Privacy Policy

Information on Data Collection, Usage, and Storage

At The One Adventure, we prioritize the privacy of our users. We collect personal information necessary for providing our adventure tour services, such as contact details, booking preferences, payment information, and other relevant details to ensure a seamless experience. This information is collected through our website, booking forms, direct communications, and through third-party platforms where applicable.

We use this data to facilitate bookings, improve our services, and communicate important updates related to your tours, including safety instructions, schedule changes, and promotional offers.

We are committed to transparency in how we use your information. Specifically, we may use your data for:

• Processing bookings and managing customer relationships.
• Enhancing our website and user experience through personalized services.
• Complying with legal obligations, dispute resolution, and enforcing our agreements.

Data is stored securely in compliance with applicable privacy regulations, including the General Data Protection Regulation (GDPR) for European Union users and Austrian Data Protection Act (Datenschutzgesetz, DSG). We employ industry-standard encryption protocols, firewalls, and access control mechanisms to ensure that your personal data is protected from unauthorized access, disclosure, alteration, or destruction. Our data retention policy ensures that your data is only kept as long as necessary to fulfill the purposes for which it was collected, or as required by law.

User Rights Regarding Personal Data

Users have several rights regarding their personal data under both Austrian law and international regulations, including the GDPR. These rights include:

• Right of Access: You have the right to request access to the personal data that we hold about you. You may request a copy of your data to understand how it is being processed and verify the accuracy of the information.
• Right to Rectification: If you believe that the information we hold about you is incorrect or incomplete, you have the right to request that we correct or update this information.
• Right to Erasure (Right to be Forgotten): You may request that we erase your personal data under certain circumstances, such as when the data is no longer needed for the purpose it was collected or when you have withdrawn your consent.
• Right to Restrict Processing: You have the right to request the restriction of processing your data if you contest its accuracy, the processing is unlawful, or if you need the data to establish, exercise, or defend a legal claim.
• Right to Data Portability: You can request to receive your data in a commonly used, machine-readable format or ask that we transmit your data to another data controller where technically feasible.
• Right to Object: You have the right to object to certain processing activities, such as direct marketing, at any time.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time.

To exercise these rights, please contact us at privacy@theoneadventures.com. We will process such requests in accordance with relevant legal requirements, and we aim to respond within 30 days of receiving your request.

Third-Party Data Sharing

The One Adventure may share your personal information with trusted third-party service providers to facilitate bookings, process payments, or deliver specialized services, such as transportation, accommodations, insurance, and guided activities. These third parties are contractually obligated to protect your information and only use it for the specific purpose for which it was provided.

The categories of third parties we work with include:

• Payment Processors: To securely handle transactions related to your bookings.
• Accommodation and Transportation Providers: To ensure your travel arrangements are managed smoothly.
• Marketing Partners: To provide you with information about our services that may be of interest to you, where you have given us your consent.

All third parties are required to comply with Austrian and EU data protection regulations, including the GDPR. We do not sell your personal information to any third parties. We only share your data where it is necessary to provide our services or comply with legal obligations.

International Data Transfers

To provide our services, we may need to transfer your personal data to countries outside of the European Economic Area (EEA). When we transfer data internationally, we ensure that appropriate safeguards are in place, such as the use of Standard Contractual Clauses approved by the European Commission, to ensure your data remains protected. Any international transfer of data is carried out in compliance with Austrian and EU data protection laws to guarantee the same level of data protection that is guaranteed within the EEA.

Data Security Measures

• Encryption: We use industry-standard encryption to protect data both in transit and at rest.
• Access Control: Only authorized personnel have access to your personal data, and they are subject to strict confidentiality obligations.
• Data Minimization: We only collect data that is necessary for the purposes stated in this policy.
• Regular Audits: We conduct regular security reviews and audits to ensure compliance with our data protection obligations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. Any changes will be posted on our website, and we will provide notice of any significant changes. We encourage users to review this Privacy Policy periodically to stay informed about how we are protecting their information.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights regarding your personal data, please contact us at privacy@theoneadventures.com. We are committed to protecting your privacy and ensuring that your personal information is handled responsibly and in compliance with Austrian and international data protection laws, including GDPR.