Who We Are
Our website address is: https://raftingraets.com. We are a rafting and outdoor adventure company committed to protecting your privacy and personal data.
What Personal Data We Collect and Why
Contact Forms and Inquiry Submissions
When you submit an inquiry or contact form on our website, we collect:
- Name: To address you personally in our communications
- Email address: To respond to your inquiries
- Phone number: To contact you regarding your booking or inquiry
- Message content: To understand and respond to your needs
- IP address: For security purposes and spam prevention
- Browser user agent: For technical support and security
- Timestamp: To track when the inquiry was submitted
This information is used solely to respond to your inquiry and provide you with our services. We retain this data for up to 30 days in temporary logs for security purposes, and permanently in our email correspondence for customer service records.
Cookies
Our website uses cookies to improve your experience and for analytics purposes:
Essential Cookies
- Session cookies: To remember your form inputs and prevent duplicate submissions
- GDPR consent cookie (raftingraets_gdpr_accepted): Lasts for 1 year to remember your cookie consent choice
- Security cookies: For spam prevention and rate limiting (expires after 1 hour)
Analytics (Google Analytics)
We use Google Analytics to understand how visitors interact with our website. Google Analytics collects information anonymously and reports website trends without identifying individual visitors. The data collected includes:
- Pages you visit on our website
- Time spent on each page
- How you arrived at our site
- General location (country/city level)
- Device and browser information
You can opt-out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
For more information on how Google uses data, visit: Google Privacy Policy
Embedded Content from Other Websites
Articles on this site may include embedded content (e.g., videos, images, articles, maps). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
We use embedded content from:
- Google Maps: To display our location and directions
- Social media platforms: For social sharing buttons and feeds
Who We Share Your Data With
We do not sell, trade, or otherwise transfer your personal information to outside parties. Your data may be shared only in the following circumstances:
- Email service providers: To send you responses to your inquiries
- Google Analytics: Anonymized usage data for website improvement
- Security services: IP addresses may be checked against spam databases
- Legal requirements: If required by law or to protect our rights
If you request a password reset, your IP address will be included in the reset email.
How Long We Retain Your Data
Different types of data are retained for different periods:
- Form submissions: Email correspondence is kept indefinitely for customer service records
- Security logs: Temporary logs (IP addresses, timestamps) are kept for 30 days
- GDPR consent logs: Stored for 30 days in temporary storage
- Comments: Retained indefinitely to recognize and approve follow-up comments automatically
- Analytics data: Google Analytics retains data for 26 months by default
What Rights You Have Over Your Data
If you have an account on this site, have left comments, or have submitted a form, you have the following rights:
- Right to access: Request an exported file of the personal data we hold about you
- Right to rectification: Request correction of inaccurate personal data
- Right to erasure: Request deletion of your personal data (subject to legal obligations)
- Right to data portability: Receive your data in a structured, commonly used format
- Right to object: Object to processing of your personal data
- Right to withdraw consent: Withdraw consent for data processing at any time
All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
To exercise any of these rights, please contact us at:
Where Your Data Is Sent
Visitor comments and form submissions may be checked through automated spam detection services to protect our website from malicious activities.
Your data is stored on secure servers located in [specify your hosting location]. We use industry-standard security measures to protect your information.
Security Measures
We implement various security measures to protect your personal information:
- IP-based rate limiting: Prevents spam and abuse
- Honeypot fields: Hidden form fields to detect automated bots
- Timing validation: Detects suspiciously fast form submissions
- Spam pattern detection: Filters malicious content
- Nonce verification: Prevents cross-site request forgery (CSRF)
- Secure data transmission: SSL/TLS encryption for all data transfers
Third-Party Services
We use the following third-party services that have their own privacy policies:
- Google Analytics: Privacy Policy
- Google Maps: Privacy Policy
Children’s Privacy
Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.
Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the “Last Updated” date.
Last Updated: 03.01.2026
Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
