Privacy Policy
Last updated: 26 September 2026
This Privacy Policy explains how Adventures Hub Ltd (“Adventures Hub”, “we”) processes the personal data of the people who visit adventureshub.net or contact us, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Cyprus Law 125(I)/2018.
1. Data controller
Adventures Hub Ltd
Corner of Neof. Nikolaides Ave & Theod. Kolokotronis Str – Onisiforou Center, 2nd & 3rd Floor, Paphos 8011, Cyprus
Registrar No.: TIN 60271057V
Email: info@adventureshub.net
2. Data we collect
Contact and booking requests. When you fill in the form on the Contacts page we receive your first and last name, email address, phone number, the services, destination and accommodation you are interested in, arrival and departure dates, the number of adults and children and any additional information you choose to write. Please do not include special categories of data (for example health information) unless strictly needed for your stay.
Emails. If you write to us directly we receive your email address and the content of your message.
Technical data. Like any website, our hosting provider automatically records technical data such as IP address, browser type and the pages requested, for security and to keep the service running.
Cookies. We only use the technical cookies described in our Cookie Policy.
3. Purposes and legal bases
- To answer your request and to arrange accommodation and services with our Partners — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- To manage the bookings you confirm and the related communications — performance of a contract (Art. 6(1)(b) GDPR).
- To comply with tax, accounting and other legal obligations (Art. 6(1)(c) GDPR).
- To keep the website secure and to establish, exercise or defend legal claims — our legitimate interest (Art. 6(1)(f) GDPR).
We do not use your data for automated decision-making or profiling, and we do not sell it. We will only send you marketing communications if you have asked for them, and you can stop them at any time.
4. Who receives your data
- Partners (hotels, chalets, ski schools, guides, transfer companies and other providers) that you ask us to contact: they receive only the data needed to quote and provide their service and act as independent controllers.
- Service providers acting on our behalf under a data processing agreement: website hosting (Vercel Inc.), transactional email delivery (Resend) and email hosting (Google Workspace, Google Ireland Limited).
- Authorities, when required by law.
5. Transfers outside the EEA
Some of our service providers are based in the United States. Transfers take place on the basis of the EU–U.S. Data Privacy Framework or of the Standard Contractual Clauses approved by the European Commission. Partners located in Switzerland benefit from an adequacy decision of the European Commission.
6. How long we keep your data
- Requests that do not lead to a booking: up to 24 months from our last contact.
- Booking data: for the period required by Cyprus tax and accounting law.
- Technical server logs: for the short period set by our hosting provider, unless needed to investigate a security incident.
7. Your rights
You have the right to access your data, to have it rectified or erased, to restrict or object to its processing, to data portability and, where processing is based on consent, to withdraw your consent at any time without affecting prior processing. To exercise your rights write to info@adventureshub.net; we will reply within one month.
You also have the right to lodge a complaint with the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy) or with the supervisory authority of the EU country where you live or work.
8. Providing your data
The fields marked as required in the contact form are needed to answer your request; without them we cannot help you. The other fields are optional.
9. Minors
Our services are booked by adults. We do not knowingly collect data from children under 16, except the number and ages of children travelling that you choose to share with us.
10. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) and access limited to the people who need it.
11. Changes
We may update this Privacy Policy. The current version is always published on this page with its date.