Privacy Policy

Last updated: 1 January 2025  |  Compliant with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

1. Data Controller

Extra Travel
Tornimäe tn 5, 10145, Tallinn, Estonia
info@extratravel.online

2. Personal Data We Collect

• Contact and enquiry data: name, email address, phone number, travel preferences and details submitted via our contact form;
• Booking data: travel dates, destinations, passenger details and payment information (where applicable) provided in connection with a booking;
• Usage data: IP address, browser type, pages visited and session timestamps — collected automatically when you use our Site;
• Communication data: records of correspondence with our team.

3. How We Use Your Data

• To respond to travel enquiries and provide travel planning services;
• To process and manage travel bookings;
• To send relevant travel information and updates (where you have consented or where we have a legitimate interest);
• To operate and improve our website;
• To comply with legal obligations under EU and Estonian law.

4. Legal Basis for Processing (GDPR Article 6)

• Article 6(1)(b) — performance of a contract or steps prior to entering a contract, for travel bookings and enquiries;
• Article 6(1)(f) — legitimate interests in operating our website and communicating with prospective clients;
• Article 6(1)(c) — compliance with legal obligations;
• Article 6(1)(a) — consent, where obtained (e.g. newsletter subscriptions, non-essential cookies).

5. Data Retention

Enquiry data is retained for up to 3 years. Booking data is retained for up to 7 years in accordance with Estonian and EU legal requirements. Usage log data is retained for up to 12 months.

6. Your Rights Under the GDPR

You have the right to: access your personal data; rectify inaccurate data; request erasure ("right to be forgotten"); restrict processing; data portability; object to processing; and withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, or to opt out of communications, please email info@extratravel.online with the subject "Privacy Request" or "Opt-Out".

7. Data Sharing

We do not sell your personal data. We may share data with: travel suppliers (airlines, hotels, tour operators) necessary to fulfil your booking; IT service providers under appropriate data processing agreements; and authorities where required by law.

8. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

9. Cookies

Please see our Cookie Policy for full details.

10. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee, or with the supervisory authority in your EU member state of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page.

12. Contact

Extra Travel
Tornimäe tn 5, 10145, Tallinn, Estonia
info@extratravel.online