GDPR Compliance Statement

Global Adventures is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable EU data protection laws.

Last Updated: January 15, 2026 | Effective Date: May 25, 2018

Our Commitment to GDPR Compliance

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations that process personal data of individuals residing in the European Economic Area (EEA), regardless of where the organization is located.

What is GDPR?

The General Data Protection Regulation (GDPR) is the EU's data privacy and security law. It grants EU residents specific rights over their personal data and imposes strict obligations on organizations that collect, process, or store personal information of EU citizens.

At Global Adventures, we have implemented comprehensive measures to ensure full compliance with GDPR requirements. Our commitment includes:

Lawful Processing: We only process personal data when we have a valid legal basis under Article 6 of GDPR
Transparency: We provide clear information about how and why we process your data
Data Minimization: We collect only the data necessary for specified purposes
Purpose Limitation: We use personal data only for the purposes we have communicated to you
Data Accuracy: We take reasonable steps to ensure personal data is accurate and up-to-date
Storage Limitation: We retain personal data only for as long as necessary
Security: We implement appropriate technical and organizational measures to protect personal data

Important Notice for Users

When you interact with third-party dating platforms through our affiliate links, those platforms become independent data controllers. We encourage you to carefully review their privacy policies before providing personal information. We recommend verifying how external services handle data deletion requests, as practices may vary by platform.

Your Rights Under GDPR

As a data subject under GDPR, you have extensive rights regarding your personal data. Global Adventures is committed to facilitating the exercise of these rights. Below is a comprehensive overview of each right and how to exercise it.

1. Right of Access (Article 15)

You have the right to obtain confirmation as to whether we are processing your personal data and, if so, to access that data along with supplementary information. This includes:

The purposes of the processing
The categories of personal data concerned
The recipients or categories of recipients to whom data has been disclosed
The envisaged retention period or criteria used to determine that period
Information about your other rights (rectification, erasure, restriction, objection)
The right to lodge a complaint with a supervisory authority
Where data was not collected directly from you, the source of the data

2. Right to Rectification (Article 16)

You have the right to obtain rectification of inaccurate personal data without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by providing a supplementary statement.

3. Right to Erasure / "Right to Be Forgotten" (Article 17)

You have the right to obtain the erasure of your personal data without undue delay where one of the following grounds applies:

The data is no longer necessary for the purposes for which it was collected
You withdraw consent (where processing was based on consent)
You object to the processing and there are no overriding legitimate grounds
The personal data has been unlawfully processed
Erasure is required for compliance with a legal obligation

4. Right to Restriction of Processing (Article 18)

You have the right to obtain restriction of processing where one of the following applies:

You contest the accuracy of the personal data (for a period enabling us to verify accuracy)
The processing is unlawful and you oppose erasure, requesting restriction instead
We no longer need the data but you require it for legal claims
You have objected to processing pending verification of whether our legitimate grounds override yours

5. Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You also have the right to transmit that data to another controller without hindrance, where processing is based on consent or contract and is carried out by automated means.

6. Right to Object (Article 21)

You have the right to object, on grounds relating to your particular situation, to processing of your personal data based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

7. Right to Withdraw Consent (Article 7(3))

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8. Right to Lodge a Complaint (Article 77)

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within one month. In complex cases, this period may be extended by two further months, and we will inform you of any such extension within one month of receipt of your request.

How We Process Personal Data

Under GDPR, we are required to inform you about the legal basis for processing your personal data, the purposes of processing, and the categories of data we collect. The following table provides a comprehensive overview of our data processing activities.

Processing Purpose	Legal Basis (Article 6)	Data Categories
Website Functionality	Legitimate Interest (Art. 6(1)(f))	Technical data, session data, preferences
Contact Form Responses	Consent (Art. 6(1)(a))	Name, email, message content
Analytics & Improvement	Legitimate Interest (Art. 6(1)(f))	IP address (anonymized), browsing behavior, device info
Marketing Communications	Consent (Art. 6(1)(a))	Email address, name, preferences
Affiliate Tracking	Legitimate Interest (Art. 6(1)(f))	Referral source, click data, conversion data
Legal Compliance	Legal Obligation (Art. 6(1)(c))	As required by applicable laws

Legitimate Interests Assessment

Where we rely on legitimate interests as the legal basis for processing, we have conducted a Legitimate Interests Assessment (LIA) to balance our interests against the rights and freedoms of data subjects. Our legitimate interests include:

Operating and maintaining a functional website
Understanding how users interact with our content to improve the service
Ensuring the security and integrity of our systems
Supporting our business through affiliate partnerships
Detecting and preventing fraud or abuse

Special Categories of Data

We do not intentionally collect special categories of personal data as defined in Article 9 of GDPR, including data revealing racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data, health data, or data concerning sex life or sexual orientation.

International Data Transfers

As a global service, we may transfer personal data to countries outside the European Economic Area (EEA). When we do so, we ensure appropriate safeguards are in place to protect your data in compliance with Chapter V of the GDPR.

Safeguards for International Transfers

We employ the following mechanisms to ensure adequate protection when transferring data outside the EEA:

Adequacy Decisions

Where the European Commission has determined that a country provides an adequate level of data protection, we may transfer data to that country without additional safeguards.

Standard Contractual Clauses (SCCs)

We use EU-approved Standard Contractual Clauses when transferring data to countries without an adequacy decision. These clauses provide contractual guarantees for data protection.

Transfer Impact Assessments

We conduct Transfer Impact Assessments (TIAs) to evaluate whether the laws of the destination country provide adequate protection for personal data.

Supplementary Measures

Where necessary, we implement additional technical, organizational, or contractual measures to ensure an equivalent level of protection.

Third-Party Service Providers

Some of our third-party service providers are located outside the EEA. We ensure that all such providers either:

Are located in countries with an EU adequacy decision
Have signed Standard Contractual Clauses with us
Are certified under an approved certification mechanism
Provide other appropriate safeguards recognized under GDPR

Your Right to Information

You have the right to request information about the specific safeguards applied to any transfer of your personal data outside the EEA. Contact our Data Protection Officer to request this information.

Data Retention Periods

In accordance with the GDPR principle of storage limitation, we retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Our retention periods are determined based on:

The nature and sensitivity of the data
The purposes for which we process the data
Applicable legal, regulatory, or contractual obligations
Legitimate business needs

Data Type	Retention Period	Basis for Retention
Contact Form Data	2 years from last contact	Business relationship management
Analytics Data	26 months (anonymized)	Website improvement
Marketing Consent Records	Duration of consent + 3 years	Compliance evidence
Cookie Preference Data	1 year	User preference storage
Legal/Compliance Records	7 years	Legal obligation

Data Deletion

When personal data is no longer needed, we securely delete or anonymize it. Our deletion procedures include:

Secure erasure of digital records using industry-standard methods
Destruction of physical records containing personal data
Removal from active databases and backup systems
Verification that deletion has been completed across all systems

Technical and Organizational Security Measures

In compliance with Article 32 of GDPR, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. Our security measures include:

Technical Measures

Encryption: TLS/SSL encryption for all data in transit; encryption at rest for sensitive data
Access Controls: Role-based access control (RBAC) limiting data access to authorized personnel
Firewalls: Network and application-level firewalls protecting our infrastructure
Regular Updates: Timely security patches and software updates
Intrusion Detection: Systems to detect and respond to potential security breaches
Backup Systems: Regular encrypted backups with secure offsite storage

Organizational Measures

Data Protection Policies: Comprehensive internal policies governing data handling
Staff Training: Regular training on data protection and security awareness
Vendor Management: Due diligence and contractual safeguards for third-party processors
Incident Response: Documented procedures for handling data breaches
Privacy by Design: Incorporating data protection into all new projects and processes

Data Breach Notification

In accordance with Articles 33 and 34 of GDPR, we have procedures in place to:

Detect and investigate potential data breaches promptly
Notify the relevant supervisory authority within 72 hours of becoming aware of a breach (where required)
Notify affected data subjects without undue delay where the breach is likely to result in high risk to their rights and freedoms
Document all breaches, including facts, effects, and remedial actions taken

Contact Our Data Protection Officer

Global Adventures has appointed a Data Protection Officer (DPO) to oversee our GDPR compliance efforts and serve as the primary point of contact for data protection matters.

Data Protection Officer Contact Information

Title: Data Protection Officer

Email: [email protected]

Response Time: We aim to respond to all inquiries within 5 business days

Request Processing: We will respond to GDPR-related requests within one month as required by law

Mailing Address:
Global Adventures
Data Protection Officer
123 Digital Avenue, Suite 456
San Francisco, CA 94102
United States

When to Contact the DPO

You should contact our Data Protection Officer if you:

Want to exercise any of your data subject rights
Have questions about how we process your personal data
Want to submit a complaint about our data processing activities
Need information about international data transfers
Have concerns about our data protection practices
Want to report a potential data breach or security concern

Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. If you are in the European Union, you can contact the supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement.

A list of EU data protection authorities can be found on the European Data Protection Board website: https://edpb.europa.eu/about-edpb/about-edpb/members_en

Updates to This GDPR Compliance Statement

We may update this GDPR Compliance Statement from time to time to reflect changes in our data processing practices, legal requirements, or regulatory guidance. When we make material changes, we will notify you through appropriate means.

Notification of Changes

Minor Updates: We will update the "Last Updated" date at the top of this page
Material Changes: We will provide prominent notice on our website
Changes Affecting Your Rights: We will notify you via email if you have provided contact information

We recommend reviewing this statement periodically to stay informed about how we protect your data under GDPR.

Exercise Your Data Rights

As a data subject under GDPR, you have the right to access, correct, delete, or export your personal data. Contact our Data Protection Officer to exercise your rights.

Contact Data Protection Officer