ActivTours® Privacy Policy

1. Who we are

ActivTours® is operated by GROUP G4 PROMOTION SRL, a company registered in Romania.

GROUP G4 PROMOTION SRL · Tax ID: 15308727 · Trade Register no.: J03/406/2003 · Registered office: Str. Smeurei nr. 7, 110046 Pitești, jud. Argeș, România

For questions about personal data protection you can contact us at info@activtours.travel or on +40 755 195 555.

2. What data we process

Depending on how you interact with ActivTours®, we may process:

• Identification and contact data — the name, email address and phone number you provide in the enquiry form.
• Data about your request — destination, dates, preferences and the message you send us.
• Communication data — your correspondence with ActivTours® by email, form, phone or WhatsApp.
• Technical and attribution data — IP address, user agent, the address of the page you submitted from, the referring page, language and, when you arrive from a campaign, UTM parameters and the gclid, gbraid or wbraid campaign identifiers.
• Data needed to prepare the offer and, subsequently, to contract and deliver the travel services, if you choose to proceed.

3. Why we use the data

We process data in order to:

• respond to enquiries and requests for an offer;
• prepare and personalise the travel proposal;
• communicate with you before, during and after the journey;
• prepare, conclude and perform travel service contracts;
• keep the website working and secure, including preventing abusive automated submissions;
• measure website performance;
• comply with legal obligations applicable to travel activity and with accounting obligations;
• establish, exercise or defend legal claims.

4. Legal bases

Steps taken at your request and performance of a contract — when you request an offer or purchase services.

Legal obligations — including accounting, tax and travel-industry obligations.

Legitimate interest — for operating and securing the services, managing the customer relationship, preventing abuse or defending our rights.

Consent — where required, including for certain measurement or marketing activities. Consent can be withdrawn at any time for the future, without affecting the lawfulness of processing carried out beforehand.

5. Enquiries and forms

When you send us a request through the form on the site, we use the information provided to understand the journey you are looking for, to contact you and to prepare the offer.

The request is passed into the systems ActivTours® uses to manage enquiries and customer relationships, where a consultant picks it up.

We do not make an enquiry conditional on accepting marketing communications. Accepting the processing necessary for your request and consenting to marketing are two different things.

6. Protection against automated submissions

To protect the form against automated submissions we use an anti-bot verification mechanism provided by Cloudflare, together with rate limiting.

This verification processes your IP address and technical information about your browser, strictly in order to distinguish a person from an automated program.

7. Phone, WhatsApp and email

When you contact us by phone, WhatsApp or email, we process the data you choose to share on that channel.

Communicating over WhatsApp also involves processing by the service provider under its own terms and policies, over which ActivTours® has no control.

Company email is operated through Google Workspace.

8. Traffic measurement

We use Google Analytics 4 to understand how the website is used: which pages are visited, where visitors come from and how they behave in aggregate.

Details about the storage technologies used and the preferences available are explained in the Cookie Policy.

9. Who we may share data with

We share data only as far as necessary, with:

• Technology and operational providers — for hosting, network infrastructure, automated intake of enquiries, customer relationship management, image hosting and website operation. The ActivTours® ecosystem involves, depending on purpose, services such as Vercel, Cloudflare, n8n, Baserow, Google Workspace, Google Analytics, Cloudinary and Hostinger.
• Travel service providers — accommodation, carriers, organisers or other partners involved in the journey you purchase, once you actually request a booking.
• Communication providers — including WhatsApp, when you choose that channel.
• Public authorities — where disclosure is required by law.

10. International transfers

Some technology providers may process data outside Romania or the European Economic Area.

Where such a transfer takes place, ActivTours® seeks to rely on the applicable legal mechanisms for data protection, depending on the provider and jurisdiction.

We do not treat mere use of the website as general consent to international transfers.

11. How long we keep data

We keep data only for as long as it is necessary for the purpose it was collected for, or for as long as legal obligations require.

The period differs by type of information:

• enquiries and communications — for as long as necessary to manage the relationship with you;
• contractual, accounting and tax documents — in line with the applicable legal periods;
• technical and security data — for the period necessary for that purpose.

12. Data security

We apply technical and organisational measures designed to protect data against unauthorised access, loss, alteration or improper disclosure. Data submitted through the form on the site is transmitted encrypted.

No internet-connected system can, however, offer an absolute guarantee of security.

13. Children's data

The website is not directed at children and we do not knowingly collect their personal data through the forms on the site.

Where a journey includes minors, the necessary data is provided by a parent or legal representative in the context of the booking.

14. Your rights

Subject to the law, you have the right of access, rectification, erasure, restriction of processing, portability, objection, and the right to withdraw consent where processing is based on it.

You can exercise your rights by writing to info@activtours.travel. So that we can respond safely, we may ask for additional information to confirm your identity.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

15. External links and services

The website may contain links to ActivTours® resources hosted separately — the blog, travel guides, the frequently asked questions section — and to external platforms.

Those resources have their own policies, and ActivTours® is not responsible for other controllers' processing practices.

16. Changes to this Policy

We may update this Policy when our services, the technologies we use or legal requirements change.

The applicable version is the one published on this page, together with the date of the last update.