Data controller

The deployed application displays the configured legal operator name, address, registration details and privacy email in transactional communications. The form remains unavailable when mandatory legal configuration is missing.

Information collected

Contact information, residence country, requested timing, group size, journey preference, relevant mobility notes, dietary notes, consent record, technical security data and subsequent portal messages or requested documents.

Purpose

To assess and respond to an enquiry, prepare an offer, coordinate an accepted journey, protect the service and maintain an audit record.

Documents

Documents are accepted only after a request is created and through the private portal. The public form asks users not to upload medical or identity documents.

Retention

The operator must define and publish retention periods consistent with its legal obligations. The included admin tools support status and audit history but do not replace a legal retention policy.

Recipients and processors

Cloudflare services may process hosting, database, storage, security and queue operations. Configured email or webhook providers process notification data according to the operator’s setup.

Your rights

Contact the configured privacy email to request access, correction, restriction, deletion or other applicable rights. Identity may need to be verified securely.