Last updated: 16 August 2026
1. Data Controller
The processing of personal data provided by users through the website www.destinywinners.com is carried out under the responsibility of:
- Company Name: DW Travel Design Europe OÜ
- Registry Code: 17578915
- Registered Office: Tallinn, Republic of Estonia (European Union)
- Contact Email: info@destinywinners.com
2. Personal Data We Collect
Depending on how the user interacts with our website and services, we may collect the following categories of personal data:
- Contact and identification data: First name, surname, email address, phone number and country of residence.
- Booking and travel preference data: Desired dates, number of travellers, budgets, special requests or specific needs communicated by the client.
- Browsing data: IP address, device type and behaviour on the website through cookies (subject to your consent via the corresponding banner).
- Documentary data (once a booking is formalised): Passport copies, identification numbers, dates of birth and emergency contact details, strictly necessary for managing national park permits, domestic flights or accommodation at destination.
3. Purpose of Processing
We process your personal data for the following purposes:
- Managing enquiries and tailor-made itineraries: Handling your queries, designing personalised travel proposals and scheduling advisory meetings.
- Executing the booking: Managing the contracting of tourism services and issuing contractual documentation.
- Customer service and communications: Maintaining fluid communication about the status of your proposal or trip before, during and after it.
- Legal and tax compliance: Invoicing, accounting and compliance with legal obligations imposed by European and Estonian authorities.
- Commercial communications: Sending information about new itineraries or promotions, only where the user has given prior, explicit consent.
4. Legal Basis for Processing
The legal basis justifying the processing of your data under the GDPR is:
- Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR): For designing requested proposals, managing the booking and pre-trip commercial support.
- Explicit consent of the data subject (Art. 6.1.a GDPR): For data collected through contact forms, commercial subscriptions or the installation of analytics cookies.
- Compliance with legal obligations (Art. 6.1.c GDPR): For issuing invoices and complying with regulatory requirements applicable to DW Travel Design Europe OÜ.
5. Recipients and International Data Transfers
5.1. Disclosure to third parties
Your personal data will not be sold or disclosed to third parties for advertising purposes. It will only be shared with providers essential to delivering the service (for example, payment gateways, web hosting providers or accounting services).
5.2. International Data Transfer (Tanzania)
In order to materially execute the booking of your safari or trip, DW Travel Design Europe OÜ will transfer the personal data strictly necessary (such as full names, passport details and logistical requirements) to the local ground operator:
- Recipient entity: Destiny Winners Safari & Tours
- Location: United Republic of Tanzania (East Africa)
- Transfer safeguards: The transfer is carried out under Article 49.1.b GDPR, as it is strictly necessary for the performance of a contract between the user and the data controller, or for the implementation of pre-contractual measures taken at the user’s request.
6. Data Retention Period
Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected:
- Unconfirmed itinerary enquiries: Maximum of 2 years from the last interaction, unless earlier deletion is requested.
- Clients with a confirmed booking: For the duration of the contract and, thereafter, for the periods legally required under applicable EU tax, accounting and commercial regulations (generally between 5 and 10 years).
7. Your Rights
As the data subject, the GDPR grants you the following rights:
- Access: Find out what personal data we hold about you.
- Rectification: Request the correction of inaccurate or incomplete data.
- Erasure («right to be forgotten»): Request the deletion of your data when it is no longer necessary for the purposes it was collected for.
- Objection: Object to the processing of your data for specific purposes (for example, commercial communications).
- Restriction of processing: Request the temporary blocking of processing in certain circumstances.
- Portability: Receive your data in a structured, commonly used, machine-readable format.
To exercise any of these rights, you may send a written request, enclosing a copy of an official identity document, to: info@destinywinners.com
Furthermore, if you consider that your rights have not been properly addressed, you have the right to lodge a complaint with the competent data protection supervisory authority in the European Union (for example, the Andmekaitse Inspektsioon in Estonia or the relevant authority in your own country of residence).
8. Data Security
DW Travel Design Europe OÜ applies appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or accidental destruction. All communications through our website are encrypted using the SSL protocol.
For more information about the cookies we use, please see our Cookie Policy.