Privacy Policy

Overview

This website provides information about safaris and trips in Tanzania and offers a form for non-binding travel enquiries. The pages are static and are delivered by its own server in Germany. When you visit the site and when you make an enquiry, Wildfinder Tours & Safaris processes only the data necessary for the operation of the website and for responding to your enquiry. With an enquiry, origin details are also sent to the server and the CRM so that Wildfinder can evaluate which advertising leads to enquiries. Enquiries from the enquiry form go via the website’s own server to Wildfinder’s customer management system (CRM). The CRM passes a few contact details to Brevo so that Brevo can send a confirmation of your enquiry. If you never reply to the contact and the offer, you will receive Wildfinder’s newsletter via Brevo, which you can unsubscribe from at any time. Google Analytics 4 and Google Ads run only with your consent; Calendly and WhatsApp are only available as simple links or as a means of contact, without embedded widgets. The website uses no cookies without consent, no social media pixels, no embedded maps or videos and no externally loaded fonts.

Controller

The controller responsible for the processing of personal data on this website is:

Wildfinder Tours & Safaris Limited
PO Box 15204, Usa River, Arusha, Tanzania
Email: info@wildfindersafaris.com
Telephone: +255 765 598 171

The provider is based in Usa River near Arusha, Tanzania, in other words outside the European Union. Because the offer is aimed at travellers in the European Union, this policy follows the General Data Protection Regulation (Art. 3(2) GDPR).

The contact person for data protection questions is Daniel Pullem, reachable via the contact details stated above.

Your rights

You have the following rights vis-à-vis the controller:

• Access to the data processed about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data, insofar as no retention obligations prevent this (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
• Complaint to a data protection supervisory authority, in particular in the country of your habitual residence (Art. 77 GDPR)

To exercise your rights, a message to the email address stated above is sufficient.

Hosting and server logs

The website is hosted on its own server from the provider Hetzner at the Nuremberg location (Germany). When you visit a page, your browser transmits data to the server for technical reasons, including your IP address. The access data, including your full IP address, are stored by the web server (Nginx) for 14 days and then deleted automatically; the IP address is not truncated. A data processing agreement is in place with Hetzner (Art. 28 GDPR). The server limits the number of form submissions per IP address within a short period; if this limit is exceeded, the web server writes an entry with the IP address to its error log.

The enquiry form is received by a dedicated service on the same server. This service writes one technical log line per enquiry, which contains the randomly generated transaction number of the enquiry, but otherwise no personal data and no IP address.

The website’s fonts and the library for the telephone field in the enquiry form are held locally on the server. When a page is accessed, this creates no connections to third-party providers.

Enquiry form

The enquiry form is available on the enquiry page, the contact page and the page for Google Ads as well as at the end of the homepage and the other content pages. The same form is used on all pages.

The four-step enquiry form collects the following categories of data:

• Travel preferences: desired trip, travel period, arrival date (voluntary), duration of trip, number of travellers, accommodation level, budget, currency of the budget (euros or US dollars depending on the language of the form), days on Zanzibar (only for the combination of safari and Zanzibar), desired national parks (only for desired trips with a safari), a specific trip from the range on offer (if the enquiry is made for this trip)
• Travel group: composition (for example couple, family or solo travellers), number and age of children (voluntary; the age of the children is only requested when children are travelling with you)
• Contact details: first name, surname, email address, telephone number (mandatory field) as well as the country, the country dialling code and the number in international format (each derived from the input)
• Free text: your wishes and comments on the trip
• Technical details: language of the page, origin of the enquiry (enquiry page, contact page, page for Google Ads or the type of page on which the form was submitted: homepage, product page, trip page, accommodation page, page of an accommodation region or overview of the accommodation, national park page or overview of the national parks, blog post or blog overview, “About Wildfinder” page), page name from the address of the page on which the form was submitted (on the homepage the value “start”, on the enquiry page, the contact page and the page for Google Ads the field remains empty), address of the confirmation page (you are redirected to it after submission), time taken to complete the form, whether the form was sent with JavaScript enabled, time of receipt of the enquiry, transaction number randomly generated in your browser on submission
• Origin details: click identifiers from Google adverts (gclid, gbraid, wbraid), UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), landing page and referring page (referrer); details on this are given further down in this section

The purpose of the processing is the preparation of a quotation and contacting you about your enquiry. The legal basis is steps prior to entering into a contract (Art. 6(1)(b) GDPR). Before submitting, you confirm with a mandatory checkbox: “I have read the privacy policy. My details will be used to process this enquiry and plan this trip, and will be shared for this purpose with service providers acting on behalf of Wildfinder. If I never reply to the contact and the offer, Wildfinder will send me the newsletter; I can object to this at any time, including via the unsubscribe link in every email.” The tick of the mandatory checkbox itself is not stored. The service providers mentioned in the text of the checkbox are the recipients named in this policy: Hetzner as the server provider and Brevo, as well as Wildfinder’s CRM, which is operated via the services Supabase and Vercel.

The enquiry is stored in a file on the website’s own server. Neither your IP address nor details of your browser are stored in the process. Access to the file is restricted to the designated service. A daily deletion job automatically deletes copies marked as suspected spam after 30 days and every other stored copy 3 years after receipt of the enquiry.

Spam protection consists of a hidden field (honeypot), a check of the minimum completion time, a check of whether the form was sent with JavaScript enabled, and a limit on the number of enquiries per period on the server. Entries in the hidden field or below the minimum completion time are not stored. Enquiries sent without JavaScript enabled are treated as suspected spam: they are stored with this marker in the copy on the server, are not forwarded to the CRM and are automatically deleted after 30 days. In this case you see a note asking you to enable JavaScript or to write via the contact page. No external spam protection service is used.

The server forwards your enquiry to Wildfinder’s customer management system (CRM). The CRM is operated via the services Supabase (contracting party: Supabase Pte. Ltd., Singapore) and Vercel (contracting party: Vercel Inc., USA) with server location Frankfurt am Main (Germany). The CRM receives the details from the categories travel preferences (except the arrival date), travel group, contact details and free text; of the technical details, it receives only the language of the page, the origin of the enquiry (type or name of the page on which the form was submitted, where applicable the trip) and the randomly generated transaction number. The CRM also receives the origin details (details further down). The transaction number is randomly generated in your browser on submission; if the enquiry is sent again after an error, it uses the same number so that the CRM does not create a duplicate enquiry. The time taken to complete the form, whether the form was sent with JavaScript enabled, the address of the confirmation page and the time of receipt of the enquiry are not passed to the CRM. If the CRM is briefly unavailable, the enquiry waits in a queue on the server and is sent again. As soon as the CRM has accepted the enquiry, the copy in the queue is deleted; the stored copy on the server with the 3-year period remains unaffected by this. The CRM passes only the first name, surname, email address, telephone number and language to Brevo (Sendinblue SAS, Paris, France); there is no direct transmission from the server to Brevo. A data processing agreement is in place with Supabase, Vercel and Brevo respectively (Art. 28 GDPR). With these details, Brevo sends an email in the language of the form (German, English or Spanish): the confirmation of your enquiry. It confirms receipt of your enquiry, announces that Wildfinder is preparing an offer and invites you to a personal conversation. Wildfinder then contacts you personally by email to make you an offer for your enquiry. If you never reply to the contact and the offer, Wildfinder will send you its newsletter via Brevo. Every newsletter email contains a link to unsubscribe.

The purpose of the disclosure to the CRM and to Brevo is the processing of your enquiry, namely the preparation of a travel offer and contacting you about your enquiry; in the case of Brevo, the confirmation of your enquiry is added. If you never reply to the contact and the offer, the sending of Wildfinder’s newsletter via Brevo is added as a further purpose. The legal basis for this is Wildfinder’s legitimate interest in direct marketing (Art. 6(1)(f) GDPR). You can object to the use of your email address for the newsletter at any time without giving reasons (Art. 21(2) GDPR): via the link to unsubscribe in every email or with a message to the email address given above. After that, you will no longer receive the newsletter. The origin of the enquiry in the technical details only designates the type of page on which the form was submitted.

With your enquiry, origin details are sent to the server on submission, stored there in the copy and passed to the CRM: the click identifiers from Google adverts (gclid, gbraid, wbraid), the UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the landing page (the address of the first page visited, without parameters) and the referring page (referrer). Without your consent to “advertising”, only the values from the address of the page on which the form is submitted are taken, together with its address without parameters as the landing page and the referrer of that page; nothing is stored in the browser. If you have consented to “advertising”, the details come from your first visit (First Touch) and are stored for up to 90 days in the local storage of your browser under the entry wf_herkunft; a later visit via a new advert replaces them. The purpose of the origin details is that Wildfinder assigns each enquiry to a source in the CRM (for example Google Ads or Instagram) and evaluates internally which channels and campaigns lead to enquiries and bookings. Bookings are currently not reported back to Google Ads. The legal basis for the transmission to the server and the CRM is Wildfinder’s legitimate interest in evaluating which advertising leads to enquiries (Art. 6(1)(f) GDPR). You can object to this processing at any time with a message to the email address given above (Art. 21(1) GDPR). The origin details are deleted with the enquiry: in the copy on the server 3 years after receipt of the enquiry, in the CRM 3 years after the last contact.

Contact by email, telephone and WhatsApp

You can reach Wildfinder Tours & Safaris by email, telephone and WhatsApp. When you contact Wildfinder Tours & Safaris, the controller processes your details (name, contact details and the content of your message) in order to respond to your enquiry. Depending on the circumstances, the legal basis is either steps prior to entering into a contract (Art. 6(1)(b) GDPR) or the controller’s interest in responding to enquiries (Art. 6(1)(f) GDPR).

WhatsApp: the WhatsApp number of Wildfinder Tours & Safaris can be found in the Legal Notice, and on individual pages there is a simple link to Wildfinder Tours & Safaris’ WhatsApp contact; no embedded widget is used. Only when you click the link do you leave this website; from that point on, WhatsApp’s privacy policy applies. The provider for users in the European Union is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Appointment booking with Calendly

Where a page of this website displays a link for booking an appointment, it is a simple link to Wildfinder Tours & Safaris’ appointment calendar at Calendly, without an embedded widget and without a script on this website. Data is only transferred to Calendly when you click the link; from that point on, Calendly’s privacy policy applies. The provider is Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. Calendly LLC is certified under the EU-U.S. Data Privacy Framework.

Reach and conversion measurement

The website uses Google Analytics 4 and Google Ads for reach and conversion measurement, both only with your consent. Google Analytics 4 counts visitors and page views (statistics category). Google Ads counts whether an enquiry came about following a click on an advert (advertising category) and, with your consent to advertising, is also used for remarketing. Both services are loaded only once you have given your consent. The legal basis is Art. 6(1)(a) GDPR. Measurement only starts after you have consented in this website’s consent banner. The banner is an in-house development by HECHT INS GEFECHT. It does not use third-party software and does not itself transmit any data to third parties. Before your decision in the banner, no Google script is loaded and no cookie is set for measurement purposes. Your consent signals are sent to Google under Google’s Consent Mode. Without consent, no measurement takes place and no cookies are set for this purpose. If you have consented to advertising, the Google Ads tag loads on all pages, regardless of whether you have also consented to statistics. The only conversion is the visit to the thank-you page after an enquiry has been submitted. If you have consented to statistics, the thank-you page reports an event to Google Analytics 4 after an enquiry has been submitted; the only additional details it contains are the type of form (on which type of page it was submitted), the language of the page and your desired trip (safari and Zanzibar, safari, Zanzibar, Kilimanjaro or Kilimanjaro and safari). Your other entries in the form are not sent to Google. If you have consented to advertising, the thank-you page reports a conversion to Google Ads once after an enquiry has been submitted; the transaction number serves as the identifier so that the same enquiry is not counted twice, and reloading the thank-you page does not count again. If you have consented to advertising, the Google Ads tag additionally sends requests for remarketing to Google on every page (to google.com and doubleclick.net servers), marked for personalised advertising; without consent to advertising this does not happen. According to its own statement, Google uses your visit so that Wildfinder can later show you adverts on other websites and in Google services and compiles audience lists from visitors to the website in Wildfinder’s Google Ads account for this purpose. The legal basis for remarketing is your consent (Art. 6(1)(a) GDPR, for access to your browser Section 25(1) TDDDG). You can withdraw consent you have given at any time with effect for the future via the “Change consent” link in the footer of every page. There you can also extend your selection at a later date.

Cookies and local storage

Without your consent, the website sets no cookies for statistical or marketing purposes. With consent, Google (Analytics 4 or Google Ads) sets cookies whose names begin with _ga or _gcl: if you have consented to advertising, Google sets the cookie _gcl_au, which according to Google runs for 90 days, and places the entry _gcl_ls in the local storage of your browser; if you have consented to statistics, Google sets the cookies _ga and ga with an appended identifier. For remarketing, according to Google, Google may additionally set or read cookies on its own domains, for example the cookie IDE on doubleclick.net, which runs for up to 13 months in the European Economic Area. This website’s banner cannot technically delete such cookies on Google domains; this can be done via your browser settings. If you withdraw your consent to statistics or to advertising via “Change consent”, the website deletes all cookies on this website whose names begin with _ga or _gcl, including _gcl_au; if you withdraw consent to advertising, the website additionally deletes the entries _gcl_ls and wf_herkunft in local storage; if your selection does not include advertising, the website removes any existing _gcl_ls entry. The consent banner mentioned above is in use. It stores the selection you have made in the local storage of your browser under the entry wf_consent. The time of your decision and your selection for statistics and advertising (yes or no in each case) are stored. This is not a cookie. This storage is necessary in order to honour your decision. The entry remains in place for twelve months. After that, the banner asks again.

After an enquiry has been successfully submitted, the website places the entry wf_lead in the session storage of your browser. It contains the type of form, the language of the page, the time of submission, the transaction number and your desired trip, none of your other entries. It is evaluated only on the thank-you page: if you have consented to statistics, for the event described in the section on measurement; if you have consented to advertising, for the conversion report to Google Ads. It remembers which report has already been sent, so that reloading the thank-you page does not report anything twice. Without the respective consent it is not evaluated. If it is older than 30 minutes, it is no longer used. The session storage is deleted when the browser tab is closed. This is not a cookie either.

If you have consented to “advertising”, the website places the entry wf_herkunft in the local storage of your browser. It contains the click identifiers from Google adverts (gclid, gbraid, wbraid), the UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the landing page, the referring page (referrer) and the time of your first visit. The details stored are those of your first visit (First Touch). If you later visit the website via a new advert, the new details replace the previous ones. If you withdraw your consent to “advertising”, the entry is deleted; it is deleted at the latest after 90 days. The legal basis for this storage in your browser is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). This entry is not a cookie either.

Recipients and third-country transfer

The controller is based in Tanzania. Your enquiries are stored on a server in Germany. The team in Arusha has access to the enquiry data, including the information about which advert or website you came to us through. There is no adequacy decision by the EU Commission for Tanzania. The transfer is necessary in order to plan and carry out the trip you have requested (Art. 49(1)(b) GDPR).

Within the European Union, the server in Germany (Hetzner) and Brevo (Sendinblue SAS, Paris, France) process your data. The data of Wildfinder’s CRM is held on servers in Frankfurt am Main. However, the contracting parties are based outside the European Union (Supabase Pte. Ltd. in Singapore, Vercel Inc. in the USA), so access from there cannot be ruled out. The basis for such a transfer is the EU standard contractual clauses (Art. 46(2)(c) GDPR); Vercel Inc. is additionally certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Outside the European Union, Google (Analytics 4 and Google Ads, provider for users in the European Economic Area: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is a recipient, only after your consent. Data may be transferred to Google LLC in the USA in the process. The basis for the transfer to Google LLC and Calendly LLC is the EU Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (Art. 45 GDPR); Google LLC and Calendly LLC are certified under the EU-U.S. Data Privacy Framework. For remarketing, Google processes the data as an independent controller.

When you click the links to Calendly and WhatsApp, the respective providers process your data under their own responsibility. Other than through your clicking of a link, this website does not transmit any data to Calendly or WhatsApp.

Storage duration

Personal data is stored only for as long as is necessary for the respective purpose. Enquiries without a booking are automatically deleted in the CRM and at Brevo 3 years after the last contact. Name, contact details, messages and origin details are deleted. For statistics, Wildfinder retains only details without personal reference, for example the enquiry date, market, contact channel and requested trip. The copy of your enquiry on the website’s server is deleted automatically 3 years after receipt; copies marked as suspected spam are automatically deleted after just 30 days. A daily deletion job takes care of this. The copy in the queue is deleted as soon as the CRM has accepted the enquiry. Booking documents and business emails are deleted after the statutory retention periods have expired, as a rule after 6 and 10 years respectively. Server logs are deleted after 14 days. For the data at Google, the periods determined there apply. Your consent selection in local storage is deleted after twelve months. The website deletes the entry wf_herkunft in local storage when you withdraw your consent to “advertising”, and at the latest after 90 days.

Changes to this policy

The controller amends this policy when the processing on the website changes. The version published on this page at any given time applies.

Last updated

14 October 2026

The German version of this text shall prevail.