Privacy Policy

01

Who We Are

Explore Bosnia Trips operates the website explorebosniatrips.com. We provide private guided tours and airport transfers across Bosnia & Herzegovina.

For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR), we are the data controller for personal data processed through this website.

Contact: info@explorebosniatrips.com

02

Data We Collect

If you send us a quote request through the form on this site, we collect the details you enter - your name, phone number, and anything optional you add: where you are travelling from and to, email address, travel dates, the tour or service, group size, how you prefer to be contacted, and notes. These are sent to our inbox at info@explorebosniatrips.com and used only to respond to your enquiry and arrange your trip. If you enter an email address, we send an automatic confirmation to it, so you know your request arrived. We do not add you to any mailing list or share your details with third parties. To prevent spam and misuse of the confirmation email, our server briefly records the IP address, and a scrambled (hashed) form of the email address, of form submissions for rate-limiting; these are deleted automatically and are not linked to your enquiry. Enquiry emails are kept for as long as needed to handle your booking and any follow-up, and you can ask us to delete them at any time. Contact via the WhatsApp, Viber, or Email links takes place within those platforms and is governed by their own privacy policies.

If you leave a review through the form on our Reviews page, we collect your star rating, first name, country (if you give it), the text of your review, and your email address. With your explicit consent, given by ticking the box on the form, we publish your first name, country and review on this website, where anyone can read them. Your email address is never published; we keep it only so we can verify the review is genuine and contact you about it if needed. Reviews are checked by a person before they appear. You can withdraw consent and have your review removed at any time by emailing info@explorebosniatrips.com. Submissions are processed by GitHub, Inc. (see Section 6), where they are stored privately until approved.

When you visit this website, the following data is collected automatically through Google's tools (described in Section 6):

• Approximate location derived from your IP address (country and city level only; raw IP addresses are not stored by us)
• Browser type, device type, and operating system
• Pages visited, time spent, and navigation path through the site
• The website, search engine, or advertisement that referred you here
• Whether you clicked a contact button (WhatsApp, Viber, or Email) during your visit

03

Cookies

We use cookies set exclusively by Google. We do not set any first-party cookies of our own. The cookies in use are:

You can manage or delete cookies at any time through your browser settings. Blocking analytics cookies will not affect your ability to use this website.

04

Why We Process This Data

We use analytics and advertising data solely to:

• Understand how many people visit our website, which pages they view, and where they come from
• Measure which advertising campaigns are generating enquiries
• Track contact actions (clicking WhatsApp, Viber, or Email links) so we can optimise our advertising spend

We do not sell your data. We do not share it with any party other than our data processors listed in Section 6. We do not use it to build individual profiles, make automated decisions, or for any purpose unrelated to operating and improving this website.

05

Legal Basis for Processing

The legal basis we rely on depends on where you are located:

• If you are in the European Economic Area, the United Kingdom, Switzerland, or Bosnia & Herzegovina, we rely on your consent under Article 6(1)(a) GDPR (and equivalent local law). Analytics and advertising cookies are blocked by default, and a cookie banner is shown on your first visit. Until you click "Accept", no analytics or advertising data is collected.
• If you are located elsewhere, where prior opt-in consent is not legally required, we rely on our legitimate interest in measuring website traffic and advertising performance. In these regions analytics is active by default, but you may opt out at any time as described below.

Wherever you are, you may change your choice at any time by clicking "Cookie Preferences" in the footer of any page. Declining disables analytics and advertising cookies and deletes any that were already set. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.

06

Third-Party Data Processors

We use the following Google services, each acting as a data processor on our behalf:

• Google Analytics 4 - website traffic and behaviour analytics
• Google Tag Manager - manages and deploys the analytics and ads tags on this site
• Google Ads - advertising campaigns and conversion tracking

All three are operated by Google LLC, headquartered in the United States. Data may be transferred to and processed on Google servers in the US and other countries. These transfers are conducted under the EU-US Data Privacy Framework and Google's standard contractual clauses.

Google's privacy policy: policies.google.com/privacy

Reviews submitted through our Reviews page are additionally processed by GitHub, Inc. (a Microsoft company, United States), which hosts the private repository where submissions are held for our approval before publication. GitHub's privacy statement: docs.github.com/site-policy

07

Data Retention

Analytics event data is retained in Google Analytics for 14 months. Google Ads conversion data is retained in accordance with Google's own retention schedules. Apart from quote requests you send us (see Section 2), we do not independently store visitor data outside of these Google platforms, and we have no direct control over Google's retention practices beyond the settings available within our accounts.

08

Your Rights & How to Opt Out

If you are in the European Economic Area, United Kingdom, or another jurisdiction with applicable data protection law, you have the right to:

• Request access to personal data held about you
• Request correction of inaccurate data
• Request deletion of your data (the "right to be forgotten")
• Object to or request restriction of processing
• Lodge a complaint with your national data protection supervisory authority

To exercise any of these rights, contact us at info@explorebosniatrips.com. Because analytics data is held within Google's systems, some requests will need to be directed to Google directly.

Opt out of Google Analytics: Install the Google Analytics Opt-out Browser Add-on.

Opt out of Google Ads personalisation: Manage your preferences at adssettings.google.com.

Global Privacy Control (GPC): If your browser sends a Global Privacy Control signal, we automatically honour it as an opt-out of advertising personalisation, without any action needed on your part.

Browser-level cookie control: All major browsers allow you to view, block, and delete cookies through their settings menus.

09

External Links

This site contains links that open WhatsApp (operated by Meta Platforms, Inc.) and Viber (operated by Rakuten Viber), as well as links to our Instagram and Facebook pages (both operated by Meta Platforms, Inc.). These are plain links - we do not embed social media widgets, feeds, or tracking pixels from these platforms. Once you leave explorebosniatrips.com, those platforms' own privacy policies govern any data they collect. We have no control over, and accept no responsibility for, their data practices.

10

Changes to This Policy

We may update this policy if our use of data changes or if legal requirements evolve. The "Last updated" date at the top of the page reflects the most recent revision. Continued use of this website after any update constitutes acceptance of the revised policy.

11

Contact