Privacy Policy

Last updated: 29th of October 2025

1. Controller of Personal Data

The controller of your personal data is:

MN Projekt Partner OÜ
Trading names: Global Culture & Music Travel and GCM Travel
Registry number: 16333689
VAT number: EE102420300
Tour Operator Guarantee: TRE00116
Address: Uue Maailma 24-5, Tallinn 10131, Estonia
Phone: +372 55 685 704
E-mail: info@gcmtravel.ee

If you have any questions about the processing of your personal data or wish to exercise your rights, please contact us using the above details.

2. Purpose and Legal Basis of Processing

We process personal data only for clear and lawful purposes, and only to the extent necessary for those purposes. The main situations in which we process your data are:

  • Customer communication and bookings: when you contact us through our website, e-mail, or by phone to inquire about or book a trip, we process your contact and booking details to prepare or perform a contract with you.
  • Newsletter and marketing: if you subscribe to our newsletter, we process your data to send travel offers and updates based on your consent. You can withdraw this consent at any time.
  • Customer relationship management and service improvement: we may use certain data for improving our services, customer experience, and website functionality, based on our legitimate interest.
  • Legal and accounting obligations: some data may be processed to comply with legal requirements, such as tax or accounting rules.

We do not use your personal data for any other purposes without your knowledge and consent.

3. Categories of Personal Data

Depending on your interaction with us, we may process the following categories of personal data:

  • Contact information: name, e-mail address, phone number, postal address
  • Booking information: travel destination, dates, number of travelers, special requests
  • Payment details: payment confirmation, billing data (processed securely via payment partners)
  • Newsletter data: subscription preferences
  • Technical data: IP address, browser type, device information, and cookies
  • Special requests: in some cases, we may collect data related to health, dietary preferences, or mobility needs to arrange your travel properly – only with your explicit consent.

We do not collect or retain more information than necessary for the purpose of providing our services.

4. Recipients and Data Transfers

Your data may be shared only with trusted partners when necessary for providing our services, including:

  • Travel service providers such as airlines, hotels, and tour operators
  • Payment processors and financial institutions
  • IT service providers (website hosting, analytics, or customer management systems)
  • Public authorities if required by law
  • Mailing or marketing service providers for newsletter distribution

If any data is transferred outside the European Union or European Economic Area, we ensure that appropriate safeguards and protection measures are in place.

5. Data Retention

We keep personal data only for as long as it is necessary for the purpose it was collected for, or as required by law. Typical retention periods include:

  • Booking and customer data: retained for the duration of the service plus the legally required retention period (usually up to 7 years for accounting records)
  • Newsletter subscriptions: retained until you unsubscribe
  • Technical logs and cookies: retained for a limited period, generally up to 12 months

When data is no longer needed, it will be securely deleted or anonymised.

6. Cookies and Website Analytics

Our website uses cookies and similar technologies to ensure functionality, analyse website use, and provide relevant marketing content.
You can control or delete cookies through your browser settings. However, some parts of the website may not function properly if essential cookies are disabled.

7. Your Rights

You have the following rights regarding your personal data:

  • Right of access: to know what data we hold about you
  • Right to rectification: to correct inaccurate or incomplete data
  • Right to erasure: to request deletion of your data where applicable
  • Right to restriction: to limit data processing in certain circumstances
  • Right to data portability: to receive your data in a structured format
  • Right to object: to object to data processing carried out on the basis of legitimate interests or for direct marketing
  • Right to withdraw consent: at any time, when processing is based on consent

If you wish to exercise any of these rights, please contact us at info@gcmtravel.ee.
We will respond to your request within a reasonable time frame.

If you are not satisfied with our response, you may contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
Website: https://www.aki.ee/
E-mail: info@aki.ee
Address: Tatari tn 39, 10134 Tallinn, Estonia

8. Data Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction, or misuse. These include encryption, restricted access, secure backups, and staff training. Our security practices are reviewed regularly.

9. Data Breach Notification

If a personal data breach occurs that may pose a risk to your rights and freedoms, we will notify the Estonian Data Protection Inspectorate and, where required, the affected individuals without undue delay.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or data protection practices. The latest version will always be available on our website, with the updated date indicated at the top.

Contact

MN Projekt Partner OÜ
Trading names: Global Culture & Music Travel; GCM Travel
Address: Uue Maailma 24-5, Tallinn 10131, Estonia
Phone: +372 55 685 704
E-mail: info@gcmtravel.ee
Registry number: 16333689
VAT: EE102420300
Tour Operator Guarantee: TRE00116