Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

We collect information you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, postal address
• Booking Information: Tour preferences, travel dates, group size, special requirements
• Payment Information: Billing details (processed securely through our payment processors)
• Communication Data: Messages you send us through contact forms, emails, or phone calls
• Newsletter Subscriptions: Email address and preferences for marketing communications
• Feedback and Reviews: Comments, reviews, and survey responses

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain information:

• Technical Data: IP address, browser type, operating system, device information
• Usage Data: Pages visited, time spent on site, click patterns, referral sources
• Location Data: General geographic location based on IP address
• Cookie Data: Information collected through cookies and similar technologies

1.3 Information from Third Parties

We may receive information about you from:

• Payment processors for transaction verification
• Social media platforms when you interact with our social media pages
• Travel partners or booking platforms
• Public sources for business contact information

2. How We Use Your Information

2.1 Primary Purposes

We use your personal information for the following purposes:

• Service Provision: Processing bookings, organizing tours, providing customer support
• Communication: Responding to inquiries, sending booking confirmations, tour updates
• Payment Processing: Handling transactions and billing (through secure third-party processors)
• Legal Compliance: Meeting regulatory requirements and legal obligations
• Safety and Security: Ensuring the safety of our guests and protecting against fraud

2.2 Marketing and Communications

With your consent, we may use your information to:

• Send newsletters with travel tips and cultural insights
• Inform you about new tours and special offers
• Conduct customer satisfaction surveys
• Personalize marketing communications based on your interests

2.3 Website Improvement

We use aggregated and anonymized data to:

• Analyze website performance and user experience
• Improve our services and develop new offerings
• Conduct market research and trend analysis
• Optimize our website design and functionality

3. Legal Basis for Processing

Under GDPR, we process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our service agreement with you
• Legitimate Interests: Our legitimate business interests in providing and improving our services
• Consent: Your explicit consent for marketing communications and cookies
• Legal Obligation: Compliance with legal requirements and regulations
• Vital Interests: Protection of health and safety in emergency situations

4. Information Sharing and Disclosure

4.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our business:

• Payment Processors: Secure handling of financial transactions
• Technology Providers: Website hosting, email services, booking systems
• Tourism Partners: Local guides, transportation providers, venue operators
• Marketing Services: Email marketing platforms, analytics providers

All service providers are contractually bound to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users
• Investigate potential legal violations
• Respond to government or regulatory requests

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Booking Data: Retained for 7 years for accounting and legal compliance purposes
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Data: Technical data typically retained for 26 months
• Communication Records: Retained for 3 years for customer service purposes

We regularly review and delete information that is no longer necessary. You can request deletion of your data at any time, subject to legal retention requirements.

6. Your Rights

Under GDPR and Danish law, you have the following rights regarding your personal information:

6.1 Access and Portability

• Right of Access: Request a copy of the personal information we hold about you
• Data Portability: Receive your data in a structured, machine-readable format

6.2 Correction and Deletion

• Right to Rectification: Correct inaccurate or incomplete personal information
• Right to Erasure: Request deletion of your personal information ("right to be forgotten")

6.3 Processing Controls

• Right to Restrict Processing: Limit how we use your information
• Right to Object: Object to processing based on legitimate interests
• Withdrawal of Consent: Withdraw consent for marketing communications at any time

To exercise these rights, please contact us using the information provided in Section 11.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

• Necessary Cookies: Essential for website functionality and security
• Analytics Cookies: Help us understand how visitors use our website
• Marketing Cookies: Used to deliver relevant advertisements and measure effectiveness
• Preference Cookies: Remember your settings and preferences

7.2 Cookie Management

You can control cookies through:

• Our cookie preference center on the website
• Browser settings to block or delete cookies
• Opt-out tools provided by advertising networks

For detailed information about our cookie practices, please see our Cookie Policy.

8. Data Security

8.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data transmitted over secure HTTPS connections
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Updates: Security systems updated and monitored regularly
• Staff Training: Regular privacy and security training for all personnel
• Incident Response: Procedures in place to respond to security breaches

8.2 Payment Security

We do not store payment card information on our servers. All payment processing is handled by PCI-compliant third-party payment processors with industry-standard security measures.

9. International Data Transfers

As a Denmark-based company, we primarily process data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules for multinational service providers
• Your explicit consent for specific transfers

10. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will delete such information promptly.

For family bookings, we require adult supervision and consent for any children participating in our tours.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will:

• Post the updated policy on our website
• Update the "Last Updated" date at the top of this policy
• Notify you of significant changes via email or website notice
• Obtain new consent where required by law

We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

12.1 Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Danish Data Protection Agency: