Privacy Policy

Overview

This website provides information about safaris and trips in Tanzania and offers a form for non-binding travel enquiries. The pages are static and are delivered by its own server in Germany. When you visit the site and when you make an enquiry, Wildfinder Tours & Safaris processes only the data necessary for the operation of the website and for responding to your enquiry. Enquiries from the enquiry form go via the website’s own server to Wildfinder’s customer management system (CRM). The CRM passes a few contact details to Brevo so that Brevo can send a confirmation of your enquiry. If you never reply to the contact and the offer, you will receive Wildfinder’s newsletter via Brevo, which you can unsubscribe from at any time. Google Analytics 4 and Google Ads run only with your consent; Calendly and WhatsApp are only available as simple links or as a means of contact, without embedded widgets. The website uses no cookies without consent, no social media pixels, no embedded maps or videos and no externally loaded fonts.

Controller

The controller responsible for the processing of personal data on this website is:

Wildfinder Tours & Safaris Limited
PO Box 15204, Usa River, Arusha, Tanzania
Email: info@wildfindersafaris.com
Telephone: +255 765 598 171

The provider is based in Usa River near Arusha, Tanzania, in other words outside the European Union. Because the offer is aimed at travellers in the European Union, this policy follows the General Data Protection Regulation (Art. 3(2) GDPR).

The contact person for data protection questions is Daniel Pullem, reachable via the contact details stated above.

Your rights

You have the following rights vis-à-vis the controller:

• Access to the data processed about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data, insofar as no retention obligations prevent this (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
• Complaint to a data protection supervisory authority, in particular in the country of your habitual residence (Art. 77 GDPR)

To exercise your rights, a message to the email address stated above is sufficient.

Hosting and server logs

The website is hosted on its own server from the provider Hetzner at the Nuremberg location (Germany). When you visit a page, your browser transmits data to the server for technical reasons, including your IP address. The access data, including your full IP address, are stored by the web server (Nginx) for 14 days and then deleted automatically; the IP address is not truncated. A data processing agreement is in place with Hetzner (Art. 28 GDPR). The server limits the number of form submissions per IP address within a short period; if this limit is exceeded, the web server writes an entry with the IP address to its error log.

The enquiry form is received by a dedicated service on the same server. This service writes one technical log line per enquiry, which contains the randomly generated transaction number of the enquiry, but otherwise no personal data and no IP address.

The website’s fonts and the library for the telephone field in the enquiry form are held locally on the server. When a page is accessed, this creates no connections to third-party providers.

Enquiry form

The enquiry form is available on the enquiry page, the contact page and the page for Google Ads as well as at the end of the homepage and the other content pages. The same form is used on all pages.

The four-step enquiry form collects the following categories of data:

• Travel preferences: desired trip, travel period, arrival date (voluntary), duration of trip, number of travellers, accommodation level, budget, currency of the budget (euros or US dollars depending on the language of the form), days on Zanzibar (only for the combination of safari and Zanzibar), desired national parks (only for desired trips with a safari), a specific trip from the range on offer (if the enquiry is made for this trip)
• Travel group: composition (for example couple, family or solo travellers), number and age of children (voluntary; the age of the children is only requested when children are travelling with you)
• Contact details: first name, surname, email address, telephone number (mandatory field) as well as the country, the country dialling code and the number in international format (each derived from the input)
• Free text: your wishes and comments on the trip
• Technical details: language of the page, origin of the enquiry (enquiry page, contact page, page for Google Ads or the type of page on which the form was submitted: homepage, product page, trip page, accommodation page, page of an accommodation region or overview of the accommodation, national park page or overview of the national parks, blog post or blog overview, “About Wildfinder” page), page name from the address of the page on which the form was submitted (on the homepage the value “start”, on the enquiry page, the contact page and the page for Google Ads the field remains empty), address of the confirmation page (you are redirected to it after submission), time taken to complete the form, whether the form was sent with JavaScript enabled, time of receipt of the enquiry, randomly generated transaction number

The purpose of the processing is the preparation of a quotation and contacting you about your enquiry. The legal basis is steps prior to entering into a contract (Art. 6(1)(b) GDPR). Before submitting, you confirm with a mandatory checkbox: “I have read the privacy policy. My details will be used to process this enquiry and plan this trip, and will be shared for this purpose with service providers acting on behalf of Wildfinder. If I never reply to the contact and the offer, Wildfinder will send me the newsletter; I can object to this at any time, including via the unsubscribe link in every email.” The tick of the mandatory checkbox itself is not stored. The service providers mentioned in the text of the checkbox are the recipients named in this policy: Hetzner as the server provider and Brevo, as well as Wildfinder’s CRM, which is operated via the services Supabase and Vercel.

The enquiry is stored in a file on the website’s own server. Neither your IP address nor details of your browser are stored in the process. Access to the file is restricted to the designated service. A daily deletion job automatically deletes every stored copy 3 years after receipt of the enquiry.

Spam protection consists of a hidden field (honeypot), a check of the minimum completion time and a limit on the number of enquiries per period on the server. Entries identified as spam are not stored. No external spam protection service is used.

The server forwards your enquiry to Wildfinder’s customer management system (CRM). The CRM is operated via the services Supabase (contracting party: Supabase Pte. Ltd., Singapore) and Vercel (contracting party: Vercel Inc., USA) with server location Frankfurt am Main (Germany). The CRM receives the details from the categories travel preferences (except the arrival date), travel group, contact details and free text; of the technical details, it receives only the language of the page, the origin of the enquiry (type or name of the page on which the form was submitted, where applicable the trip) and the randomly generated transaction number. The time taken to complete the form, whether the form was sent with JavaScript enabled, the address of the confirmation page and the time of receipt of the enquiry are not passed to the CRM. If the CRM is briefly unavailable, the enquiry waits in a queue on the server and is sent again. As soon as the CRM has accepted the enquiry, the copy in the queue is deleted; the stored copy on the server with the 3-year period remains unaffected by this. The CRM passes only the first name, surname, email address, telephone number and language to Brevo (Sendinblue SAS, Paris, France); there is no direct transmission from the server to Brevo. A data processing agreement is in place with Supabase, Vercel and Brevo respectively (Art. 28 GDPR). With these details, Brevo sends an email in the language of the form (German, English or Spanish): the confirmation of your enquiry. It confirms receipt of your enquiry, announces that Wildfinder is preparing an offer and invites you to a personal conversation. Wildfinder then contacts you personally by email to make you an offer for your enquiry. If you never reply to the contact and the offer, Wildfinder will send you its newsletter via Brevo. Every newsletter email contains a link to unsubscribe.

The purpose of the disclosure to the CRM and to Brevo is the processing of your enquiry, namely the preparation of a travel offer and contacting you about your enquiry; in the case of Brevo, the confirmation of your enquiry is added. If you never reply to the contact and the offer, the sending of Wildfinder’s newsletter via Brevo is added as a further purpose. The legal basis for this is Wildfinder’s legitimate interest in direct marketing (Art. 6(1)(f) GDPR). You can object to the use of your email address for the newsletter at any time without giving reasons (Art. 21(2) GDPR): via the link to unsubscribe in every email or with a message to the email address given above. After that, you will no longer receive the newsletter. Origin data for marketing purposes is neither collected nor transmitted with the enquiry: no click identifier from Google adverts (gclid), no UTM parameters, no referrer and no landing page. The origin of the enquiry in the technical details only designates the type of page on which the form was submitted.

Contact by email, telephone and WhatsApp

You can reach Wildfinder Tours & Safaris by email, telephone and WhatsApp. When you contact Wildfinder Tours & Safaris, the controller processes your details (name, contact details and the content of your message) in order to respond to your enquiry. Depending on the circumstances, the legal basis is either steps prior to entering into a contract (Art. 6(1)(b) GDPR) or the controller’s interest in responding to enquiries (Art. 6(1)(f) GDPR).

WhatsApp: the WhatsApp number of Wildfinder Tours & Safaris can be found in the Legal Notice, and on individual pages there is a simple link to Wildfinder Tours & Safaris’ WhatsApp contact; no embedded widget is used. Only when you click the link do you leave this website; from that point on, WhatsApp’s privacy policy applies. The provider for users in the European Union is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Appointment booking with Calendly

Where a page of this website displays a link for booking an appointment, it is a simple link to Wildfinder Tours & Safaris’ appointment calendar at Calendly, without an embedded widget and without a script on this website. Data is only transferred to Calendly when you click the link; from that point on, Calendly’s privacy policy applies. The provider is Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. Calendly LLC is certified under the EU-U.S. Data Privacy Framework.

Reach and conversion measurement

The website uses Google Analytics 4 and Google Ads for reach and conversion measurement, both only with your consent. Google Analytics 4 counts visitors and page views (statistics category). Google Ads counts whether an enquiry came about following a click on an advert (advertising category). Both services are loaded only once you have given your consent. The legal basis is Art. 6(1)(a) GDPR. Measurement only starts after you have consented in this website’s consent banner. The banner is an in-house development by HECHT INS GEFECHT. It does not use third-party software and does not itself transmit any data to third parties. Before your decision in the banner, no Google script is loaded and no cookie is set for measurement purposes. Your consent signals are sent to Google under Google’s Consent Mode. Without consent, no measurement takes place and no cookies are set for this purpose. The only conversion is the visit to the thank-you page after an enquiry has been submitted. If you have consented to statistics, the thank-you page reports an event to Google Analytics 4 after an enquiry has been submitted; the only additional details it contains are the type of form (on which type of page it was submitted) and the language of the page. Your entries in the form are not sent to Google. You can withdraw consent you have given at any time with effect for the future via the “Change consent” link in the footer of every page. There you can also extend your selection at a later date.

Cookies and local storage

Without your consent, the website sets no cookies for statistical or marketing purposes. With consent, Google (Analytics 4 or Google Ads) sets cookies whose names begin with _ga or _gcl. If you withdraw consent via “Change consent”, the banner deletes these cookies. The consent banner mentioned above is in use. It stores the selection you have made in the local storage of your browser under the entry wf_consent. The time of your decision and your selection for statistics and advertising (yes or no in each case) are stored. This is not a cookie. This storage is necessary in order to honour your decision. The entry remains in place for twelve months. After that, the banner asks again.

After an enquiry has been successfully submitted, the website places the entry wf_lead in the session storage of your browser. It contains the type of form, the language of the page and the time of submission, none of your entries. It is only evaluated if you have consented to statistics, namely on the thank-you page for the event described in the section on measurement; it is deleted afterwards. Without statistics consent it is not evaluated. If it is older than 30 minutes, it is no longer used. The session storage is deleted when the browser tab is closed. This is not a cookie either.

Recipients and third-country transfer

The controller is based in Tanzania. Your enquiries are stored on a server in Germany. The team in Arusha (Tanzania) receives only the details it needs to plan your trip. There is no adequacy decision by the EU Commission for Tanzania. The transfer is necessary in order to plan and carry out the trip you have requested (Art. 49(1)(b) GDPR).

Within the European Union, the server in Germany (Hetzner) and Brevo (Sendinblue SAS, Paris, France) process your data. The data of Wildfinder’s CRM is held on servers in Frankfurt am Main. However, the contracting parties are based outside the European Union (Supabase Pte. Ltd. in Singapore, Vercel Inc. in the USA), so access from there cannot be ruled out. The basis for such a transfer is the EU standard contractual clauses (Art. 46(2)(c) GDPR); Vercel Inc. is additionally certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Outside the European Union, Google (Analytics 4 and Google Ads, provider for users in the European Economic Area: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is a recipient, only after your consent. Data may be transferred to Google LLC in the USA in the process. The basis for the transfer to Google LLC and Calendly LLC is the EU Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (Art. 45 GDPR); Google LLC and Calendly LLC are certified under the EU-U.S. Data Privacy Framework.

When you click the links to Calendly and WhatsApp, the respective providers process your data under their own responsibility. Other than through your clicking of a link, this website does not transmit any data to Calendly or WhatsApp.

Storage duration

Personal data is stored only for as long as is necessary for the respective purpose. Enquiries without a booking are automatically deleted in the CRM and at Brevo 3 years after the last contact. Name, contact details, messages and origin details are deleted. For statistics, Wildfinder retains only details without personal reference, for example the enquiry date, market, contact channel and requested trip. The copy of your enquiry on the website’s server is deleted automatically 3 years after receipt; a daily deletion job takes care of this. The copy in the queue is deleted as soon as the CRM has accepted the enquiry. Booking documents and business emails are deleted after the statutory retention periods have expired, as a rule after 6 and 10 years respectively. Server logs are deleted after 14 days. For the data at Google, the periods determined there apply. Your consent selection in local storage is deleted after twelve months.

Changes to this policy

The controller amends this policy when the processing on the website changes. The version published on this page at any given time applies.

Last updated

12 October 2026

The German version of this text shall prevail.