Strict Data Privacy Commitment
Your data is stored on secure servers located in Germany under strict EU GDPR standards. All personal information is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. We use your information ONLY to operate your tour safely and comfortably, and share data exclusively with official park authorities, insurance providers, and local expedition crew members where strictly necessary.
1. Server Hosting in Germany (EU GDPR Compliant)
All database records, personal reservation details, and customer information are hosted on dedicated server infrastructure located in Germany (European Union). Hosting in Germany ensures your data is protected under the strict guidelines of the European General Data Protection Regulation (GDPR) and German Federal Data Protection Act.
2. Industry-Standard Encryption Method
We employ state-of-the-art cryptographic safeguards to ensure your personal and booking details remain private, secure, and tamper-proof:
- Encryption at Rest (AES-256): All stored personal information, passport data, and reservation records are encrypted at rest using AES-256 (Advanced Encryption Standard with 256-bit keys).
- Encryption in Transit (TLS 1.3 / HTTPS): All interactions with our website and booking system are encrypted using TLS 1.3 / HTTPS protocol, preventing eavesdropping or interception.
3. Purpose-Bound Data Usage
Your personal information will ONLY be used to operate your tour. We do not sell, rent, monetize, or use your personal details for third-party advertising or marketing profiling. Your data is collected exclusively to arrange boat charters, reserve permits, coordinate logistics, and ensure your safety.
4. Necessary Data Sharing Limits
We only share personal data to the extent strictly necessary to operate your expedition comfortably, legally, and safely:
Tanjung Puting National Park Authorities
Passenger name, nationality, and passport/ID details are submitted to Balai Taman Nasional Tanjung Puting for official park entry clearance, visitor registration, and ticket purchasing as required by conservation law.
Insurance Companies
Where applicable, passenger details are provided to our insurance partners to issue complimentary national park guest emergency micro-insurance coverage during your expedition.
Operating Local Crew & Licensed Guides
Logistical details (guest names, dietary preferences, emergency contacts, or medical notes) are shared directly with our licensed captains, cooks, and local guides so they can prepare your klotok boat and tailormade trip safely.
5. Your Rights & Data Access
You have the right to inspect, update, or request the deletion of your personal data at any time after your expedition concludes. If you have any questions or wish to exercise your privacy rights, please contact our team.