Privacy policy (GDPR)

Translation provided for information. In case of any difference, only the French version is binding. Read the French version

This Privacy Policy applies to all data processing carried out by Tayba Travel ASBL within its Umrah/Hajj booking platform.

Who is the data controller?

Tayba Travel ASBL, registered in Belgium (BE 0501.822.174), is the controller of your data. This processing is subject to the European Union's General Data Protection Regulation (GDPR), which protects natural persons when their personal data is processed.

What data is collected?

We only collect the data needed to provide our services, in particular:

• Identification data: surname, first name, date of birth, nationality,
• Contact details: email address, phone number, postal address,
• Travel information: booking details, room type, options,
• Documents needed to organise the trip (passport, visa),
• Technical data related to the use of the platform.

Payment data is not stored directly by Tayba Travel, but processed by secure payment providers.

Purposes and legal bases of the processing

Your data is processed for:

• The complete management of your booking and your trip,
• The communication needed to provide the service (confirmation emails, reminders, documents),
• Compliance with legal obligations (contracts, supporting documents),
• The security of your information.

The legal bases of the processing are:

• The performance of a contract (carrying out your booking),
• Compliance with legal obligations,
• Your explicit consent where required.

Limitation, minimisation and transparency

In line with the principles of the GDPR:

• We only collect the data needed for each purpose,

Security and confidentiality

We apply appropriate technical and organisational measures to ensure the integrity and confidentiality of your data, including encryption and access restricted to authorised persons only.

Data retention

Your data is kept only for as long as necessary to achieve the purposes described. Once the purpose has been achieved, it is deleted or anonymised in line with the principles of the GDPR (storage limitation).

Data sharing

Your data may be passed on to partners essential to organising your trip (airlines, Saudi authorities, local service providers), only to the extent necessary to provide the service.

Your rights under the GDPR

You have rights recognised by the GDPR, in particular:

• The right of access to your data,
• The right to rectification,
• The right to erasure (right to be forgotten),
• The right to restriction of processing,
• The right to object to certain processing,
• The right to data portability.

To exercise these rights, you can contact us using the contact details shown on the platform.

International data transfers

If your data is transferred outside the European Union, this will be done under GDPR-compliant mechanisms (appropriate legal instrument, adequacy decisions, etc.) to ensure an equivalent level of protection.

Changes to the policy

This policy may be updated at any time to remain compliant with legal requirements and changes to our service. The version published on the platform is the applicable version.