Privacy Policy

Privacy Policy

PRIVACY POLICY – VEGAN TRAVEL UG

Last Updated: 2026

1. Introduction & Controller Details

Vegan Travel UG (haftungsbeschränkt) ("Vegan Travel," "we," "us," or "our") is committed to protecting the privacy and personal data of our guests and website visitors. This Privacy Policy informs you about how we collect, process, use, and protect your personal data when you visit our website (www.vegan-cruises.com) or book and participate in our 100% plant-based cruises, expeditions, and travel services.

Data Controller:

Vegan Travel UG (haftungsbeschränkt)
Wolbecker Windmühle 61, 48167 Münster, Germany
Phone: +49 2506-5269969 | Email: contact@vegan-cruises.com / service@vegan-travel.de
Managing Director: Dirk Bocklage | Commercial Register: Amtsgericht Münster

2. Legal Bases for Processing (EU GDPR)

We process personal data strictly in compliance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications-Telemedia Data Protection Act (TDDDG). We rely on the following legal bases:

  • Performance of a Contract (Art. 6(1)(b) GDPR): To process inquiries, fulfill booking requests, manage passenger reservations, issue travel documentation, and deliver travel and cruise services.

  • Compliance with Legal Obligations (Art. 6(1)(c) GDPR): To comply with statutory maritime reporting, customs, tax, immigration, and commercial retention obligations.

  • Legitimate Interests (Art. 6(1)(f) GDPR): For website IT security, fraud prevention, operating our business, defending legal claims, and conducting direct marketing to existing customers for similar travel packages.

  • Consent (Art. 6(1)(a) GDPR & § 25(1) TDDDG): For newsletter subscriptions, non-essential tracking cookies, and social media integrations.

  • Explicit Consent for Special Categories of Data (Art. 9(2)(a) GDPR): For processing dietary medical restrictions, allergies, or physical assistance requirements.

3. Categories of Personal Data We Collect

  • Identity & Contact Details: Full legal name (as stated on your passport), gender, date of birth, nationality, billing and home address, email address, and telephone number.

  • Passport & Travel Manifest Data: Passport number, issuing country, expiration date, visa details, and emergency contact information (name, relationship, and telephone number of a non-traveling contact).

  • Booking & Financial Data: Cruise itineraries, cabin categories, excursion selections, flight arrangements, invoice numbers, payment status, and processed transaction metadata. Credit card payments are handled directly by PCI-DSS-compliant payment service providers; we do not store full payment card numbers on our local servers.

  • Health & Special Needs Data: Information regarding mobility constraints, medical equipment requirements, or severe dietary allergies that you disclose to ensure safety and appropriate service onboard.

  • Technical & Usage Data: IP address, browser type and version, operating system, referrer URL, pages visited, date/time of access, and cookie consent records.

4. Purposes of Data Processing

We process your personal data for the following specific purposes:

  • Administering reservations, cabin allocations, and charter itineraries.

  • Transmitting regulatory passenger manifests to harbor masters, port authorities, and border control agencies.

  • Issuing airline tickets, organizing ground transfers, and coordinating partner hotel reservations.

  • Catering to special plant-based dietary requirements and onboard hospitality.

  • Providing emergency assistance and managing onboard safety incidents.

  • Communicating important itinerary updates, pre-departure notices, and customer service requests.

  • Sending our email newsletter (subject to double opt-in consent) and commercial updates regarding future voyages (subject to your statutory right to opt out).

5. Third-Party Sharing & International Data Transfers

We only share personal data with third parties when necessary for the performance of the travel contract, required by law, or supported by our legitimate interests:

  • Operating Partners: River cruise ship owners/charter operators, expedition crew, local ground handlers, excursion guides, and partner hotels.

  • Transport Carriers: Airlines, railway providers, and charter coach companies.

  • Statutory Authorities: Immigration, customs, coast guard, and port authorities in relevant embarkation and disembarkation ports.

  • Service Providers: Cloud hosting providers (IONOS SE), IT support, transactional email systems, and legal/tax advisors bound by strict confidentiality or data processing agreements (DPAs).

International Transfers Outside the EU/EEA (Art. 49(1)(b) GDPR):

Because our voyages operate globally (such as the Mekong, Amazon, Nile, Caribbean, and Arctic), fulfilling your travel contract necessitates transferring passport manifest data and booking specifics to local maritime authorities, destination management companies, and lodging partners in third countries that may not offer an EU-equivalent level of data protection. These transfers are executed under Article 49(1)(b) GDPR as strictly necessary for the performance of your package travel contract.

6. Data Retention Periods

We store personal data only as long as necessary to fulfill the purposes for which it was collected:

  • Travel Contract & Booking Records: Retained for 6 to 10 years in accordance with German commercial and fiscal statutory retention periods (§ 257 HGB, § 147 AO).

  • Marketing & Newsletter Data: Stored until you unsubscribe or withdraw your consent.

  • Website Server Logs: Automatically deleted or anonymized within 7 to 14 days, unless required for investigating security incidents.

7. Your Statutory Rights (GDPR & International)

Under the GDPR, you have the following enforceable rights:

  • Right of Access (Art. 15 GDPR): Request confirmation and a copy of your personal data processed by us.

  • Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal data.

  • Right to Erasure (Art. 17 GDPR): Request deletion of your personal data, provided statutory retention obligations do not preclude erasure.

  • Right to Restriction of Processing (Art. 18 GDPR): Request the temporary suspension of data processing under certain statutory conditions.

  • Right to Data Portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used, and machine-readable format.

  • Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw any previously granted consent at any time with future effect.

  • Right to Object (Art. 21 GDPR):
    You have the right to object at any time to the processing of your personal data based on legitimate interests (Art. 6(1)(f) GDPR). Where data is processed for direct marketing purposes, you have an absolute right to object at any time without providing reasons. Upon receipt of your objection, we will immediately cease processing your data for direct marketing.

To exercise any of these rights, contact us at privacy@vegan-cruises.com.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR):

You have the right to lodge a complaint with a data protection supervisory authority. Our competent lead supervisory authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany | Website: www.ldi.nrw.de

8. Additional Information for United States Residents (CCPA/CPRA)

If you reside in California or other U.S. states with comprehensive privacy legislation:

  • We collect personal identifiers, commercial transaction details, internet network activity, geolocation, and sensitive passport information solely for travel operational purposes.

  • We do not sell your personal information, nor do we share your personal data for cross-context behavioral advertising.

  • You may exercise your statutory rights to know, correct, or delete your personal information by contacting contact@vegan-cruises.com. We will not discriminate against you for exercising your privacy rights.

9. Cookies, Tracking & Technical Storage

Our website utilizes cookies and similar technologies. Essential cookies necessary for website functionality and security are processed under Art. 6(1)(f) GDPR. Any optional analytics or marketing cookies are deployed exclusively upon your explicit prior consent via our Cookie Consent Banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can manage or revoke at any time.

10. Contact Us

For any inquiries, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

Vegan Travel UG (haftungsbeschränkt)

Data Privacy Desk

Wolbecker Windmühle 61, 48167 Münster, Germany

Email: contact@vegan-cruises.com | Telephone: +49 2506-5269969