< Legal

Cookie policy

Welcome to the Timbuktu cookie policy.

Cookies consist of portions of code installed in the browser that assist the Owner in providing the Service according to the purposes described. Some of the purposes for which Cookies are installed may also require the User's consent.

Where the installation of Cookies is based on consent, such consent can be freely withdrawn at any time following the instructions provided in this document.

Please also use refer to the Glossary that we have set out at the end of the Policy if there is any terminology used in this privacy notice that you are unfamiliar with or that you don’t fully understand.

This version was last updated on 08/06/2018 and historic versions can be obtained by contacting us.

1. Technical Cookies and Cookies serving aggregated statistical purposes

2. Other types of Cookies or third parties that install Cookies

3. How to provide or withdraw consent to the installation of Cookies

4. Owner and Data Controller

5. Glossary

Technical Cookies and Cookies serving aggregated statistical purposes

Activity strictly necessary for the functioning of the Service


This Application uses Cookies to save the User's session and to carry out other activities that are strictly necessary for the operation of this Application, for example in relation to the distribution of traffic.


Activity regarding the saving of preferences, optimization, and statistics


This Application uses Cookies to save browsing preferences and to optimize the User's browsing experience. Among these Cookies are, for example, those used for the setting of language and currency preferences or for the management of first party statistics employed directly by the Owner of the site.


Other types of Cookies or third parties that install Cookies

Some of the services listed below collect statistics in an anonymized and aggregated form and may not require the consent of the User or may be managed directly by the Owner - depending on how they are described - without the help of third parties.

If any third party operated services are listed among the tools below, these may be used to track Users’ browsing habits – in addition to the information specified herein and without the Owner’s knowledge. Please refer to the privacy policy of the listed services for detailed information.

Analytics


The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy PolicyOpt Out. Privacy Shield participant.


Google AdWords conversion tracking (Google Inc.)

Google AdWords conversion tracking is an analytics service provided by Google Inc. that connects data from the Google AdWords advertising network with actions performed on this Application.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.


Facebook Ads conversion tracking (Facebook, Inc.)

Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on this Application.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.


MixPanel (MixPanel)

MixPanel is an analytics service provided by Mixpanel Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy PolicyOpt Out. Privacy Shield participant.



Displaying content from external platforms


This type of service allows you to view content hosted on external platforms directly from the pages of this Application and interact with them. This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.

Vimeo video (Vimeo, LLC)

Vimeo is a video content visualization service provided by Vimeo, LLC that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.


Mapbox widget (Mapbox Inc.)

Mapbox is a maps visualization service provided by Mapbox Inc. that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.



Heat mapping and session recording


Heat mapping services are used to display the areas of a page where Users most frequently move the mouse or click. This shows where the points of interest are. These services make it possible to monitor and analyze web traffic and keep track of User behavior. Some of these services may record sessions and make them available for later visual playback.

Hotjar Heat Maps & Recordings (Hotjar Ltd.)

Hotjar is a session recording and heat mapping service provided by Hotjar Ltd. Hotjar honors generic „Do Not Track” headers. This means the browser can tell its script not to collect any of the User's data. This is a setting that is available in all major browsers. Find Hotjar’s opt-out information here.

Personal Data collected: Cookies, Usage Data and various types of Data as specified in the privacy policy of the service.

Place of processing: Malta – Privacy PolicyOpt Out.



Remarketing and behavioral targeting


This type of service allows this Application and its partners to inform, optimize and serve advertising based on past use of this Application by the User.

This activity is performed by tracking Usage Data and by using Cookies, information that is transferred to the partners that manage the remarketing and behavioral targeting activity.

In addition to any opt out offered by any of the services below, the User may opt out of a third-party service's use of cookies by visiting the Network Advertising Initiative opt-out page.

Remarketing through Google Analytics for Display Advertising (Google Inc.)

Google Analytics for Display Advertising is a remarketing and behavioral targeting service provided by Google Inc. that connects the tracking activity performed by Google Analytics and its Cookies with the Adwords advertising network and the Doubleclick Cookie.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy PolicyOpt Out. Privacy Shield participant.

AdWords Remarketing (Google Inc.)

AdWords Remarketing is a remarketing and behavioral targeting service provided by Google Inc. that connects the activity of this Application with the Adwords advertising network and the Doubleclick Cookie.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy PolicyOpt Out.

Facebook Custom Audience (Facebook, Inc.)

Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of this Application with the Facebook advertising network.

Personal Data collected: Cookies and email address.

Place of processing: United States – Privacy PolicyOpt Out. Privacy Shield participant.



Traffic optimization and distribution


This type of service allows this Application to distribute their content using servers located across different countries and to optimize their performance.

Which Personal Data are processed depends on the characteristics and the way these services are implemented. Their function is to filter communications between this Application and the User's browser.

Considering the widespread distribution of this system, it is difficult to determine the locations to which the contents that may contain Personal Information User are transferred.

CloudFlare (Cloudflare)

CloudFlare is a traffic optimization and distribution service provided by CloudFlare Inc. The way CloudFlare is integrated means that it filters all the traffic through this Application, i.e., communication between this Application and the User's browser, while also allowing analytical data from this Application to be collected.

Personal Data collected: Cookies and various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy.



User database management


This type of service allows the Owner to build user profiles by starting from an email address, a personal name, or other information that the User provides to this Application, as well as to track User activities through analytics features. This Personal Data may also be matched with publicly available information about the User (such as social networks' profiles) and used to build private profiles that the Owner can display and use for improving this Application.

Some of these services may also enable the sending of timed messages to the User, such as emails based on specific actions performed on this Application.

Intercom (Intercom Inc.)

Intercom is a User database management service provided by Intercom Inc. Intercom can also be used as a medium for communications, either through email, or through messages within this Application.

Personal Data collected: Cookies, email address, Usage Data and various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy.



Post affiliate pro


We have some affiliates that place Timbuktu marketing banners on their websites. Post Affiliate Pro is used to track when people see these banners and whether they click through to the Timbuktu website. If a website visitor books with Timbuktu we pay a commission to that affiliate.

A cookie is placed to track that a guest has been introduced to Timbuktu through an affiliate. If this cookie is present we also report the website visitors email address to Post Affiliate Pro when someone identifies themself by email, enquires about a trip, when they are sent a quote and when they buy a trip through TImbuktu. This enables us to identify bookings where the commission should be paid over to the affiliate.

Post Affiliate Pro is based in the EU. You can find out more about their GDPR compliance at https://www.postaffiliatepro.com/gdpr/

You can find the privacy policy at
https://www.postaffiliatepro.com/privacy-policy-post-affiliate-pro/


How to provide or withdraw consent to the installation of Cookies

In addition to what is specified in this document, the User can manage preferences for Cookies directly from within their own browser and prevent – for example – third parties from installing Cookies. Through browser preferences, it is also possible to delete Cookies installed in the past, including the Cookies that may have saved the initial consent for the installation of Cookies by this website. Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Internet Explorer.

With regard to Cookies installed by third parties, Users can manage their preferences and withdrawal of their consent by clicking the related opt-out link (if provided), by using the means provided in the third party's privacy policy, or by contacting the third party.

Notwithstanding the above, the Owner informs that Users may follow the instructions provided on the subsequently linked initiatives by the EDAA (EU), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.

Owner and Data Controller

Timbuktu Travel Limited
27 Old Gloucester St
London
WC1N 3AX
England

Owner contact email: privacy@timbuktutravel.com

Since the installation of third-party Cookies and other tracking systems through the services used within this Application cannot be technically controlled by the Owner, any specific references to Cookies and tracking systems installed by third parties are to be considered indicative. In order to obtain complete information, the User is kindly requested to consult the privacy policy for the respective third-party services listed in this document.

Given the objective complexity surrounding the identification of technologies based on Cookies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of Cookies by this Application.

Glossary

Definitions and legal references


Personal Data (or Data)

Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

Usage Data

Information collected automatically through this Application (or third-party services employed in this Application), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Application, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Data Supervisor)

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Application. The Data Controller, unless otherwise specified, is the Owner of this Application.

This Application

The means by which the Personal Data of the User is collected and processed.

Service

The service provided by this Application as described in the relative terms (if available) and on this site/application.

European Union (or EU)

Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.

Cookies

Small sets of data stored in the User's device.


Legal information

This privacy statement has been prepared based on provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).