Last updated: May 15, 2024
This Privacy Policy describes how Natura Travel (“we”, “our”, or “the website”) collects, uses, and protects your personal data when you visit or use our website natura-travel.com.
1. Data Controller
The data controller responsible for your personal information is:
Natura Travel
Email: [email protected]
2. Data We Collect
We collect the following types of personal data via our website:
a) Contact Forms
- First and last name
- Email address
- Phone number (optional)
- Message content
b) Booking Forms
- First and last name
- Email address
- Phone number
- Booking details: destination, travel dates, number of people, preferences
- Payment information (processed through a secure third-party provider – we do not store your payment data)
c) Cookies and Trackers
- IP address
- Browsing behavior
- Browser type
- Pages viewed, visit duration
- Referring websites (e.g., search engines, ads)
3. Purpose of Data Collection
We process your personal data for the following purposes:
- Responding to your inquiries submitted via the contact form
- Managing and confirming your travel bookings
- Sending follow-up emails, quotes, confirmations, and useful travel information
- Enhancing your user experience through analytics cookies
- Securing and optimizing website performance
- Fulfilling legal and contractual obligations
4. Cookies
a) Strictly Necessary Cookies
These are essential for the proper functioning of the website and cannot be disabled.
b) Analytical Cookies
We use tools like Google Analytics to analyze website traffic and performance.
c) Preference/Marketing Cookies
These are used to personalize your experience or provide targeted advertising.
You can manage your cookie preferences at any time using the cookie banner displayed during your first visit.
5. Data Recipients
Your data may be shared only with:
- Our internal team at Natura Travel
- Our technical service providers (hosting, email tools, analytics)
- Our travel partners, only when required to fulfill your booking (e.g., local agencies, hotels, airlines)
We do not sell or share your data with unauthorized third parties.
6. Data Retention Period
- Contact form data: 1 year after the last interaction
- Booking data: 5 years after the last trip (unless extended by legal obligations)
- Cookies: up to 13 months
- User accounts (if applicable): until deletion by the user or 3 years of inactivity
7. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Request data portability
- Withdraw your consent at any time (e.g., for cookies)
To exercise your rights, contact us at: [email protected]
We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to safeguard your data:
- Secure HTTPS connection
- Restricted data access
- Regular backups
- GDPR-compliant service providers
9. Transfers Outside the EU
Some of our providers or partners may be located outside the European Union. In such cases, we ensure appropriate safeguards are in place.
10. Complaints
You may file a complaint with your local data protection authority if you believe your rights have been violated:
Malagasy Commission for Information and Liberties (CMIL)
11. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. The last modification date is shown at the top of this page. We encourage you to review it regularly.
