https://www.facebook.com/full_data_use_policy

6. How we process your information/ data
For the most part, We do not process Your information in-house, but give it to third-party processors for processing. For example, when PayPal takes Your payment information, they are a third-party processor. They process Your payment and remit the funds to Us. So in many instances, it will be necessary for Us to transmit Your information to a third-party processor, as We do not have the capability to perform these functions. More detail on third-party processing is detailed below.

However, We may, from time to time, process Your data internally. The legal basis for this processing is both Your consent to the processing, Our need to conduct Our legitimate business interests, and to comply with legal obligations. Our purposes in processing this information, if We do, is to administer, maintain, and improve Our website and offerings, to enter into contracts with You, to fulfill the terms of those contracts, to keep records of Our transactions and interactions, to be able to provide You with goods and services, to comply with Our legal obligations, to obtain professional advice, and to protect the rights and interests of Our company, Our customers (including You), and any third parties. We may process the following data:

Data associated with Your account, such as Your name, address, e-mail address, and payment information. 

Data about Your usage of Our website, such as Your IP address, geographical information, and how long You accessed Our website and what You viewed.

Data related to Your personal profile, such as Your name, address, profile picture, interests and hobbies, or employment details.

Data that You provide Us in the course of using Our services.

Data that You post on Our website, such as comments or responses to blogs.

Data that You submit to Us when You make an inquiry regarding Our website or offerings.

Data related to Your transactions with Us, including Your purchase of Our goods or services. This information may include contact details and payment information.

Data that You provide to Us when You subscribe to Our emails or newsletters, including Your e-mail address and contact information.

Data that You submit to Us via correspondence, such as when You e-mail Us with questions.

Any other data identified in this policy, for the purpose of complying with Our legal obligations, or to protect the vital interests of You or any other natural person.

7. How We handle international data
Our website is hosted by servers located in Germany. Therefore, if You reside outside Germany, some of Your data will be transferred internationally to and stored on those servers. In addition, We may use Third Party processors (including payment processors) and subcontractors located in United States of America and Germany. We use all reasonable methods to protect the safety of Your data during transfer, including hosting Our website on reputable servers and engaging reputable third-party processors. By using this site and providing Us with information, You consent to this transfer, processing, and storage of Your information in Germany, or United States of America. In Germany, DSGVO applies, which strictly states how Your date is protected. The privacy laws in other countries may differ.

We may transfer data that We collect to locations outside of Our headquarters for processing or storing, and the data may be processed by Our staff or by third-party processors. For example, We may engage third parties to fulfill orders. By submitting Your personal data, You agree to this transfer, storing, and processing. We take all reasonable steps to make sure Your data is treated securely and in conformity with this Privacy Policy.

Data that is provided to Us is stored on secure servers. Payment information and other sensitive data will be encrypted to ensure its safety.

The transmission of data via the internet is never completely secure, and We cannot guarantee the security of data that is sent to Us electronically. Your transmission of data to Us is at Your own risk.

Where data that You have transmitted to Us is password protected, You are responsible for keeping the password confidential. You are exclusively responsible for any breaches of Your data that results from Your own disclosure of or failure to protect Your password.

Customer data outside the U.S. may be transferred to Our website servers and/or third-party processors or subcontractors that are located in Germany or the United States of America.

We use Squarespace, which actively participate(s) in the U.S. Privacy Shield framework. The E.U. has determined that companies participating in the U.S. Privacy Shield have adequate safeguards in place to protect customer data.

8. How we secure Your data
We take all reasonable steps to protect Your personal data and keep Your information secure. We use recognized online secure payment systems and implement generally accepted standards of security to protect against personal data loss or misuse. However, no security measure is foolproof, and no method of data transmission can be guaranteed against interception or misuse. We cannot guarantee complete security of any information You transmit to Us.

By consent to this Privacy Policy, You acknowledge that Your personal data may be available, via the internet around the world. We cannot prevent the use or misuse of Your data by other parties, it may be beyond our control.

9. How we retain Your data
We retain personal data as long as it is needed to conduct Our legitimate business purposes or to comply with Our legal obligations, or until You ask Us to delete Your data. For example, We will retain certain personal information indefinitely for the purposes of maintaining Your account, unless and until You delete Your account. Data that We gather for a specific and particular purpose, such as assisting law enforcement or analyzing trends, will be kept for no longer than is necessary for that particular purpose. Data that is no longer needed by Us for any of the purposes listed above will be permanently deleted.

We will honor Your request to delete Your data, as described more fully below, unless We are required by law to retain access to the data. However, note that We cannot control the retention policies of third parties. If You wish to have any third parties, including those to whom We’ve transmitted Your data, delete that data, You will need to contact those third parties directly. You may request from Us a list of all third parties to whom We have transmitted Your data. 

We may retain usage data (that is, data that is gathered by Our company or third-party analytics companies for the purpose of analyzing the use of Our website) as needed for internal analysis purposes. This type of data is usually retained for a shorter period of time than personal data, unless the data is necessary to improve the security or functionality of Our website or offerings, or We are legally obligated to retain the data for a longer period of time.

10. Data Breach
In the event of a data breach, we, Tova Travel Tours, will take reasonable steps to notify affected individuals and authorities as required by law, and as quickly as possible. We will investigate and take appropriate action to prevent future breaches, including implementing additional security measures if necessary. We will also communicate with affected individuals and provide information on steps they can take to protect themselves. If necessary, we will also work with law enforcement to prosecute any individuals responsible for the breach.

11. Data Minimisation

Tova Travel Tours practices data minimisation, which means that we only collect and process Personal Data that is necessary for specific, legitimate purposes. We do not collect or process Personal Data that is unnecessary or irrelevant for the purposes for which it was collected. We believe that this principle is important because it helps to protect individual privacy and prevent the misuse of personal data. To implement data minimisation, we regularly review the personal data that we collect and process to ensure that it is necessary and relevant for our business purposes. We also take steps to minimise the amount of Personal Data that we collect and process, and we only retain personal data for as long as it is needed to fulfill our business purposes or to comply with legal obligations.

12. Your Sensitive Data
We request that you do not submit any sensitive data to us, whether via public postings, e-mail correspondence with us, or any other method. In the event that you do provide us with sensitive data, including without limitation Personal Data covering medical or health information, you consent to our use, storage, and processing of such information in accordance with this Privacy Policy. We will take reasonable steps to protect and safeguard any sensitive data that we collect, and we will only use such information for legitimate business purposes or as required by law. We will not disclose your sensitive data to any third party without your express consent, except as required by law or as necessary to protect your rights or the rights of others. If you have any concerns or questions about the collection, storage, or use of your sensitive data, please contact us via e-mail at tovatraveltours@gmail.com.

13. Your rights to update information
You have certain rights with respect to Your personal data, as outlined below.

If you wish to update your data that you have given to us previously, pleas
e-mail us at tovatraveltours@gmail.com

You have the right to request that We confirm what data We hold about You, and for what purposes. You also have the right to confirmation of whether We process Your data or deliver Your data to third-party processors, and for what purposes. We will supply You with copies of Your personal data unless doing so would affect the rights and freedoms of others.

Change Consent: You have the right to change Your consent to Our use of Your information. In such cases, We may require You to delete Your account with Us, as described above, and You may not have full access to Our website.

Request a Copy of Data: You have the right to request a digital copy of the data that We hold about You. Your first request for a copy of Your personal data will be provided free of charge; subsequent requests will incur a reasonable fee.

Delete All Data: You have the right to request that We delete all data that We hold about You, and We must delete such data without undue delay. There are exceptions to this right, such as when keeping Your data is required by law, is necessary to exercise the right of freedom of expression and information, is required for compliance with a legal obligation, or is necessary for the exercise or defense of legal claims. Such a request may result in a termination of Your account with Us and You may have limited or no use of Our website. 

Complaints: If You are an EU resident, You have the right to complain to a supervising authority if You believe We are misusing Your data or have violated any of Your rights under this Privacy Policy or applicable law. You may do so in the EU member state in which You reside or have Your place of business or in which the alleged infringement took place. If You are located outside the EU, You may have rights under privacy laws in the jurisdiction where You live.

14. Newsletter Privacy:
We offer the opportunity for You to volunteer certain information to Us that is used for e-mail and marketing purposes. This information includes, but is not limited to, Your name and e-mail. You will have an opportunity to unsubscribe from any future communications via e-mail, but We reserve the right to maintain a database of past e-mail subscribers. We reserve the right to use this information as reasonably necessary in Our business and as provided by law. Your information will be shared with reasonably necessary parties for the ordinary course of conducting Our business, such as through Facebook ads or Google Pay Per Click marketing campaigns.

15. Photo Credits:
All photos via Pexels and Unfold (names follow).

16. Update of this Private Policy:
We reserve the right to amend and update this Private Policy. We will state the most recent updates below this Private Policy. Please also check back to read our Private Policy.

Update: 14 February 2024