Privacy

Controller Charles Arasululu Nnko, Ndefo Africa Safaris, Arusha 23000, Tanzania. For privacy questions or to exercise your rights, contact ndefosafaris@gmx.de. Visiting this website Vercel Inc., USA, hosts this website. Technically necessary connection data, such as your IP address, access time, requested file, browser information and, where applicable, referring page, is processed for delivery, troubleshooting and security. Where the GDPR applies, the basis is Article 6(1)(f), our legitimate interest in a secure, functioning website. Vercel's data processing terms include EU standard contractual clauses for international transfers: https://vercel.com/legal/dpa and https://vercel.com/legal/privacy-notice. Your enquiry We use your name, email address and optional details about travel dates, group size and wishes to answer your enquiry and plan your trip. Szilvia and, where necessary for your request, Charles in Tanzania handle these details. The basis is Article 6(1)(b) GDPR for pre-contractual enquiries or Article 6(1)(f) for general correspondence. Please do not send passport copies, payment details or health information through the form. Delivery and recipients Form messages are transmitted through Vercel and Resend (Plus Five Five, Inc., USA) to ndefosafaris@gmx.de, a mailbox hosted by GMX. Resend processes message content and delivery information. Its data processing terms include EU standard contractual clauses: https://resend.com/legal/dpa. Sending an enquiry does not subscribe you to a newsletter. Retention To protect the form against automated abuse, a cryptographically protected counter derived from the IP address is held temporarily in memory for up to 15 minutes. The basis is Article 6(1)(f) GDPR, our legitimate interest in preventing abuse. Form entries are not stored in a website database. Messages remain in the mailbox for as long as needed to handle the enquiry, deliver your trip or meet statutory retention obligations. Technical logs are subject to the respective providers' retention and security arrangements. Cookies, media and external links We do not use advertising or analytics trackers. Fonts, photos and videos are served through the website hosting. The slideshow and form do not require persistent browser storage. External websites, such as Google reviews, are accessed only when you click their links; their own privacy rules apply. The host's necessary security mechanisms may process connection data. Your rights Subject to the legal conditions, you may request access, correction, erasure, restriction or portability and object to processing based on legitimate interests. You may withdraw any consent for future processing and complain to a competent data protection authority, in particular in your EU country of habitual residence. Providing information is voluntary; without contact details we cannot reply. We do not use automated decision-making or profiling. Updated: 3 October 2026