Privacy policy

Overview

We process personal data only to the extent necessary to operate this website, answer your enquiry and carry out a booked trip. This website does not use cookies for advertising or analytics and does not include any tracking or statistics services.

The controller responsible for the processing is named above under “Data controller”. This English version is provided for convenience; the German version is legally binding.

Visiting the website and hosting

This website is hosted by Vercel Inc. (USA). Server-side functions run in a data centre in Frankfurt am Main; the pages themselves are delivered through a worldwide server network so that they load quickly everywhere.

On every visit Vercel processes technically necessary data: IP address, date and time, the requested address and information about your browser and operating system. This is required to deliver the page and to protect it against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and stable operation. We do not analyse these logs; they are deleted automatically once Vercel's retention period has passed.

Vercel is certified under the EU-U.S. Data Privacy Framework. Transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR).

Images and videos

Images and videos on this website are stored in the content management system Sanity (Sanity Inc., USA) and delivered through its server network (cdn.sanity.io). When they load, Sanity receives your IP address and the information a browser sends with any file request. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is reliable and fast delivery of images.

Transfers to the USA are based on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR), which form part of the contract with Sanity.

Fonts

The fonts are part of this website and are loaded from its own server. No connection is made to Google Fonts or any other font service.

Trip planner and enquiries

When you fill in the trip planner, we process your answers on type of trip, travel period, number of travellers, duration, interests and budget, your name, your email address, optionally your phone number, and your message. We use them to answer your enquiry and send you a route proposal with a price. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps at your request).

We need your name and email address in order to reply; the enquiry cannot be sent without them. All other information is voluntary.

The enquiry and a confirmation to you are sent via the email service Resend (USA). Resend is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); Standard Contractual Clauses apply in addition. The enquiry is delivered to our mailbox at Google Workspace (Google Ireland Limited, Ireland).

If an enquiry cannot be delivered because of a technical fault, it is recorded in the hosting provider's log so that it is not lost, and deleted there automatically once the retention period has passed.

To prevent abuse, your IP address is kept in memory for at most one hour when you submit, so that more than five enquiries per hour from the same address can be rejected. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting the form against automated abuse.

If no booking results, we delete your enquiry no later than two years after our last contact. If you book, we keep the documents required for the contract and invoicing for as long as commercial and tax law requires (up to ten years, Section 257 HGB, Section 147 AO).

Contact by email or phone

If you write to us directly or call, we process your details in order to reply. Our mailbox is hosted by Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The legal basis is Art. 6(1)(b) GDPR where a trip is concerned, otherwise Art. 6(1)(f) GDPR. Retention is the same as for enquiries via the trip planner.

Carrying out a booked trip

If you book a trip, we pass the necessary details — names of the travellers, travel dates and special requests — to the service providers in Morocco: accommodation, camps, drivers and guides. The legal basis is Art. 6(1)(b) GDPR. Morocco is a third country without an adequacy decision of the European Commission; the transfer is permitted under Art. 49(1)(b) GDPR because it is necessary for the performance of the travel contract.

We only process and pass on information about your health — such as allergies, intolerances or limited mobility — if you provide it yourself and give your explicit consent (Art. 9(2)(a) GDPR).

Google Maps — only with your consent

Some pages can display a Google Maps map (Google Ireland Limited, Ireland; Google LLC, USA). It only loads once you agree — in the consent bar or directly on the map. Until then no connection to Google is made.

When the map loads, Google receives your IP address and information about your browser and device, and may set cookies or read information stored on your device. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Google LLC is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Details are in Google's privacy policy at policies.google.com/privacy.

You can withdraw your consent at any time with effect for the future, using “Change map settings” on this page.

Storing your choice

We store your choice about maps only in your browser (localStorage, entry “vt-consent”) so that we do not ask again on every visit. This is strictly necessary for the service you requested (Section 25(2) no. 2 TDDDG). The entry is not transmitted to us and can be deleted in your browser settings.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent at any time with effect for the future (Art. 7(3)). An informal email to the address above is sufficient.

Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

No automated decision-making, including profiling, takes place.

Last updated: September 2026