Very little. There are no cookies, no analytics and no tracking, and nothing on the page loads from anyone else's servers. What remains is the server log and the request form, if you use it. The details follow, as Article 13 GDPR requires.
Ambiente Tours GmbH, Rennerod, Germany, is responsible for this site and for the data described here. The full address, telephone number and email are in the imprint; write to us there with any question about your data. We have not appointed a data protection officer, as the law does not require one for a company of our size (section 38 of the German Federal Data Protection Act).
This site is hosted by hosting provider, name and address. When you open a page, the web server records what every web server records: the page requested, the date and time, the amount of data sent, the page you came from, your browser and operating system, and your IP address.
Why: to deliver the page you asked for and keep the server secure and stable. Legal basis: Article 6 (1) (f) GDPR. How long: log files are deleted after number days, unless they are needed as evidence of an attack. Who else: the hosting provider processes this data on our behalf, under a data processing agreement (Article 28 GDPR).
When you use the request form or write to us, we process what you send: your name, email address, the number of travellers, where and roughly when you want to sail, and anything you add in the notes. Only your name and email are required. The form sends your request straight to our own web server, where it is stored for our team; it does not pass through a form service or any other third party. To limit abuse, the server keeps a scrambled (hashed) form of your IP address for ten minutes.
Why: to answer your enquiry and, if it leads to a booking, to prepare and carry out the contract. Legal basis: Article 6 (1) (b) GDPR. How long: enquiries that do not lead to a booking are deleted after number months; booking files are kept for the periods commercial and tax law require, six and ten years (section 257 of the German Commercial Code, section 147 of the German Fiscal Code). Who else: the cruise line you book with receives what it needs for the booking (names, dates of birth, passport and contact details). It is responsible for that data under its own privacy notice.
Every photograph, video, font and script on this site is served from our own host. When a page loads, your browser sends no request to a cruise line, to Google Fonts, to a content delivery network or to any other third party. Links to other sites, such as a cruise line's journal or a photographer's page on Wikimedia Commons, only contact that site when you click them.
This site sets no cookies, uses no analytics service and embeds no social-media or advertising code. If that ever changes, we will update this notice first and, where the law requires it, ask for your consent.
Under the GDPR you can ask us at any time for access to the personal data we hold about you (Article 15), to correct it (Article 16), to erase it (Article 17), to restrict its processing (Article 18) or to hand it over in a portable format (Article 20), and you can object to processing based on Article 6 (1) (f) (Article 21). Write to the address in the imprint.
You also have the right to complain to a data protection authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany, poststelle@datenschutz.rlp.de.
We make no automated decisions about you and do no profiling.
We update this notice whenever the site changes what it does with data. The date below is the date of the current version.
Last updated 28 September 2026.