Privacy Policy

Effective date: 2026

SparReise ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website sparreise.com and use our services. We comply fully with the General Data Protection Regulation (GDPR) applicable in the European Union and ensure your personal data is processed lawfully, fairly, and transparently.

1. Data Controller

The data controller responsible for your personal data is SparReise.

2. Information We Collect

We may collect and process the following types of personal data:

• Contact Information: such as your name, email address, phone number, and postal address when you contact us or request a quote.
• Account Data: if you create an account, we collect your username, password, and related profile information.
• Transactional Data: details of the services you book, including payment information processed securely by our payment providers.
• Usage Data: information about how you use our website and services, such as IP addresses, browser type, referring URL, pages visited, and access times.
• Cookies and Tracking Technologies: we use cookies and similar technologies to collect data about your browsing behavior. Please refer to our Cookies Policy for more details.

3. How We Use Your Information

We use your personal data for the following purposes:

• Provide, operate, and manage our travel services and website.
• Process your booking requests and related transactions.
• Communicate with you regarding your inquiries, bookings, and customer support.
• Inform you about changes to our services, terms, and policies.
• Send promotional materials and tailor marketing messages where you have given consent.
• Analyze website usage to improve user experience and develop new features.
• Detect, prevent, and address technical issues or security breaches.
• Comply with legal obligations and enforce our terms and conditions.

4. Legal Basis for Processing

We rely on one or more of the following legal bases to process your personal data:

• Consent: where you have given clear consent for a specific purpose.
• Contractual necessity: to fulfill our contract with you, such as processing your bookings.
• Legal obligations: to comply with regulatory or legal requirements.
• Legitimate interests: to operate and improve our business, provided your rights do not override these interests.

5. Data Sharing and Disclosure

We do not sell or rent your personal data. We may share your information with trusted third parties only as necessary, including but not limited to:

• Travel service providers (hotels, airlines, tour operators) to deliver your requested services.
• Payment processors to securely handle transactions.
• Our service providers who assist in operating our website and business.
• Legal authorities if required by law or to protect our rights.

6. International Transfers

Your personal data may be transferred and stored in servers located outside the European Economic Area (EEA). We ensure that such transfers are made in compliance with GDPR, including by implementing appropriate safeguards like Standard Contractual Clauses.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations. When no longer needed, we securely delete or anonymize your data.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to access: request a copy of your personal data we hold.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request deletion of your data under certain conditions.
• Right to restrict processing: limit how we use your data.
• Right to data portability: receive your data or transfer it to another controller.
• Right to object: object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: revoke consent at any time without affecting prior processing.
• Right to lodge a complaint: with a supervisory authority, such as the relevant Data Protection Authority in your EU member state.

To exercise any of these rights, please contact us at [email protected].

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission can be guaranteed to be 100% secure.

10. Children's Privacy

Our services are not directed to children under 16 years old. We do not knowingly collect personal data from children without parental consent. If you believe we have mistakenly collected such data, please contact us to request deletion.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised effective date. We encourage you to review it periodically.

12. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or our data practices, please contact: