Privacy Policy

Last updated: 4 September 2026

This Privacy Policy explains how Wilderness Balkans L.L.C. (“Wilderness Balkans”, “we”, “us” or “our”) collects, uses, stores and shares personal data when you visit wildernessbalkans.com, contact us, request information or book one of our tours.

Bookings and use of our tour services are also governed by our Terms and Conditions.

1. Who We Are

Data controller: Wilderness Balkans L.L.C.
Unique identification number: 811850876
Registered address: Rruga Sali Çeku, Nr. 23, 51000 Deçan, Kosovo
Authorised representative: Adriatik Gacaferi, Managing Director
Email: wildernessbalkans@gmail.com and adriatikgacaferi@gmail.com
WhatsApp: +377 44 675 468
Direct calls: +383 44 675 568

2. Personal Data We Collect

Depending on how you interact with us, we may collect:

• identity and contact information, such as your name, email address, telephone number, postal address and nationality;
• booking information, including tour dates, group members, accommodation preferences, dietary requirements, emergency contacts and requests you choose to provide;
• health, accessibility or medical information that you voluntarily provide when it is necessary to assess or support participation in a tour;
• payment and transaction information, such as the amount paid, payment method and bank or POS transaction reference;
• communications with us by email, telephone, WhatsApp, website forms or social media;
• technical website information, such as IP address, browser, device, operating system, referring page, pages visited and cookie identifiers; and
• reviews, photographs or feedback that you submit or permit us to use.

When you provide information about another traveller, you confirm that you have their permission to share it with us and to explain how it will be used.

3. Why We Use Personal Data

We use personal data to:

• respond to enquiries and prepare personalised tour offers;
• confirm, administer and deliver bookings;
• arrange guides, accommodation, meals, transfers, border permits and other services included in an itinerary;
• communicate important information before and during a tour, including safety or itinerary updates;
• process payments, maintain accounting records and prevent fraud;
• manage emergencies and protect the health and safety of travellers and staff;
• improve our website, tours and customer service;
• send marketing messages when you have consented or when otherwise permitted by law, with an option to unsubscribe; and
• comply with legal and regulatory duties.

4. Legal Bases for Processing

We process personal data when it is necessary to take steps at your request before a booking, perform our contract with you, comply with a legal obligation, protect vital interests in an emergency, pursue legitimate business interests that do not override your rights, or act with your consent. You may withdraw consent at any time, without affecting processing that was lawful before withdrawal.

5. Sensitive Information

Health, dietary and accessibility information may reveal sensitive personal data. We request only information relevant to safely providing the booked service. We process it with your explicit consent, when necessary to protect vital interests, or where another lawful basis applies. Please do not send medical details that are not relevant to your trip.

6. Who We Share Data With

We share only the information reasonably necessary with trusted parties involved in providing or supporting your trip, which may include:

• local guides, guesthouses, hotels, meal providers and transport operators;
• authorities responsible for border-crossing permits or legal compliance;
• banks, payment and POS providers;
• website hosting, email, booking, analytics and technical service providers;
• professional advisers and insurers where applicable; and
• police, rescue services, courts or public authorities when required by law or necessary in an emergency.

We do not sell personal data.

7. Cross-Border Processing

Our tours may operate in Kosovo, Albania and Montenegro. Information necessary for accommodation, transport, permits, guiding and emergency support may therefore be shared with service providers or competent authorities in those destinations. We limit such transfers to what is necessary and use appropriate contractual, organisational or legal safeguards where required.

8. Data Retention

We keep personal data only for as long as necessary for the purposes described above. Booking, payment and accounting records are retained for the period required by applicable law. Enquiry records are kept only while needed to respond and follow up. Marketing data is retained until you unsubscribe or withdraw consent. Safety records may be retained when necessary to establish, exercise or defend legal claims.

9. Cookies and Similar Technologies

Our website may use essential cookies required for security, navigation, language, currency and booking functions. With your consent where required, it may also use preference, analytics or marketing cookies to understand website use and improve our services. You can control cookies through the website consent tool, when available, and through your browser settings. Blocking essential cookies may affect booking or website functions.

Third-party services embedded in the website may set their own cookies and process data under their own privacy notices.

10. Your Data Protection Rights

Subject to applicable law, you may ask us to:

• confirm whether we process your personal data and provide access to it;
• correct inaccurate or incomplete data;
• delete data when there is no lawful reason to retain it;
• restrict processing in certain circumstances;
• provide data you supplied in a portable format where applicable;
• object to processing based on legitimate interests or direct marketing; and
• withdraw consent at any time.

To exercise a right, email either address listed in Section 1. We may request reasonable information to verify your identity. You also have the right to submit a complaint to the Information and Privacy Agency of Kosovo.

11. Security

We use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No internet transmission or storage system is completely secure, but access is limited to people and providers who need the information for legitimate purposes.

12. Children

Bookings must be made by an adult. When a child participates, we collect only information reasonably necessary for the booking, safety and delivery of the tour, with the involvement of a parent or legal guardian.

13. Third-Party Links

Our website may link to websites operated by other organisations. We are not responsible for their privacy practices. Please review their privacy notices before submitting personal data.

14. Changes to This Policy

We may update this Privacy Policy when our services, technology or legal obligations change. The latest version and its update date will be published on this page.

15. Contact Us

Questions or requests concerning privacy can be sent to wildernessbalkans@gmail.com or adriatikgacaferi@gmail.com.