Enquire now

Africa

NamibiaSouth Africa

Asia

Sri LankaThailandVietnam

Europe

AustriaGreeceItalySpain

Indian Ocean

MaldivesMauritiusSeychelles

Orient

Oman

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Lena Fauck
Helmholtzstraße 84
50825 Cologne
Germany

Phone: +49 176 81155811
Email: info@moonluxurytravel.de

2. General information

Protecting your personal data is important to us. We process personal data solely in accordance with applicable data protection law, in particular the General Data Protection Regulation (GDPR). Personal data is any information that can be used to identify you personally.

3. Hosting

Provider: Hostinger International Ltd. (or affiliated companies of the Hostinger group). Our website runs on a server located in Frankfurt am Main, Germany.

When you visit the website, the server automatically records information in server log files (IP address, date and time of access, requested file, browser type and version, operating system, referrer URL). This data is used to provide the website technically and to ensure its security and stability, on the basis of our legitimate interest (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the host.

4. Cookies & consent management

We use technically necessary cookies and – subject to your consent – optional cookies for statistics and marketing. Necessary cookies are based on Art. 6(1)(f) GDPR, optional cookies on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings.

Consent management: To manage your consent we use a consent management platform (Cookiebot, provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark). Your consent decision and technical data (including anonymised IP address and timestamp) are stored to document and apply your choice.

5. Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is a management tool used to load further services (tags); on its own it does not set analytics or marketing cookies. The services delivered via Tag Manager (see the following sections) are only loaded after your consent. We use Google Consent Mode: without consent, no analytics or marketing cookies are set.

6. Google Analytics

Via Google Tag Manager and only after your consent, we use Google Analytics 4 (Google Ireland Limited) to analyse and improve the use of our website statistically. The legal basis is solely your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework, supplemented by the EU Standard Contractual Clauses.

7. Google Ads (conversion tracking & remarketing)

Also via Google Tag Manager and only after your consent, we use Google Ads services (Google Ireland Limited) to measure the success of our ads (conversion tracking) and to show you interest-based advertising based on your usage behaviour (remarketing). Cookies may be set and a pseudonymous identifier as well as your IP address may be processed and transferred to Google. The legal basis is solely your consent (Art. 6(1)(a) GDPR), revocable at any time via the cookie settings. Data may be transferred to the USA (EU-US Data Privacy Framework / EU Standard Contractual Clauses).

8. Meta Pixel (Facebook & Instagram ads)

Via Google Tag Manager and only after your consent, we use advertising and analytics technologies from Meta (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), in particular the Meta Pixel. This records interactions on our website in order to measure the effectiveness of our ads on Facebook and Instagram and to show you relevant advertising there (including custom audiences/remarketing). Cookies may be set and data – such as a pseudonymous identifier, IP address and event data – may be transferred to Meta; Meta may link this data to your Meta account. For certain processing operations, we and Meta are joint controllers (Art. 26 GDPR). The legal basis is your consent (Art. 6(1)(a) GDPR), revocable at any time via the cookie settings. Data may be transferred to the USA (EU-US Data Privacy Framework / EU Standard Contractual Clauses).

9. Cloudflare (delivery, form processing, bot protection, video)

Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

We use Cloudflare for the secure and performant delivery of the website and for the server-side processing of form submissions (Cloudflare Worker). To protect our forms against automated abuse (spam/bots) we use Cloudflare Turnstile; videos are embedded via Cloudflare Stream. IP addresses may be processed. The legal basis is our legitimate interest in security and reliable operation (Art. 6(1)(f) GDPR) and pre-contractual measures (Art. 6(1)(b) GDPR). Transfers to the USA are based on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. A data processing agreement is in place.

10. Travel enquiry form

When you use our enquiry / travel consultation form, we process the data you provide – in particular name, email address, phone number, number and age of travellers, travel period, destinations, preferred hotels, budget, preferred contact method and your message.

The purpose is to handle your enquiry and plan your trip individually. The legal basis is the performance of pre-contractual measures or the contract (Art. 6(1)(b) GDPR). Your data is stored in our content management system (see the Content management section) and – if you have consented to receiving offers/newsletter – additionally transferred to our email service provider.

11. Content management (Sanity)

Provider: Sanity AS, Oslo, Norway. We use Sanity as our editorial and content management system. Enquiries and newsletter sign-ups submitted via our forms are also stored there. Norway is part of the EEA; a data processing agreement (Art. 28 GDPR) is in place. The dataset is not publicly accessible.

12. Email delivery, CRM & newsletter (Brevo)

Provider: Brevo (Sendinblue GmbH, Cologne, Germany / Sendinblue SAS, Paris, France).

We use Brevo to send notification and confirmation emails and to manage contacts and the newsletter. If you subscribe to the newsletter or consent to receiving offers, we store your email address and, where applicable, further contact data with Brevo.

Double opt-in: Newsletter sign-up uses the double opt-in procedure – after signing up you receive an email asking you to confirm your subscription. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future, e.g. via the unsubscribe link in every email. A data processing agreement is in place with Brevo.

13. Fonts & media

The fonts used are served locally from our server; no connection is made to third-party servers (e.g. Google Fonts). Embedded videos are provided via Cloudflare Stream (see the Cloudflare section).

14. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the https:// in your browser's address bar.

15. Retention period

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods. Afterwards the data is deleted or anonymised.

16. Your rights

You have the right to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object (Art. 21). You can withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

For any data protection matters, please contact us using the details above.

17. Updates

This privacy policy will be updated as needed to reflect changes in the legal situation or in our services. The current version published here applies.