Privacy Policy (GDPR)

1. Data Controller

Controller: The Nureeff

Contact email: nureeff@yahoo.com

Address: El Kawthar District, Hurghada, Red Sea, Egypt.

2. Personal Data We Process

• Identity/contact data: name, email, phone number (if provided).
• Request details: travel-related inquiry details you submit.
• Technical data: IP address, browser/device metadata, cookies/logs where applicable.
• Communication records: messages exchanged with us.

3. Purposes and Legal Bases (Art. 6 GDPR)

• To answer your requests and provide support: Art. 6(1)(b) (pre-contract/contract).
• To run and secure the website, prevent abuse, and maintain logs: Art. 6(1)(f) (legitimate interests).
• To comply with legal obligations (e.g., lawful requests): Art. 6(1)(c).
• For optional non-essential cookies/analytics/marketing (if enabled): Art. 6(1)(a) (consent).

4. Recipients of Data

We may share data with hosting providers, email/IT providers, security providers, legal advisors, and authorities when legally required. Travel partner websites you visit via links/widgets act as separate controllers under their own policies.

5. International Transfers

Where data is transferred outside the EEA/UK/Switzerland, we apply GDPR Chapter V safeguards, such as adequacy decisions or Standard Contractual Clauses (SCCs), where required.

6. Retention Periods

• Inquiry/contact records: typically up to 24 months after last interaction.
• Security logs: typically up to 12 months unless needed for investigations.
• Longer retention where required by law, disputes, or enforcement needs.

7. Your GDPR Rights

Subject to legal conditions, you may request:

• Access (Art. 15), rectification (Art. 16), erasure (Art. 17).
• Restriction (Art. 18), portability (Art. 20), objection (Art. 21).
• Withdrawal of consent at any time for consent-based processing.
• Not to be subject to solely automated decisions with legal/similar effects (Art. 22).

To exercise rights, contact: nureeff@yahoo.com.

8. Right to Lodge a Complaint

You may lodge a complaint with your local supervisory authority in the EU/EEA, especially in your country of habitual residence, place of work, or where an alleged infringement occurred.

9. Data Provision and Consequences

Providing personal data is generally voluntary. However, if required data is not provided, we may be unable to respond to your request or provide relevant services.

10. Cookies and Similar Technologies

Essential cookies may be used for core site functionality and security. Non-essential cookies should be activated only with valid consent where legally required.

11. Changes to this Policy

We may update this policy from time to time. The latest version is always published on this page with an updated effective date.