Privacy Statement

Data Controller
MB Travel Portal
Mirsad Biber
Gustav-Adolf-Straße 41, 90439 Nuremberg, Germany
Email: contact@putni-portal.com

Data processing takes place when entering into a contract for travel with the travel organizer. This data is necessary to finalize the travel contract. The data is retained to maintain contact between MB Putni Portal and the user even after the trip has been completed. MB Putni Portal is authorized to send the user news updates and informational emails after the conmpletion of the trip. Please note that the user has the right to withdraw consent at any time (see details below).
Should MB Putni Portal intend to process the data for any other purpose, it will inform the user about this purpose and provide the information required under Article 13 (2) of the European General Data Protection Requirement (GDPR) before any such processing takes place.

Personal data processing is regularly carried out based on the consent of the data subject according to Article 6, paragraph 1, point (a), and/or to fulfill a contract between the user and MB – Putni Portal according to Article 6 (1), point (b) of the General Data Protection Requirement (GDPR).

The data collected include the following:
First name, last name, street address, building number, zip code, city, email address, telephone number, date of birth, place of birth, passport number, place of passport issue, passport issue date, passport expiration date, and documents required to be uploaded for the visa application process.
The data necessary for issuing a visa to Saudi Arabia depend on the traveler’s nationality:
For EU citizens: passport photo, copy of passport.
For Swiss citizens: passport photo, passport copy, C visa, Swiss residence registration certificate.
For third-country nationals: passport photo, copy of passport, residence permit.
Additional data may be requested as needed to fulfill the purpose of visa application.

User data are regularly stored on an external platform. This platform is called SeaTable. SeaTable is an IT company registered in Germany and wholly subject to the provisions of the General Data Protection Requirement. We have entered into a  data processing agreement with SeaTable.

Data are transferred to the respective travel organizer, who may be located outside the European Union and the European Economic Area. In case of transferring personal data to third countries, MB Putni Portal will comply with the applicable provisions of the General Data Protection Requirement (GDPR).
On rare occasions, data may also be shared with companies and individuals involved in the travel arrangements, such as responsible hotels, local guides, or other travel organizers.

Data may also be transferred to administrative authorities, especially for visa application purposes. This transfer is usually handled by the travel organizer but can also be done directly by MB Putni Portal.

Cookies are used on the website to enhance the user experience and collect statistical data. The use of cookies is subject to MB Putni Portal’s specific cookie policy.
Tracking tools are used only within legally permitted frameworks, in particular in accordance with the General Data Protection Requirement (GDPR).

Personal data and passport information are retained for a period of time (6 months) subsequent to the end of the trip, potentially for further contact purposes. Uploaded documents stored on the external platform will be deleted unless there are justified reasons for further processing, in particular for their retention.

Users have the right to withdraw their consent to data processing at any time. Withdrawal of consent does not affect the legality of data processing conducted at the point in time that the consent was valid. Upon withdrawal of consent, data will be deleted once the trip ends, unless processing, especially data retention, is required for other reasons such as contractual obligations or there are legitimate interests to retain the data.

Users have the following rights:
The right to comprehensive information about the stored data, the purpose of data use, and other related details. These rights are detailed in Article 15 of the General Data Protection Requirement (GDPR).
The right to rectification of inaccurate personal data (Article 16 GDPR).
The right to erasure of stored data unless such data are necessary to fulfill the contract between MB Putni Portal and the user or legitimate interests apply. Otherwise, the provisions of Article 17 GDPR apply.
The right to restriction of data processing. For details, please refer to Article 18 of the General Data Protection Requirement.
The right to data portability pursuant to Article 20 GDPR, allowing users to receive their personal data in a structured, commonly used, and machine-readable format.
The right to object, on grounds relating to his or her particular situation, to the processing of personal data, in particular when processing is based on Article 6 (1) points (e) or (f), including legitimate interests (right to object), as specified in Article 21 GDPR.
The right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR if they believe their rights under the General Data Protection Requirement are violated (right to lodge a complaint). Other administrative or judicial provisions remain unaffected thereby.

For any queries or enquiries regarding privacy and data protection, please contact the Data Controller:
MB Travel Portal
Mirsad Biber
Gustav-Adolf-Straße 41, 90439 Nuremberg, Germany
Email: contact@putni-portal.com