Privacy Policy
This Privacy Policy explains how Cultiva Tours collects, uses, stores, and protects personal data when you browse our website, submit a booking request, or contact us.
Last updated: March 23, 2026
Data controller
FM Finance s.r.o. acts as the data controller for personal data processed through this website and our travel services.
Company name: FM Finance s.r.o.
Company ID (ICO): 55225012
Registered address: Ceskoslovenskej armady 68/36, 977 01 Brezno
For privacy requests, please write to filip@cultivatours.com.
What data we collect
- Identity and contact data such as your name, email address, and phone number when you submit forms.
- Trip and booking data such as preferred dates, destination, group size, and special requirements.
- Communication data such as messages, inquiries, and support history.
- Technical and usage data such as browser, device, approximate location, and site analytics (when non-essential cookies are accepted).
- Transaction-related data where relevant for quotes, invoicing, or payments processed with our service partners.
Purposes and legal bases (GDPR)
We process personal data only when we have a valid legal basis under GDPR. Depending on the context, one or more of the following legal bases apply:
- Contract / pre-contractual steps - to prepare offers, confirm availability, process bookings, and deliver travel services.
- Legitimate interests - to operate and secure our website, improve our services, and communicate with customers.
- Legal obligation - to comply with accounting, tax, consumer protection, and other legal requirements.
- Consent - for optional cookies and analytics or marketing-related processing where consent is required.
Recipients and sharing of data
We only share personal data when necessary to provide services, operate our business, or comply with law. Recipients may include:
- Payment service providers and invoicing tools.
- Booking, transport, and local experience partners needed for your trip.
- IT, hosting, analytics, and communication service providers.
- Authorities where disclosure is required by law.
We do not sell personal data. Where service providers process data on our behalf, we use appropriate contractual safeguards.
International data transfers
Some providers may process data outside the European Economic Area (EEA). In such cases, we apply appropriate safeguards, such as adequacy decisions or standard contractual clauses, to help ensure an equivalent level of data protection.
Data retention
We keep personal data only as long as necessary for the purposes described in this policy. Retention periods depend on the data type and purpose, including legal, accounting, contractual, and dispute-resolution obligations.
Your rights
You may request access, correction, deletion, restriction, objection, or portability of your personal data (where applicable). You can also withdraw consent at any time for processing based on consent, including cookie choices. You also have the right to lodge a complaint with your local data protection authority.
Data security
We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. While no system is completely risk-free, we continuously improve safeguards appropriate to the nature of the data we process.
Children's privacy
Our services are not directed to children without parental or guardian involvement. If you believe personal data of a minor was provided to us improperly, contact us and we will review and handle the request promptly.
Cookies and tracking
For details about cookie categories and consent management, see our Cookie Policy.
Policy updates
We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. The latest version is always published on this page.
Contact and requests
If you have privacy questions or want to exercise your rights, contact us via our contact page or by email at filip@cultivatours.com.