Privacy Policy

Who We Are

We operate a website dedicated to offering guided swamp walking tours and wildlife spotting experiences in Estonia's veltrpine National Park. As the data controller, we determine the purposes and means of processing your personal information. Our contact details are provided at the end of this policy.

Information We Collect

We collect information in several ways:

• Contact Information: When you inquire about tours or make a booking, we collect your name, email address, phone number, and physical address.
• Booking Details: Information about your tour preferences, group size, dates, and any special requirements or accessibility needs.
• Payment Information: Transaction details necessary to process payments for tour bookings.
• Website Usage Data: We collect information about how you interact with our website, including pages visited, time spent, and device information.
• Cookies: We use cookies to enhance your browsing experience and analyze site performance.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: We obtain your explicit consent before processing sensitive information or sending marketing communications.
• Contractual Necessity: Processing is necessary to fulfill your tour booking and provide the services you have requested.
• Legitimate Interest: We process data to improve our services, prevent fraud, and maintain website security.
• Legal Obligation: We may process information when required by applicable law or regulatory requirements.

How We Use Your Information

We use the information we collect for the following purposes:

• Processing and confirming your tour bookings
• Communicating with you about your reservation and tour details
• Providing customer support and responding to inquiries
• Sending information about tour updates, weather conditions, or safety notices
• Improving our website, services, and user experience
• Conducting analytics to understand visitor behavior and preferences
• Preventing fraud and maintaining the security of our website
• Complying with legal and regulatory obligations

We do not use your information for automated decision-making or profiling.

Data Retention

We retain your personal information for specific periods based on the purpose of processing:

• Booking and Contact Information: Retained for 24 months following your last interaction with us, allowing us to maintain records and respond to any post-tour inquiries.
• Payment Information: Processed securely and retained only as long as necessary to complete transactions and for accounting purposes, typically up to 7 years for tax compliance.
• Website Analytics and Cookies: Retained for up to 14 months to analyze website performance and user behavior patterns.
• Customer Service Records: Maintained for 24 months to handle disputes and improve service quality.
• Server Logs: Retained for up to 12 months for security and troubleshooting purposes.

After these periods, we securely delete your information unless longer retention is required by law.

Your Rights

You have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete information.
• Right to Erasure: You can request deletion of your information, subject to legal obligations.
• Right to Restrict Processing: You can limit how we use your information in certain circumstances.
• Right to Data Portability: You can request your information in a portable format.
• Right to Object: You can object to certain types of processing, including marketing communications.
• Right to Lodge a Complaint: You can file a complaint with the data protection authority.

To exercise any of these rights, please contact us using the information provided below.

Data Protection Authority

If you believe we have violated your data protection rights, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). This authority oversees data protection compliance in Estonia and can investigate your concerns independently.

Cookies and Tracking

We use cookies to improve your browsing experience and gather analytics about website usage. Cookies are small text files stored on your device. You can control cookie settings through your browser preferences. Some cookies are essential for website functionality, while others are used for analytics and marketing purposes. We do not use cookies for tracking across unrelated websites. For detailed information about our cookie practices, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our website uses secure encryption protocols for data transmission. However, no security measure is completely impenetrable, and we cannot guarantee absolute security. We encourage you to use strong passwords and keep your account information confidential.

Third-Party Services

We may share your information with trusted third parties who assist us in operating our website and providing tour services, including payment processors, booking platforms, and communication services. These third parties are bound by confidentiality agreements and use your information only as necessary to provide their services. We do not sell your personal information to third parties for marketing purposes.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or applicable laws. We will notify you of significant changes by posting the updated policy on our website with a new "Last updated" date. Your continued use of our website following such updates constitutes your acceptance of the revised policy. We encourage you to review this policy regularly to stay informed about how we protect your information.