Privacy Policy

The controller of your personal data is:

Email for data protection enquiries:

connect@journeysbydeni.com

The scope of the data processed depends on whether you are simply getting in touch or whether we begin preparing a specific journey together.

Data you provide through the website

If you contact me through the contact form, I may process in particular:

• your name,
• your email address,
• the content of your message,
• any other details you choose to include in your message.

Data related to planning a journey

If we begin planning a journey together, you may provide further information needed for its preparation and coordination, for example:

• the destination you have in mind,
• the dates and length of the journey,
• details of fellow travellers,
• information about your travel preferences,
• preferences regarding accommodation, transport and activities,
• information about your budget and travel style,
• information about previous journeys or experiences, where relevant to the planning,
• information required for bookings,
• any other requirements and preferences relating to the specific journey.

I process this data only to the extent relevant to the preparation and coordination of your journey.

Travel documents and visa matters

If you ask me to assist with travel documents, visas or entry requirements, I may also process, to the extent necessary, the data contained in the documents you provide to me for that purpose.

This may include data required for:

• checking the validity of a passport or other travel document,
• verifying visa and entry requirements,
• preparing supporting documents for a visa application,
• coordinating visa or entry matters,
• communicating with the relevant service providers,
• any other steps directly related to the preparation of a specific journey.

I do not ask for travel documents or copies of them unless they are genuinely required for a particular service.

Data concerning specific needs

In connection with planning a journey, you may also voluntarily share information about your specific needs, such as dietary restrictions, allergies, health-related needs or other circumstances relevant to organising the journey.

Such information is processed only to the extent necessary for the specific purpose and in accordance with the conditions laid down by the GDPR for special categories of personal data.

I may process personal data in particular for the purposes of:

Communication

To respond to your enquiry, to correspond with you and to understand the kind of journey you are looking for.

Preparing and planning a journey

To create an individual travel proposal based on your ideas, needs and requirements.

Coordinating individual services

To coordinate the individual parts of the journey, to liaise with the relevant service providers and local partners, and to arrange the services you have requested.

Assistance with visas and travel documents

If you ask me to, I may also use your data to help you navigate visa and entry requirements, to review documents or to prepare supporting materials for a specific journey.

Compliance with legal obligations

Some data is also processed in order to comply with obligations imposed on me by law, in particular in the areas of accounting and taxation.

Protection of rights and legal claims

To the extent necessary, I may also process data in order to protect my legal claims, prevent fraud or resolve any disputes.

Depending on the specific purpose, the processing of personal data is based in particular on the following legal grounds:

Performance of a contract or steps taken prior to entering into a contract

For example, when preparing an individual journey based on your enquiry.

Compliance with a legal obligation

For example, when processing accounting and tax records.

Legitimate interest

For example, in the course of ordinary communication, the protection of legal claims or securing the services provided.

Consent

Only in cases where consent is genuinely required for the specific processing.

Consent is not required where the processing is necessary for the performance of a contract or for steps taken prior to entering into it.

I do not share your personal data without good reason.

Where it is necessary for the preparation or delivery of your specific journey, relevant data may be shared, for example, with:

• accommodation providers,
• carriers and transfer providers,
• local guides,
• providers of activities and experiences,
• visa and immigration services,
• local partners and specialists,
• providers of any other services you have requested as part of the journey,
• technical providers supporting the operation of the website, communication or data storage,
• accounting, tax or legal advisers, where their involvement is required.

Only the data necessary for the given purpose is shared.

Given the nature of the services provided by Journeys by Deni, preparing a journey may require cooperation with service providers and local partners outside the European Union or the European Economic Area, for example in Indonesia or other destinations.

Where the provision of a service involves a transfer of personal data to a third country, I ensure that such a transfer takes place in accordance with the GDPR rules on transfers of personal data outside the EU/EEA.

Depending on the circumstances, a transfer may be based on an adequacy decision of the European Commission, appropriate safeguards under the GDPR, or a relevant derogation provided for by the GDPR.

I keep personal data only for as long as is necessary for the purpose for which it was obtained, or for as long as I am required to retain it under applicable law.

Retention periods may therefore vary depending on the type of data and the specific purpose.

Data relating to a specific journey may be retained for the period needed for its preparation, delivery and subsequent administration.

Accounting and tax records are retained for the period prescribed by the applicable legislation.

Where data is no longer needed and there is no other legal ground for retaining it, I delete or anonymise it.

I take appropriate technical and organisational measures designed to prevent unauthorised access to personal data, as well as its loss, misuse, alteration or unauthorised disclosure.

Access to personal data is limited to those individuals or providers who need it for a specific purpose.

The website may use technical cookies that are necessary for its proper functioning.

If analytics, marketing or other cookies requiring consent are also used on the website, they will be used only in accordance with the applicable legislation and with your consent settings.

Information about the specific cookies used and their settings will be provided in a dedicated cookies section.

In connection with the processing of personal data, you have, under the GDPR, in particular the right to:

• request confirmation as to whether I process your personal data;
• obtain access to your personal data;
• request the rectification of inaccurate or incomplete data;
• request the erasure of personal data where the conditions of the GDPR are met;
• request the restriction of processing;
• receive, under certain conditions, your personal data in a structured, machine-readable format;
• object to processing based on legitimate interest;
• withdraw your consent where the processing is based on consent.

If you wish to exercise any of your rights or have a question regarding the processing of personal data, you can contact me at:

connect@journeysbydeni.com

I will respond to requests concerning your rights without undue delay and generally no later than one month from receipt. In complex cases, or where a number of requests are received, this period may be extended by a further two months under the conditions set out in the GDPR. I will inform you of any such extension and the reasons for it.

Where there are reasonable doubts as to the identity of the person making the request, I may ask for additional information needed to verify it.

If you believe that I process your personal data in breach of the law, you have the right to lodge a complaint with a supervisory authority.

In the Czech Republic, this authority is:

If, as part of planning a journey, you provide me with data about another person, such as a fellow traveller, you should ensure that you are entitled to provide that data for the given purpose.

Where personal data is not obtained directly from the individual concerned, the relevant information obligations under the GDPR may also apply to me.

I do not use personal data for automated decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you.

I may update this policy, for example where the services provided, the technologies used or legal requirements change.

The current version will always be published on this page.