Privacy Policy

Last updated: July 2026

We appreciate your visit to our website and your interest in the services offered by Orient Discovery. Protecting your personal data is of great importance to us. We process your personal data exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Below, we explain which personal data we collect, the purposes for which we process it, and the rights you have as a data subject.

1. Data Controller

The controller within the meaning of Article 4(7) GDPR is:

Orient Discovery
Owner: Hamdi Schaker

Herderstraße 3a
40237 Düsseldorf
Germany

Phone: +49 177 2460522

Email: info@orientdiscovery.com

Website: https://orientdiscovery.com

2. Definitions

This Privacy Policy uses the terminology of the General Data Protection Regulation (GDPR). Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, address, telephone number, email address, IP address, or booking details.

Processing means any operation performed on personal data, including, in particular, the collection, storage, use, transmission, deletion, or restriction of processing.

3. Legal Bases for Data Processing

We process personal data exclusively on the basis of the applicable legal provisions.

Depending on the specific processing activity, the legal basis is, in particular:

• Article 6(1)(a) GDPR (Consent)

• Article 6(1)(b) GDPR (Performance of a contract or pre-contractual measures)

• Article 6(1)(c) GDPR (Compliance with a legal obligation)

• Article 6(1)(f) GDPR (Legitimate interests)

Where special categories of personal data are processed (for example, health information voluntarily provided for certain excursions), such processing is carried out only to the extent permitted by applicable law.

4. Website Hosting

Our website is hosted on the servers of an external hosting provider.

The hosting provider processes personal data solely on our behalf and on the basis of a Data Processing Agreement in accordance with Article 28 GDPR.

When you visit our website, the following data may be processed in particular:

• IP address

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL

• Pages visited

• Amount of data transferred

• Access status

This data is processed for the purpose of providing the website, ensuring IT security, and analyzing technical errors.

The legal basis is Article 6(1)(f) GDPR.

5. Server Log Files

Our hosting provider automatically collects and stores information in so-called server log files.

This information may include, in particular:

• IP address

• Browser type

• Operating system

• Host name of the accessing device

• Time of the server request

• Pages visited

• Referrer URL

• Access status

This data is processed solely to ensure the stable operation of the website, optimize our services, and detect and prevent misuse.

This data is not merged with other data sources.

The legal basis for this processing is Article 6(1)(f) GDPR.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data.

Our website uses SSL/TLS encryption, ensuring that all data transmitted between your device and our web server is encrypted.

Despite all security measures, complete protection of data transmitted over the Internet cannot be guaranteed.

7. Data Retention

Personal data is stored only for as long as necessary to fulfill the respective processing purposes.

In addition, we retain data where required by statutory retention obligations, particularly under the German Commercial Code (HGB), the German Fiscal Code (AO), or other applicable legal provisions.

Once the applicable retention periods have expired, the data will be deleted unless it is still required for the performance of a contract or the establishment, exercise, or defense of legal claims.

8. Cookies and Consent Management

Our website uses cookies and similar technologies to ensure the proper functioning of the website, improve user experience, and—where you have given your consent—to perform statistical analyses and marketing activities.

Cookies are small text files that are stored on your device.

We distinguish between:

• Strictly necessary cookies

• Analytics cookies

• Marketing cookies

• Cookies from third-party services

Strictly necessary cookies are stored on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR and Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

All other cookies are set only with your explicit consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG.

You may withdraw or modify your consent at any time through the cookie settings.

9. Contacting Us

You may contact us through various communication channels.

These include, in particular:

• Contact form

• Email

• Telephone

• WhatsApp

In doing so, we may process the following personal data:

• First and last name

• Telephone number

• Email address

• Content of your message

• Travel details, where applicable

Your data is processed solely for the purpose of handling your inquiry and carrying out pre-contractual measures.

The legal bases are:

• Article 6(1)(b) GDPR

• Article 6(1)(f) GDPR

Your data will be deleted once your inquiry has been fully processed, provided no statutory retention obligations apply.

10. Communication via WhatsApp

To provide fast and convenient communication, we offer the option of contacting us via the WhatsApp messaging service.

Provider:

WhatsApp Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

When using WhatsApp, the following data may be processed in particular:

• Telephone number

• Name

• Message content

• Date and time of communication

Please note that WhatsApp may also transfer personal data to other companies within the Meta Group.

The use of WhatsApp is entirely voluntary.

The legal basis is Article 6(1)(b) GDPR where the communication relates to booking inquiries or booking processing; otherwise, Article 6(1)(f) GDPR applies.

11. Mediation of Tourist Services

Orient Discovery acts as an intermediary between travelers and carefully selected local service providers in Egypt for individual tourist services.

We act solely as an intermediary.

To process a booking, we may process the following personal data in particular:

• First and last name

• Telephone number

• Email address

• Hotel or pickup address

• Place of stay

• Travel date

• Number of participants

• Booked services

• Voluntarily provided special requests

• Voluntarily provided health information where necessary for the safe performance of the booked service

Your data is processed exclusively for arranging the booked service and fulfilling the contract.

The legal basis is Article 6(1)(b) GDPR.

12. Disclosure of Personal Data

For the purpose of providing the booked tourist service, we disclose only the personal data that is necessary for the performance of the respective service.

Recipients may include, in particular:

• Local tour operators

• Excursion providers

• Transfer companies

• Diving centers

• Boat operators

• Tour guides

• Hotels

• Other service providers involved in the booked service

No further disclosure will take place unless required by law or unless you have expressly given your consent.

13. Transfer of Personal Data to Egypt

As our contractual partners are primarily located in Egypt, it is necessary to transfer personal data to a third country outside the European Union in order to perform the booked tourist services.

Only the personal data required for providing the booked service will be transferred.

The transfer is carried out on the basis of Article 49(1)(b) GDPR, as it is necessary for the performance of the contract concluded between you and the respective service provider.

We ensure that personal data is disclosed only to carefully selected and trustworthy contractual partners.

14. Booking Confirmation

Once your booking has been successfully completed, you will receive a booking confirmation by email.

This confirmation will generally include:

• Booking reference number

• Booked service

• Travel date

• Participants

• Price

• Payment information

• Important information regarding the booked service

The processing of this data is carried out for the performance of the contract in accordance with Article 6(1)(b) GDPR.

15. Payment Processing

We offer various payment methods for the payment of the tourist services we arrange.

Your payment data is processed solely for the purpose of payment processing and contract fulfillment in accordance with Article 6(1)(b) GDPR.

Depending on the selected payment method, the personal data required for processing the payment will be transmitted to the respective payment service provider.

The data processed may include, in particular:

• First and last name

• Billing address

• Email address

• Payment amount

• Booking reference

• Payment status

Orient Discovery does not store complete credit card or bank account details.

16. PayPal

If you choose PayPal as your payment method, payment processing is carried out by:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

The personal data required to process the payment will be transmitted to PayPal.

The processing is based on Article 6(1)(b) GDPR.

Further information can be found in PayPal's Privacy Policy.

17. Bank Transfer

If you choose to pay by bank transfer, we process only the data necessary for completing the payment.

This includes, in particular:

• Account holder's name

• IBAN

• Payment amount

• Booking reference

• Payment date

The processing is carried out solely for the performance of the contract in accordance with Article 6(1)(b) GDPR.

18. Google Tag Manager

Our website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used solely to manage and deploy website tags.

Google Tag Manager itself does not store personal data or create user profiles.

However, tags integrated through Google Tag Manager may process personal data independently.

19. Google Analytics

If you have given your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited.

Google Analytics helps us analyze how visitors use our website so that we can continuously improve our services.

The following data may be processed in particular:

• IP address (shortened or anonymized where technically possible)

• Browser information

• Device type

• Operating system

• Pages visited

• Time spent on the website

• Click behavior

• Visitor source

• Language settings

Processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

You may withdraw your consent at any time via the cookie settings.

20. Meta Pixel (Facebook Pixel)

If you have given your consent, we use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.

The Meta Pixel enables us to measure the effectiveness of our advertising campaigns, create target audiences, and display personalized advertising on Facebook and Instagram.

The following data may be processed in particular:

• IP address

• Browser information

• Device information

• Pages visited

• Booking or purchase events

• Referrer URL

Processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.

21. Remarketing

Our website may use remarketing technologies provided by Google or Meta.

These technologies enable visitors to our website to receive interest-based advertising on other websites or within social networks.

Processing takes place only after you have given your explicit consent.

The legal basis is Article 6(1)(a) GDPR.

22. Facebook

Our website may include links to or content from the social network Facebook.

The provider is:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
Ireland

When accessing such content, personal data, particularly your IP address and browser information, may be transmitted to Meta.

Where cookies are used, processing takes place only with your consent.

23. Instagram

Our website may include content from or links to the social network Instagram.

The provider is likewise:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
Ireland

When visiting such pages, personal data may be transmitted to Meta.

This may include, in particular:

• IP address

• Browser information

• Device information

• Pages visited

• Referrer URL

Processing is carried out solely on the basis of your consent where required by applicable law.