Privacy Policy

PRIVACY POLICY (GDPR COMPLIANT)

Last updated: 01.12.2025

This Privacy Policy explains how Viva Amazonia GmbH (BOTO Tours) collects, uses, and protects your personal data when you visit our website or book a tour with us.
We are committed to handling your personal information with care, transparency, and in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

Viva Amazonia GmbH
Friedrichstraße 207–208
10969 Berlin, Germany
Email: hello@bototours.com
Represented by: Vivien König & Eneko Brög

2. Personal Data We Collect

We may collect and process the following information:

2.1 Data you provide directly

  • Name

  • Email address

  • Phone number (optional)

  • Booking-related information (travel dates, group size, preferences)

  • Messages sent via email, contact form, or WhatsApp

  • Payment information (processed externally through a payment provider)

2.2 Website data (automatically collected)

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Time spent on the website
    (Collected through Squarespace and standard analytics tools.)

3. How We Use Your Data

We process your data to:

  • Respond to inquiries

  • Provide booking information and confirm reservations

  • Organize and conduct tours

  • Improve our website and services

  • Comply with legal obligations (invoicing, tax regulations)

  • Communicate with you before, during, or after your trip

We do not use your data for automated decision-making.

4. Legal Basis for Processing (GDPR Article 6)

We process data based on:

  • Art. 6(1)(b) – Performance of a contract (booking and organizing your trip)

  • Art. 6(1)(a) – Consent (when you send us a message or sign up voluntarily)

  • Art. 6(1)(c) – Legal obligation (accounting, tax law)

  • Art. 6(1)(f) – Legitimate interest (website optimization, communication)

5. Sharing Your Data

Your data is only shared when necessary and only with:

  • Service providers (e.g., website host Squarespace)

  • Payment processors (e.g., Stripe, PayPal – if used)

  • Local partners / crew when needed to organize your stay

  • Public authorities if legally required

We never sell or rent personal data.

6. International Data Transfers

If we transfer data to Brazil (for tour organization), we do so only when required for your booking and with appropriate safeguards.
Data processed by Squarespace or other providers may be stored outside the EU under GDPR-compliant protections.

7. Data Retention

We store personal data only as long as necessary:

  • Booking data: according to German tax law (up to 10 years)

  • Contact inquiries: until the request is resolved

  • Analytics data: according to provider settings

  • Email communication: typically 1–3 years

You can request deletion at any time (see Section 9).

8. Cookies & Analytics

Our website uses:

  • Standard Squarespace analytics

  • Essential cookies required for site functionality

We currently do not use intrusive tracking (no Facebook Pixel, no targeted advertising cookies).
If this changes, the policy will be updated and consent banners will be added.

9. Your Rights (GDPR)

You have the right to:

  • Access your data

  • Correct inaccurate data

  • Request deletion

  • Restrict processing

  • Object to processing

  • Withdraw consent at any time

  • Data portability

  • File a complaint with your local supervisory authority

To exercise any right, contact: hello@bototours.com

10. Security

We use SSL encryption and secure hosting environments to protect your data.
However, no online transmission can be guaranteed 100% secure.

11. External Links

Our website may contain links to third-party websites.
We are not responsible for external content or privacy practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time.
Updates will be posted here with a new “Last updated” date.

Contact

For questions about this Privacy Policy, please contact:
hello@bototours.com