Privacy Policy & GDPR

1. Introduction & Overview

Away Go Journeys ("we", "us", "our") is committed to protecting the privacy, confidentiality, and security of all personal data submitted by our website visitors, travel agency partners, and clients. As a France-registered Destination Management Company (DMC) accredited by ETOA (European Tourism Association), we strictly adhere to the **General Data Protection Regulation (GDPR)** (EU Regulation 2016/679) and applicable French data protection laws (Loi Informatique et Libertés).

2. Identity of the Data Controller

The Data Controller responsible for processing your personal data is:

3. Personal Data We Collect

We only collect data necessary to provide destination management services, process tour bookings, and communicate with partners. This includes:

• Identity & Contact Data: Full name, business/personal email address, telephone number, and postal address.
• B2B Partner & Agency Data: Travel agency name, country/region of operation, business registration details, and representative contact information.
• Travel & Booking Data: Preferred European travel routes, group sizes, hotel preferences, transport requirements, and special accessibility requests.
• Technical & Communication Data: IP address, browser type, inquiry form submission details, and email communications.

4. Legal Basis & Purposes of Processing (GDPR Article 6)

We process your personal data on the following legal grounds:

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. Data is shared exclusively with verified suppliers and service providers strictly required to fulfill your travel booking (e.g., contracted hotels, transport companies, licensed tour guides, and monument ticketing systems across Europe). All partners are bound by confidentiality and GDPR compliance obligations.

6. Your Rights Under GDPR

Under the GDPR, individuals and B2B partners residing in the European Economic Area (EEA) enjoy the following rights:

7. Data Security & Retention Period

We implement technical and organizational security measures (encryption, secure servers, access controls) to prevent unauthorized access, loss, or alteration of personal data. Personal data relating to bookings is retained for the statutory period required under French commercial law (typically 5 to 10 years for accounting/fiscal records), after which it is securely deleted or anonymized.