Privacy in brief

Quick take on Batur jeeps

Every page of Mount Batur Jeep Tour can be read without an account. We set no cookies and run no analytics, advertising or tracking scripts. What does reach us is the connection data any web server sees when it delivers a page, described below.

Nothing is booked on these pages. Reservations happen on GetYourGuide once you pick a ride, under their own privacy rules on GetYourGuide after choosing a tour, and their privacy rules apply there.

Operator of this site

Mount Batur Jeep Tour
[email protected]

No statute requires us to name a data protection officer, so we have none. Send questions about your data to , so there is none. Questions about your data go to [email protected].

What the web server logs

For each page or file your browser requests, the web server notes the IP address, the moment, the address asked for, the page you came from and the identifier your browser sends about itself and your operating system.

These records are needed to deliver the site, keep it stable, detect attacks and misuse, and count page reads. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a site that works and stays safe. Raw records are erased after 90 days at the latest; counts without any IP address are kept longer. A hosting company runs the server and handles this data for us, on our instructions only.

The intermediary ahead of the server

Web traffic and email for this domain go through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA), which serves the site quickly, blocks attacks and relays email to our mailbox. For that purpose Cloudflare handles your IP address and technical connection data.

The lawful ground is Article 6(1)(f) GDPR, because we want the pages to load fast and stay safe from attacks. Cloudflare holds a certificate under the EU-US Data Privacy Framework, and the EU Commission's standard contractual clauses back that up. Cloudflare sets out how it handles data at site. Cloudflare is certified under the EU-US Data Privacy Framework, and the European Commission's standard contractual clauses apply in addition. Cloudflare describes its own handling at cloudflare.com/privacypolicy.

Photos of the jeep rides

Tour photographs load directly from the image servers of GetYourGuide (GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany). To display one, your browser contacts those servers and passes them your IP address. We have no influence on that exchange.

The legal basis is Article 6(1)(f) GDPR: we want each ride shown with the provider's current photographs.

After you press Book

A booking link goes straight to GetYourGuide and carries our partner number, which tells the platform that the booking began here.

Once you are on GetYourGuide, the platform uses its own cookies and processes your data under its own privacy policy. We receive commission reports with totals only, with no names, contact details or payment data.

Videos on this site

Videos are embedded through YouTube's privacy-enhanced mode and stay a still image until you press play, so your browser does not contact YouTube before that. After you press play the video loads from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which receives your IP address and may set cookies.

By pressing play on the video you consent: Article 6(1)(a) GDPR and Section 25(1) TDDDG. Google sets out its rules at : Article 6(1)(a) GDPR and Section 25(1) TDDDG. Google's policy is at policies.google.com/privacy.

What this browser keeps

Your browser keeps a few small notes so the site can follow your choices. They stay on your device and are unreadable to us:

• checklist boxes you have ticked, so they are still ticked on your return (local storage, kept until you wipe it);
• the currency chosen in the menu, which keeps prices in it on every page (local storage, kept until you wipe it);
• if you open a chat: its reference number, an access key, your email address and a copy of the conversation, so it waits for you (local storage, kept until you wipe it);
• a note that the chat bubble has appeared once, so it stays quiet afterwards (session storage, gone when the tab closes);
• a note that the leaving window has appeared once, so it does not return (session storage, gone when the tab closes).

These notes are strictly necessary for functions you use yourself (Section 25(2) No. 2 TDDDG). Your browser settings let you remove them whenever you wish.

How the chat box works

Starting a chat means handing us your name, email address and messages. The chat service also notes the country your connection comes from, a scrambled version of your IP address (a salted hash that cannot be turned back into the address) and the page and language you wrote from.

The conversation sits with Cloudflare (named above) and each message you write is relayed to our account on the Telegram messaging service, which processes it outside the European Union; our replies travel back the same way. Details: telegram.org/privacy. Your email address is used only to answer you.

The legal basis is Article 6(1)(b) GDPR, because you ask and we answer, and Article 6(1)(f) GDPR for the scrambled IP address, which serves only to stop abuse and spam. A conversation is erased automatically 180 days after its last message.

When mail is your route

What you write in an email is used only to answer you. The legal basis is Article 6(1)(f) GDPR, together with Article 6(1)(b) GDPR where your message concerns a contract. We delete the exchange when it is finished unless the law requires us to keep it.

Typefaces and map pictures

Typefaces are delivered by our own server, so no font provider learns of your visit. Maps are pictures hosted on our server and drawn from OpenStreetMap data; viewing or zooming them contacts no map service. A "Google Maps" link opens Google only when you press it.

Our source links

The guides cite official and expert sources and link to them. Those sites learn nothing about you until you open a link, and from then on their own privacy rules govern.

Rights you hold

You may request information on the data we hold about you (Article 15 GDPR), its correction (Article 16) or erasure (Article 17), limits on its processing (Article 18) and a portable copy (Article 20). Where we rely on legitimate interest you can object at any time (Article 21), and consent you gave can be withdrawn for the future. A short email to [email protected] covers it.

You may also lodge a complaint with a data protection supervisory authority, notably in the EU country where you live or work or where the alleged infringement happened (Article 77 GDPR).

We make no automated decisions about you and build no profiles. You do not have to give us data, but a page cannot reach your screen without the technical connection data.