Privacy policy
This page explains how we handle your personal data on damaretravel.com. In short: we use no cookies and no analytics tools, and we only process your data when you write to us.
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Damare Travel OÜPärnu mnt 388b
11612 Tallinn, Harjumaa
Estonia
represented by its Managing Director Meinhard Mooslechner
Email: office@damaretravel.com
Your rights
You can exercise the following rights at any time by writing to office@damaretravel.com:
- access to the data we hold about you and how it is processed (Art. 15 GDPR),
- rectification of inaccurate personal data (Art. 16 GDPR),
- erasure of your data (Art. 17 GDPR),
- restriction of processing where we may not yet delete your data due to legal obligations (Art. 18 GDPR),
- objection to the processing of your data (Art. 21 GDPR) and
- data portability where you have consented to processing or concluded a contract with us (Art. 20 GDPR).
You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, www.aki.ee. You may also contact the supervisory authority in the EU country where you live.
Purposes of processing and disclosure
We process your personal data only for the purposes set out in this privacy policy. We only pass it on to third parties if you have expressly consented, if it is necessary to perform a contract with you, if there is a legal obligation, or if it is necessary to protect legitimate interests and there is no reason to assume that your interests worthy of protection prevail.
Storage period
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. After that, the data is deleted or, where deletion is not yet permitted, restricted.
Hosting and server log files
This website is delivered via Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technically necessary data such as your IP address, the date and time of access, the address requested, your browser and operating system. This is required to deliver the page to you and to protect it against attacks.
The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR). We have a data processing agreement with Cloudflare (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. More information: Cloudflare privacy policy.
No cookies, no analytics
We do not use cookies for advertising or analytics on damaretravel.com, nor analytics tools such as Google Analytics. We serve fonts and images ourselves; no connections to Google or other providers are made for this.
Contact form
When you write to us via the contact form, we process your name, phone number, email address and message in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
The message is delivered to our mailbox office@damaretravel.com via the email service Brevo, provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. We have a data processing agreement with Brevo (Art. 28 GDPR). More information: Brevo privacy policy.
We delete your enquiry once it has been dealt with and no statutory retention obligations remain.
Spam protection with Cloudflare Turnstile
To protect the contact form against automated submissions, we use Cloudflare Turnstile by Cloudflare, Inc. (address above). Turnstile checks technical characteristics of your browser and your IP address to determine whether a human is filling in the form. Turnstile is only loaded on pages with a contact form and does not set cookies for advertising purposes.
The legal basis is our legitimate interest in protecting our mailbox and website against spam and abuse (Art. 6(1)(f) GDPR). More information: Turnstile privacy notice.
Contact by email and phone
If you contact us by email or phone, we process the information you give us in order to deal with your request. The legal bases are the same as for the contact form.
Applications
Applications for our positions reach us by email. We process the information they contain solely for the application process (Art. 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act, BDSG). If we do not work together, we delete the documents no later than six months after the process has ended, unless you have consented to longer storage.
Encryption
This website is delivered exclusively via encrypted HTTPS connections, so data you send to us is protected from third parties in transit.
Links to other websites
We link to our specialist websites ArcticDesire.com and Weltreisekreuzfahrten.com and to cruise line websites. Their own privacy policies apply to these sites.
Changes to this privacy policy
We will update this privacy policy when legal requirements or our services change. The version published here applies.
Last updated: October 2026