Privacy Policy

The controller responsible for the processing of personal data is:

Adventures in Egypt is the trading name of the above-named self-employed provider.

Where tourist services are not provided directly, Adventures in Egypt works with local service partners in Egypt. Individual excursions may be carried out by local providers, drivers, guides, boat operators, safari providers, dive centres or other tourist service partners.

Adventures in Egypt is based in Egypt. The processing of personal data is therefore primarily governed by the data protection law of the Arab Republic of Egypt, in particular the Egyptian Personal Data Protection Law No. 151 of 2020 and its Executive Regulations.

Where Adventures in Egypt offers services to persons located in Germany, Austria or another EU member state at the time of inquiry or booking, the EU General Data Protection Regulation (GDPR) may additionally apply — in particular where services are specifically targeted at persons in the EU, for example through a German-language website, German-language communication or the possibility of booking excursions from the EU before travel. The GDPR applies under Art. 3(2) also to controllers not established in the EU where they offer goods or services to persons in the EU.

This privacy policy therefore takes into account both Egyptian data protection law and supplementary GDPR requirements for guests from the European Union.

Personal data means any information relating to an identified or identifiable natural person. This includes in particular name, contact details, booking information, payment data, hotel information, communication content, photos, videos or technical usage data.

Depending on how you contact us, inquire, book or use our website, we process in particular the following data:

• First and last name
• Email address
• Phone number and WhatsApp contact
• Country of origin, language or nationality
• Hotel name, pickup location, meeting point or room number
• Travel date, desired excursion, number of participants and booking details
• Payment information, in particular information relating to cash payments
• Message content from email, WhatsApp, contact form, booking form, phone or social media
• Special voluntary information, e.g. allergies, health notes, mobility limitations, pregnancy, dietary preferences or information about children
• Technical data when visiting our website: IP address, browser, device type, operating system, date and time of access
• Photos and videos where you are recognisable, taken during an excursion or with your consent

We process personal data for the following purposes:

• Processing inquiries
• Advising on excursions and tourist services
• Creating, managing and confirming bookings
• Organising and conducting booked excursions
• Coordinating pickup times, meeting points, participant numbers and programme changes
• Communicating with guests before, during and after the excursion
• Payment processing
• Documenting bookings and payments
• Customer service and complaint handling
• Safety and emergency management during excursions
• Fulfilling legal, tax, accounting or regulatory obligations
• Improving our services
• Publishing photos and videos for advertising and social media (only with consent)
• Protecting our rights and defending against unjustified claims

Personal data is only processed where permitted under Egyptian data protection law. Processing may in particular take place where:

• You have given your consent to the processing,
• Processing is necessary for handling your inquiry or carrying out your booking,
• Processing is necessary to comply with a legal obligation,
• Processing is necessary due to a regulatory or court order,
• Processing is necessary to protect the legitimate rights or interests of Adventures in Egypt,
• Processing is necessary for safety, evidential or legal defence purposes.

The Egyptian Executive Regulations to the Data Protection Law contain more detailed provisions on, among other things, consent, retention, security measures, data breaches, international transfers and obligations of controllers.

Where the GDPR applies, we base processing in particular on the following legal grounds:

• Art. 6(1)(b) GDPR – where processing is necessary for handling an inquiry, booking or conducting an excursion.
• Art. 6(1)(c) GDPR – where we must comply with a legal obligation.
• Art. 6(1)(f) GDPR – where processing is necessary to protect legitimate interests, e.g. customer communication, fraud prevention, legal defence or service improvement.
• Art. 6(1)(a) GDPR – where you have given consent, e.g. for marketing, non-essential cookies or publication of photos and videos.
• Art. 9(2)(a) GDPR – where special categories of personal data are processed and your explicit consent is required.

In certain cases you may voluntarily share particularly sensitive information, such as health data, allergies, mobility limitations, pregnancy, information about children or special safety requirements.

We process such data only where necessary for your safety and the conduct of the excursion, or where you have explicitly consented. Examples:

• Allergies on boat excursions or catering
• Health limitations on snorkelling, diving, desert or safari excursions
• Mobility limitations for transfers
• Information about children for family bookings

When children or minors participate in an excursion, we may process certain data such as name, age, participant information, safety requirements or details of accompanying persons.

Bookings for minors are generally made by parents, guardians or an adult accompanying person. Where legally required, we process data of minors only with the consent of their legal representative.

Where you are located in Germany, Austria or another EU member state at the time of inquiry or booking, we process your data to prepare and carry out the travel service in Egypt. This includes in particular:

• Handling your inquiry
• Reserving the excursion
• Confirming the booking
• Pre-travel communication
• Passing on necessary information to local service partners in Egypt
• Organising transfers, pickups, guides, boats, safaris, dive centres or other services
• Payment processing
• Customer service and cancellation handling

Since excursions are conducted in Egypt, transfer and processing of certain data in Egypt is required.

When you use our contact or booking form, we process the data you enter to handle your inquiry or booking. This may include in particular:

• Name
• Email address
• Phone number
• Desired excursion
• Travel date
• Number of participants
• Hotel or pickup location
• Your message
• Technical transmission data, e.g. IP address, date and time of inquiry

Processing is carried out to handle your inquiry and, where a booking is made, to prepare or perform the contract.

You can contact us via WhatsApp, email, phone, contact form, booking form or social media. We process the data you transmit to handle your inquiry or booking.

When using WhatsApp, your phone number, profile information, communication content, timestamps and technical data may be processed. Please note that WhatsApp is an external service with its own privacy policy.

If you prefer not to use certain communication channels, you can contact us by email instead.

To conduct booked excursions, personal data may be shared with local partners and service providers. Recipients may include in particular:

• Drivers and transfer companies
• Tour guides
• Boat operators
• Dive centres or snorkelling providers
• Safari and desert providers
• Hotels or meeting point coordinators
• IT, hosting, website and communication service providers
• Authorities, courts or security agencies (where legally required)

Data is only shared where necessary for the respective service or where legally permitted.

We do not sell personal data to third parties.

Adventures in Egypt is based in Egypt. When you book from Germany or the EU, personal data will therefore regularly be transferred from the EU to Egypt or processed there.

Egypt does not have a general adequacy decision from the EU. Where the GDPR applies, additional safeguards (e.g. standard contractual clauses or legal exceptions) may therefore be required.

Under Egyptian data protection law, cross-border transfers may also be subject to specific requirements, approvals or licences from the competent Personal Data Protection Centre. The Egyptian Executive Regulations also specify cases where cross-border transfers may be permitted, e.g. where necessary for contract performance.

We currently offer the following payment method:

Cash payment

For cash payments, we process the information necessary for booking, payment confirmation and internal documentation.

We store payment information only where necessary for booking, accounting, evidential purposes, legal obligations or legal defence.

Photos or videos may be taken during excursions. Since Adventures in Egypt may use photos and videos for social media and advertising, we use recognisable images of guests only with your consent where legally required.

Possible publications may appear on:

• Website
• Facebook
• Instagram
• TikTok
• Advertising materials
• Other online or social media channels of Adventures in Egypt

You may withdraw consent at any time with effect for the future.

For children and minors, we obtain the consent of parents, guardians or the responsible accompanying person where required.

When you submit a review or feedback, we may process the personal data contained therein.

Publication with names, photos or other identifying details only takes place where permitted or where you have consented.

Adventures in Egypt operates profiles on the following social media platforms:

• Facebook
• Instagram
• TikTok

When you visit our profiles, contact us, comment on, share or interact with our content, personal data may be processed by us and by the respective platform provider.

The platform providers' own privacy policies also apply to their data processing.

We may use your contact details to send you information about similar excursions, offers or services where legally permitted or where you have consented.

You may object to the use of your data for direct marketing at any time. After your objection, we will no longer use your data for direct marketing.

Electronic marketing activities may be subject to specific requirements and possibly approval or licensing obligations under the Egyptian data protection regulations.

Our website may use cookies and similar technologies. Cookies are small files stored on your device that contain certain information.

We do not currently use tracking or advertising tools such as Google Analytics, Meta Pixel or TikTok Pixel.

However, our website may use technically necessary cookies required for the operation of the website, security, the contact form or the booking form.

If analytics or advertising tools are used in the future, this privacy policy will be updated accordingly and, where required, your consent will be obtained via a cookie or consent banner.

Our website may use Google Maps to display locations, meeting points or our address.

When Google Maps is loaded, personal data — in particular IP address, location data, browser and device data and usage information — may be transmitted to Google. Google may also process this data in countries outside Egypt or the European Union.

We use Google Maps to help you find our locations and meeting points.

Our website may embed YouTube videos.

When YouTube videos are played or loaded, personal data — in particular IP address, browser and device data and usage information — may be transmitted to Google/YouTube. This may also occur if you do not have a YouTube account.

Where possible, we embed YouTube videos in a privacy-friendly manner or load external content only after your consent.

As of now, we do not use analytics or ad tracking tools such as:

• Google Analytics
• Google Ads Conversion Tracking
• Meta Pixel
• TikTok Pixel
• Other marketing pixels

If we use such services in the future, we will update this privacy policy accordingly and, where required, obtain your consent via a cookie or consent banner.

This website does not use AI-powered services that automatically process personal data or transmit it to external AI providers (e.g. chatbots, AI translation services, personalised recommendation algorithms).

Should we use AI technologies in the future that process personal data, we will update this privacy policy accordingly and transparently disclose the legal basis, purpose and categories of data involved.

Internally, we occasionally use AI tools for content creation or translation. No personal data of our guests is entered or processed in this context.

AI-generated images and videos

We may use AI tools to create or edit images and videos for our website, social media channels or marketing materials. Where possible, such content is labelled as AI-generated or AI-edited.

No personal data of our guests is used in the creation of AI-generated images and videos. Photos or videos in which guests are recognisable are not fed into AI systems or processed using AI without explicit consent.

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, disclosure or destruction. These include in particular:

• Restricting data access to authorised persons
• Secure storage of booking data
• Careful selection of service providers and local partners
• Secure communication and payment systems where available
• Internal confidentiality rules
• Deletion of data no longer required
• Measures to prevent unauthorised disclosure

In the event of a data breach, we will investigate the incident, take appropriate protective measures and make any legally required notifications.

Under the Egyptian Executive Regulations, notification obligations apply for certain data breaches, including to the competent Personal Data Protection Centre. Current guidance indicates a 72-hour reporting window to the PDPC and subsequent notification of affected individuals within three working days.

Where the GDPR applies, we additionally observe the notification obligations to the competent supervisory authority and, where necessary, to affected individuals.

For questions about data protection, to exercise your rights or to withdraw consent, please contact us:

We store personal data only for as long as necessary for the respective purposes.

• Booking data is stored for the duration of the booking process and thereafter where necessary for evidential, accounting, tax or legal purposes.
• Communication data is stored for as long as necessary for handling your inquiry, customer service or legitimate interests.
• Photo and video consents are stored for as long as the consent is relevant or until withdrawal, unless overriding legal grounds apply.

Data we no longer require and for which no statutory retention obligations exist will be deleted or anonymised.

Under Egyptian data protection law, data subjects may have certain rights regarding their personal data, including in particular rights to information, access, rectification, erasure, restriction, objection and withdrawal of consent, to the extent these rights exist under applicable law.

To exercise your rights, please contact us at: contact.adventuresinegypt@gmail.com

Where the GDPR applies, data subjects have in particular the following rights:

• Right of access to processed personal data
• Right to rectification of inaccurate data
• Right to erasure of personal data
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing activities
• Right to withdraw consent with effect for the future
• Right to lodge a complaint with a competent data protection supervisory authority

To exercise your rights, please contact us at any time using the contact details above.

Where you have given us consent to process personal data, you may withdraw it at any time with effect for the future. This applies in particular to consent for:

• Photos and videos
• Publication on the website or social media
• Marketing communications
• Non-essential external content or cookies

The lawfulness of processing prior to withdrawal is not affected.

If you believe your personal data has been processed unlawfully, you may contact us at any time.

Where Egyptian data protection law applies, complaints may be submitted to the competent Egyptian data protection authority or Personal Data Protection Centre.

Where the GDPR applies, you may also lodge a complaint with a competent data protection supervisory authority in the European Union.

We reserve the right to update this privacy policy if our services, website, data processing or legal requirements change.

The current version will always be published on our website.