Privacy Policy

This Privacy Policy explains how City Story processes personal data when you use the website, make an inquiry, or book a guided nature walk or local day excursion. It also describes the main categories of data, the purposes of processing, cookie use, sharing practices, retention, and your rights under applicable data protection law.

Effective DateAs stated in policy

ScopeAll users of our services

QuestionsContact

User Rights

Your Rights

Depending on your location and the applicable law, you may have rights relating to access, correction, deletion, restriction, objection, and portability. You may also have the right to object to processing based on legitimate interests and to withdraw consent where consent is used. These rights are not absolute and may be limited by legal obligations or the need to establish, exercise, or defend claims.

Available rights depend on the legal basis and the nature of the data involved.

Requests

How to Make a Request

To exercise a privacy right, we may ask for information needed to verify your identity and understand your request. We will assess the request and respond within the period required by applicable law, or explain if an exception applies. If a request is complex or repetitive, the response may take longer where the law allows.

Requests are reviewed before action is taken to protect personal data.

Data Retention

Booking, accounting, and communication records are retained for the period needed to manage the service, handle follow-up matters, and meet legal, tax, or contractual obligations. When data is no longer required, we delete it or anonymize it where appropriate.

We keep data only for as long as needed for the stated purpose or legal duty.

Policy Updates

Policy Changes

The updated version will apply from the date it is published on the website unless a different effective date is stated. If a change is material, we will take reasonable steps to draw attention to it through the site or other appropriate communication channels.

We may revise this policy when our processing practices or legal obligations change.

01 · Collection

Data We Collect

We may collect identification and contact details, booking and payment-related information, trip preferences, fitness or suitability details relevant to route planning, communication records, and technical data such as device and usage information. Where needed for a specific excursion, we may also process information you choose to provide about access needs, weather-related adjustments, or other practical requirements.

The categories collected depend on booking, inquiry, and website use.

02 · Sources

How We Collect Data

We receive data from website request forms, email, telephone calls, and messages exchanged during the booking process. We also generate certain technical and operational data from website use, payment handling, and service administration, and we may receive limited information from service providers involved in processing a booking.

Most information comes directly from the person making the inquiry or booking.

03 · Cookies

Cookie Types

The website may use strictly necessary cookies, preference cookies, and limited analytics cookies. Necessary cookies support core functions such as page navigation and form handling. Preference cookies remember selected settings. Analytics cookies help us understand general site use and improve performance without relying on unnecessary personal data.

We use only standard cookie categories for operation and measurement.

04 · Controls

Cookie Controls

You may block or delete cookies through your browser, and you may be able to adjust non-essential cookie preferences if such controls are offered on the site. Some cookies are necessary for basic site functions, so disabling them may affect how the website works.

Cookie choices can be managed through browser settings and, where available, site controls.

01 · Purpose

Why We Use Data

We use personal data to answer inquiries, manage bookings, confirm route suitability, coordinate meeting and return plans, process payments, provide the guided excursion, handle follow-up communication, maintain records, improve website performance, and comply with legal obligations. We may also use limited data to manage cookie preferences, prevent misuse, and support internal administration.

Processing is limited to operational, contractual, and legal needs.

02 · Sharing

Service Providers

We may share personal data with payment processors, website hosting and technical support providers, communication tools, and other operational partners that help us run the website and manage bookings. These parties act under instructions or contractual obligations appropriate to their role and may not use the data for unrelated purposes.

Service providers receive only the data needed to perform their functions.

03 · Legal basis

Legal Disclosure

We may disclose personal data to public authorities, courts, or other parties when required by law or when necessary to comply with legal process, protect our rights, respond to lawful requests, or address security, fraud, or safety concerns. Any disclosure is limited to what is reasonably necessary for the relevant purpose.

Disclosure may be required for compliance, dispute handling, or safety reasons.