Privacy Policy

Last updated: 13.12.2025

1. Data Controller

This Privacy Policy explains how personal data is collected, used, and protected by:

SIA Alvora Travel
Registration number: 40203665810
VAT number: LV40203665810
Registered address: Skaistkalnes iela 17–2, Riga, LV-1004, Latvia
Email: info@alvoratravel.com
Website: www.alvoratravel.com

SIA Alvora Travel acts as the data controller within the meaning of Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”).

2. Scope of This Policy

This Privacy Policy applies to personal data collected through:

  • Our website and contact forms

  • Email, phone, messaging, and other communications

  • Booking requests, quotations, contracts, and service delivery

  • Marketing communications where permitted by law

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

3. Personal Data We Process

We may process the following categories of personal data:

3.1 Identification & Contact Data

  • Name, company name

  • Email address

  • Phone number

  • Billing and invoicing details

3.2 Service & Travel Data

  • Travel dates, locations, itineraries

  • Passenger lists (names, group size)

  • Special service requests (e.g. mobility assistance)

3.3 Communication Data

  • Emails, messages, call records

  • Requests, feedback, complaints

3.4 Technical & Usage Data

  • IP address

  • Browser and device information

  • Cookies and website usage data

We do not intentionally collect sensitive personal data unless strictly required for service fulfilment and permitted by law.

4. Legal Basis for Processing

We process personal data only where permitted by GDPR, under one or more of the following legal bases:

  • Performance of a contract – to provide and manage booked services

  • Legal obligation – accounting, tax, regulatory, and safety requirements

  • Legitimate interests – operational communication, service improvement, fraud prevention

  • Consent – where required, such as for marketing communications or non-essential cookies

5. Purpose of Processing

Personal data is processed for the following purposes:

  • Handling inquiries, quotations, and bookings

  • Coordinating and delivering transportation services

  • Communicating operational updates and service information

  • Issuing invoices and managing payments

  • Complying with legal and regulatory obligations

  • Improving website functionality and service quality

  • Sending marketing communications where legally permitted

6. Data Sharing & Subcontractors

To fulfil contracted services, personal data may be shared with trusted third-party service providers, such as:

  • Transport operators and drivers

  • Local coordinators or logistics partners

  • Payment and IT service providers

Such data is shared strictly on a need-to-know basis and solely for service fulfilment and operational purposes.

Third-party providers act as independent contractors and process personal data under contractual obligations to ensure confidentiality and data protection.

7. International Data Transfers

Due to the international nature of our services, personal data may be transferred to or processed in countries outside the European Economic Area (EEA).

Where such transfers occur, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission, or

  • Transfers to jurisdictions subject to adequacy decisions

8. Data Retention

Personal data is retained only for as long as necessary for the purposes outlined in this Policy, including:

  • Booking and contract data: up to 7 years (legal and accounting obligations)

  • Communication records: as long as necessary to manage the relationship

  • Marketing data: until consent is withdrawn

  • Technical and cookie data: up to 2 years or as permitted by browser settings

After expiry of retention periods, data is securely deleted or anonymised.

9. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

  • Ensure proper website functionality

  • Analyse website usage and performance

  • Improve user experience

Where required by law, consent is obtained via a cookie banner or consent mechanism.
You may control or disable cookies through browser settings at any time.

10. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data against:

  • Unauthorised access

  • Loss, misuse, or alteration

Access to personal data is limited to authorised personnel and service providers only.

12. Data Subject Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Restrict or object to processing

  • Withdraw consent at any time

  • Request data portability

  • Lodge a complaint with a supervisory authority

Requests can be submitted to info@alvoratravel.com.

13. Marketing Communications

Clients may receive service updates or marketing communications where permitted by law.
You may opt out of marketing communications at any time by using the unsubscribe link or contacting us directly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published on our website with the revision date.

Continued use of our services constitutes acceptance of the updated policy.

15. Contact Information

For questions regarding this Privacy Policy or personal data processing, please contact:

info@alvoratravel.com
+371 25546037