Privacy Policy

Introduction

The protection of your personal data is important to us. In this privacy policy we inform you about how we process your data when you visit our website, use our services or otherwise communicate with us. Your data is processed exclusively within the framework of the statutory data protection provisions, in particular the General Data Protection Regulation (GDPR).

Controller

The controller for data processing within the meaning of the GDPR is:

Orientoura
Owner: Sherif Azab-Els
Pregelstraße 14
53127 Bonn
Telephone: +49 228 24017771
Email: info@orientoura.de

Collection and processing of personal data

When you visit our website

When you access our website orientoura.com, the browser used on your device automatically sends information to the server of our website. This information is stored temporarily in what is known as a log file. The following information is recorded without any action on your part and stored until it is automatically deleted:

IP address of the requesting computer
Date and time of access
Name and URL of the file retrieved
Website from which access was made (referrer URL)
Browser used and, where applicable, the operating system of your computer
Name of your access provider

The data listed is processed for the following purposes:

ensuring a smooth connection to the website
ensuring comfortable use of our website
evaluating system security and stability
for further administrative purposes

The legal basis for the data processing is Art. 6(1) sentence 1(f) GDPR.

When you use our contact form

If you contact us using a form provided on the website, the personal data you enter (e.g. name, email address, message) is used exclusively to process your enquiry.

The legal basis for the data processing is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest).

c) When you book a trip

If you book a trip with us, we collect the following data:

Surname, first name
Email address
Telephone number
Postal address
Travel dates and preferences

The data is processed in order to perform the contract (Art. 6(1)(b) GDPR).

Disclosure of data to third parties

Your personal data is transmitted to third parties only for the following purposes:

to our service partners (e.g. hotels, guides, transport companies), insofar as this is necessary to carry out the travel contract
to our tax adviser or our accounting department, where legally required
to public authorities, where there is a legal obligation to do so

Any transfer of data to a third country (e.g. Egypt) takes place exclusively for the performance of your travel contract and on the basis of Art. 49(1)(b) GDPR.

Cookies

Our website uses cookies. These are small files that your browser creates automatically and that are stored on your device. Cookies do no harm and contain no viruses.

At present this website sets only technically necessary cookies, which are required for the operation of the site and for its caching. We do not currently use analytics, tracking or advertising cookies, and no data is transmitted to third-party analytics providers. The legal basis for technically necessary cookies is Art. 6(1)(f) GDPR.

Should we introduce analytics or other non-essential cookies in future, we will ask for your consent beforehand by means of a consent banner, and you will be able to withdraw that consent at any time. The legal basis would then be Art. 6(1)(a) GDPR.

A subscription form is provided in the footer of our website. If you enter your email address there and submit it, we use that address solely to send you our newsletter. The form is operated with Hostinger Reach, a service of Hostinger International Ltd., Jonavos g. 60C, 44192 Kaunas, Lithuania, which acts as our processor and stores the data within the European Union.

The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, either by using the unsubscribe link in every newsletter or by writing to info@orientoura.de. Your address is deleted once you unsubscribe.

Your rights

You have the right:

under Art. 15 GDPR, to request information about your personal data processed by us
under Art. 16 GDPR, to request the correction of inaccurate data or the completion of data stored by us
under Art. 17 GDPR, to request the erasure of data stored by us
under Art. 18 GDPR, to request the restriction of the processing of your data
under Art. 20 GDPR, to receive your personal data in a structured, commonly used format or to request its transmission to another controller
under Art. 7(3) GDPR, to withdraw consent once given at any time
under Art. 77 GDPR, to lodge a complaint with a supervisory authority

Right to object

Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing.

Data security

Within the website visit we use the widely used SSL (Secure Socket Layer) procedure in combination with the highest level of encryption available in each case.

Validity and amendment of this privacy policy

This privacy policy is currently valid (as of 16 August 2026) and may be adapted as required, for example in the event of changes to statutory provisions or to our services.

Web fonts (locally hosted)

This website uses fonts (Literata and Inter) that are stored locally on our own server. No data is transmitted to Google or other external providers. No connection is made to Google servers (fonts.googleapis.com or fonts.gstatic.com).

Overview of data subject rights

You have the following rights in relation to Orientoura regarding your personal data:

Right of access (Art. 15 GDPR): you may request information about the data stored by us at any time.
Right to rectification (Art. 16 GDPR): you may request the correction of inaccurate data.
Right to erasure (Art. 17 GDPR): you may request the erasure of your data, insofar as no statutory retention obligation applies.
Right to restriction (Art. 18 GDPR): you may request restricted processing of your data.
Right to data portability (Art. 20 GDPR): you have the right to receive your data in a structured format.
Right to object (Art. 21 GDPR): you may object at any time to the processing of your data on the basis of legitimate interests.
Right to lodge a complaint: you have the right to complain to the competent supervisory authority. For North Rhine-Westphalia: Landesbeauftragte für Datenschutz und Informationsfreiheit NRW, poststelle@ldi.nrw.de.

If you have any questions about data protection, please contact us at: info@orientoura.de.

Contact via WhatsApp

Our website contains a link that opens a chat with us in WhatsApp. The link itself is an ordinary hyperlink: no data is transmitted to WhatsApp or Meta while you are simply on our site, and no tracking code from Meta is loaded here.

If you use the link and write to us, WhatsApp Ireland Ltd. processes your telephone number and the content of your messages under its own privacy policy, over which we have no control. We use the messages only to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest). If you would rather not use WhatsApp, email and telephone are equally welcome and reach the same person.