Privacy Policy

Last updated: 29 June 2026

This privacy policy informs you about how Masry Tours processes personal data when you visit our website, contact us, request or book a trip, or use our other services.

1. Person in charge

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Masry Tours
Owner: Ahmed Abdelrahman
Malmöer Street 29
10439 Berlin
Germany
E-Mail: info@masrytours.de

2. Purposes and legal bases for processing

We process personal data exclusively within the framework of applicable data protection regulations.

2.1 Contract Performance and Pre-contractual Communication

We process personal data to handle travel requests, plan individual trips, accept bookings, process contracts, allocate payments, send travel documents and communicate with you in connection with your trip.

Legal basis Article 6(1)(b) GDPR

2.2 Fulfilment of legal obligations

We process data to the extent necessary to fulfil legal obligations, in particular commercial, tax, accounting and retention-related duties.

Legal basis Article 6(1)(c) GDPR

2.3 Protection of Legitimate Interests

Where necessary, we process personal data to safeguard our legitimate interests. These include, in particular, the secure and reliable provision of our website, the processing of general enquiries, the prevention of misuse, and the assertion or defence of legal claims.

Legal basis Art. 6(1)(f) GDPR

2.4 Processing based on consent

To the extent that you give us your consent, we process your data on the basis of Art. 6(1)(a) GDPR, or in the case of special categories of personal data on the basis of Art. 9(2)(a) GDPR.

Consent can be withdrawn at any time with future effect.

3. Categories of Personal Data

Depending on the type of use of our website and our services, the following data, in particular, may be processed:

• Contact details, for example name, email address and phone number
• Communication data and message content
• Travel, booking and contract data
• Details of destination, travel dates, duration of trip and number of participants
• Details of individual travel wishes and desired activities
• Invoice, payment and transaction data
• Pass or ID data, as far as this is required for travel
• Technical data such as IP address, browser type, operating system, and time of access
• Voluntarily provided information on special requirements

4. Website Hosting and Technical Provision

Our website is hosted by the following provider:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

When you visit our website, STRATO processes technically necessary data that can be automatically transmitted by your browser.

This can include, in particular:

• IP address
• Date and time of access
• Requested page or file
• Amount of data transferred
• Browser type and browser version
• Operating system used
• Referrer URL
• Page view status

Processing is required to technically provide the website, ensure its stability and security, and detect abusive access.

Legal basis Art. 6(1)(f) GDPR

With STRATO, an agreement on data processing is in place, as required, in accordance with Article 28 GDPR.

5. SSL/TLS encryption

Our website uses SSL or TLS encryption for security reasons.

You can recognise an encrypted connection by the fact that your browser's address bar begins with „https://“. This protects data that you submit to us from unauthorised access by third parties.

6. Contact via email or phone

When you contact us by email or telephone, we will process the data you provide to handle your enquiry.

In particular, the following data can be processed:

• Name
• Email address
• Phone number
• Message content
• Details of a desired or booked trip
• Date and time of communication

If contact is made in connection with a travel request or booking, the legal basis is Art. 6 para. 1 lit. b GDPR.

For general enquiries, processing is carried out on the basis of Art. 6 (1) (f) GDPR.

Our business email communications are handled via STRATO's mail servers.

7. Contact via WhatsApp

On our website, there is a link that allows you to contact us via WhatsApp.

When you contact us via WhatsApp, we will process in particular:

• Your telephone number
• Your profile name
• the content of your message
• files or information voluntarily submitted by you
• Date and time of communication

The use of WhatsApp is voluntary. You can alternatively contact us by email.

If the communication serves the initiation or performance of a travel contract, the processing is based on Article 6(1)(b) GDPR. In other cases, it is based on Article 6(1)(f) GDPR.

WhatsApp processes data according to its own privacy policy. It cannot be ruled out that personal data may be processed outside of the European Union or the European Economic Area.

8. Contact and Travel Planning Forms

On our website, we provide a general contact form as well as a custom trip planning form.

For the technical implementation of the forms, we use the WordPress extension Forminator.

Depending on the form, the following details in particular may be processed:

• Name
• Email address
• Phone number
• Desired destination
• Desired period of travel
• Trip duration
• Number of travellers
• Preferred type of trip and activities
• Budget details
• individual wishes and messages
• Date and time of submission
• Technical connection data

The form submissions are stored in our WordPress website's database and are additionally sent to us by email.

Processing takes place for the purpose of handling your request and preparing a potential travel contract in accordance with Art. 6 (1) lit. b GDPR.

We also process general contact inquiries on the basis of Art. 6(1)(f) GDPR.

9. Travel enquiries, bookings and contract processing

When you request or book a trip with us, we process the data required for planning, organising, and carrying out the trip.

This can include, in particular:

• Name and contact details
• Address
• Date of birth, if required
• Travel and booking data
• Names and number of travellers
• Accommodation and transport requests
• Billing and payment details
• ID or passport details, where required
• individual requirements and travel wishes
• Communication and contract documents

The processing is carried out for the performance of pre-contractual measures and the fulfilment of the travel contract in accordance with Art. 6(1)(b) GDPR.

Where data is processed to fulfil legal obligations, the legal basis is Article 6(1)(c) GDPR.

10. Special categories of personal data

As part of your travel arrangements, you are welcome to inform us of any health restrictions, allergies, mobility requirements, dietary needs, or other special requests.

Such information may constitute special categories of personal data within the meaning of Art. 9 GDPR.

We only process this information to the extent necessary for the safe and proper planning or execution of the trip and you have provided us with the information voluntarily.

Legal basis Article 9(2)(a) GDPR

Please only send us sensitive information that is actually required for your trip.

11. Passing on to service providers and travel partners

For the planning and execution of a requested or booked trip, it may be necessary to pass on personal data to carefully selected service providers and travel partners.

This can include, in particular:

• Hotels and other accommodation
• Local guides and Egyptologists
• Transport companies and drivers
• Ship, Dahabiya and Felucca operators
• Local activity organiser
• Restaurants, hosts and workshops
• Insurance and assurance companies
• other service providers required for the trip

Only the data that the respective service provider requires for the preparation or performance of its service will be passed on.

Legal basis Article 6(1)(b) GDPR

12. Data transmission to Egypt and other third countries

As our travels predominantly take place in Egypt, it may be necessary to transfer personal data to service providers and travel partners outside the European Union and the European Economic Area.

The transmission shall only be made to the extent necessary for the preparation or execution of the trip you have requested or booked.

We limit the data transmitted to the necessary amount and carefully select our partners.

To the extent that a transfer to a third country is necessary for the performance of a contract concluded with you or for the implementation of pre-contractual measures, it shall take place in particular on the basis of Art. 49 (1) lit. b GDPR.

13. Invoices and Payment Processing

Payments are not currently processed through an automated online shop or a Shopify payment system on this website.

As far as payments are made by bank transfer or by an individually agreed payment method, we process in particular:

• Payer Name
• Invoice Details
• Banking and Transaction Information
• Payment amount
• Payment Date
• Purpose
• Payment status

The processing is carried out for the performance of the contract in accordance with Art. 6 para. 1 lit. b GDPR, as well as for the fulfilment of legal obligations in accordance with Art. 6 para. 1 lit. c GDPR.

14. WordPress and technical extensions

Our website is based on the open-source content management system WordPress.

WordPress forms the technical foundation for managing our pages, travel offers, posts, forms, and translations.

Public user accounts or a registration for visitors are not currently offered.

14.1 Forminator

For the contact and travel planning forms, we use Forminator. The submitted form data is stored in our website's database and forwarded to us via email.

14.2 Sending website emails

For the reliable sending of messages from our website, we use the WordPress extension WP Mail SMTP.

The extension sends the messages via an encrypted SMTP connection to STRATO's mail server.

In particular, the recipient address, sender details, subject and message content are processed.

15. Multilingualism and TranslatePress

Our website is available in multiple languages. We use the WordPress plugin TranslatePress to provide the different language versions.

Already created translations are stored in the database of our WordPress website.

15.1 Automatic Translation with TranslatePress AI

We use TranslatePress AI for the automatic translation of publicly visible website content.

This involves transmitting the texts to be translated to the translation and AI systems used by TranslatePress. TranslatePress can use various machine translation services and language models for this purpose.

After translation, the translated content will be stored in our website's database.

The content of your contact or travel planning inquiries is not intentionally transmitted to TranslatePress AI for automatic translation.

The processing serves our legitimate interest in making our website and travel offers accessible to an international audience in multiple languages.

Legal basis Art. 6(1)(f) GDPR

16. Cookies and similar technologies

Our website may use technically necessary cookies or comparable storage technologies to the extent they are necessary for the secure and functional operation of the website.

This can include in particular technologies with which:

• the selected language will be saved
• a session is technically managed
• Formulas provided safely
• registered administrators detected
• security-relevant settings are saved

Technically necessary cookies and storage technologies are used on the basis of § 25 (2) No. 2 TDDDG.

Where personal data is processed, this is done on the basis of Art. 6(1)(f) GDPR.

As things currently stand, we do not use our own analytics or advertising tracking services such as Google Analytics, Google Ads, or Meta Pixel.

Should consenting-required analytical, marketing, or third-party technologies be used in the future, they will only be activated after your prior consent. This privacy policy will be updated accordingly in this case.

17. Links to social networks

On our website, there are simple links to our appearances on Instagram, Facebook, and YouTube.

Upon simply visiting our website, no data is automatically transmitted to the respective platforms through these links.

Only when you click on a link will you leave our website and open the page of the respective provider. From that point on, the data protection regulations of the respective platform operator apply.

If you are logged into a platform at the same time, the provider may be able to associate the visit with your user account.

18. Recipients of personal data

Personal data may be transferred, insofar as this is necessary and legally permissible, in particular to the following categories of recipients:

• Hosting and email service provider
• IT and technical support service provider
• Tax advisor, accounting and legal service provider
• Banks and Payment Service Providers
• Insurance and assurance companies
• Hotels, tour guides, drivers, and other service providers
• Authorities and Public Bodies
• Translation and Language Service Providers

Personal data will not be passed on for third-party advertising purposes unless you have expressly consented.

19. Storage duration

We only store personal data for as long as is necessary for the respective processing purpose or as long as statutory retention obligations exist.

General enquiries will be deleted once they have been conclusively processed and no legal obligations or legitimate interests preclude deletion.

Data associated with bookings, contracts, invoices, and payments are stored within the statutory retention periods applicable under commercial and tax law.

Once the respective deadlines have expired, the data will be deleted or blocked, provided there is no further legal basis for processing.

20. Your Rights

You have the following rights within the scope of the legal requirements:

• Right to information in accordance with Article 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure under Article 17 GDPR
• Right to restriction of processing under Article 18 GDPR
• Right to data portability pursuant to Article 20 GDPR
• Right to object pursuant to Art. 21 GDPR
• Right to withdraw consent pursuant to Art. 7(3) GDPR
• Right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR

The withdrawal of consent shall not affect the lawfulness of processing carried out before its withdrawal.

To exercise your rights, you can contact us at the following email address:

info@masrytours.de

21. Objection to processing

Where we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time for reasons relating to your particular situation.

We will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for processing or the processing is necessary for the establishment, exercise, or defence of legal claims.

Right of complaint to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

Our responsible supervisory authority is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
E-Mail: mailbox@datenschutz-berlin.de

23. Duty to Provide Data

The provision of personal data is partly required to process a request, plan a trip or fulfil a contract.

Without the necessary information, we may not be able to offer individual travel planning, booking, or contract execution.

24. Automated decision-making

An exclusively automated decision-making, including profiling, within the meaning of Article 22 GDPR does not take place.

The automatic translation of website content does not constitute an automated decision regarding visitors or customers.

25. Data Processing Security

We take appropriate technical and organisational measures to protect personal data from loss, unauthorised access, alteration or disclosure.

These include, in particular, encrypted connections, access restrictions, protected user accounts, and regular technical updates.

Please note that data transmission over the internet is not entirely risk-free, despite appropriate security measures.

26. External Links

Our website may contain links to external websites.

After clicking on an external link, the privacy policy of the respective provider applies. We generally have no influence on the content and data processing of external websites.

27. Changes to this Privacy Policy

We reserve the right to amend this privacy policy if legal requirements, our services or the technical systems used change.

The current version published on this website applies.