Privacy Policy

1. Who we are

Mwena NV is a Belgian private limited company offering tailored private journeys to Zimbabwe. For the purposes of this policy, Mwena NV acts as the data controller, meaning we determine how and why your personal data is processed.

If you have any questions about this policy or wish to exercise your rights, you can contact us at: mwena.info@gmail.com

2. What data we collect and why

We collect personal data only when you choose to provide it through our enquiry form. The data we collect includes:

• Your first name and surname
• Your email address
• Your phone number
• Your travel preferences (dates, activities, group size, budget)
• Any additional comments you choose to share

We use this information solely to respond to your enquiry and to discuss and plan your trip with you. We do not use it for any other purpose without your explicit consent.

Legal basis: We process your data on the basis of your freely given, informed consent (Article 6(1)(a) GDPR), which you provide by ticking the consent checkbox on our enquiry form.

3. How your data is transmitted: Formspree

Our enquiry form uses Formspree (formspree.io) to transmit your submission to our email inbox. Formspree acts as a data processor on our behalf. Your data passes through Formspree's servers in order to be delivered to us.

Formspree stores form submissions temporarily for delivery purposes. You can read Formspree's privacy policy at formspree.io/legal/privacy-policy.

We do not sell, rent, or share your personal data with any other third parties for marketing or commercial purposes.

4. Analytics cookies: Google Analytics

With your consent, we use Google Analytics to collect anonymised information about how visitors use this website, such as which pages are visited and how long visitors spend on each page. This helps us improve the site over time.

• IP addresses are anonymised before being stored
• We do not use Google Analytics data for advertising or remarketing
• We do not share this data with third parties for commercial purposes

Google Analytics sets the following cookies: _ga (2 years), _ga_* (2 years), _gid (24 hours).

You can opt out of Google Analytics tracking at any time using Google's opt-out browser add-on, or by adjusting your cookie preferences via the "Cookie settings" link in the footer of this site.

Legal basis: We process analytics data on the basis of your consent (Article 6(1)(a) GDPR). Analytics cookies are off by default and are only activated if you choose to accept them.

5. Essential cookies

We use one essential cookie, mwena_consent, to store your cookie preferences so that we do not ask you again on every visit. This cookie does not contain any personal data, is not used for tracking, and expires after 12 months. No consent is required for this cookie as it is strictly necessary for the site to function correctly.

6. How long we keep your data

We retain enquiry data (name, email, phone, travel preferences) for as long as is necessary to respond to your enquiry and plan your trip. If no booking results from your enquiry, we will delete your data within 12 months of your last contact with us.

You may request deletion of your data at any time by emailing us at mwena.info@gmail.com.

7. International data transfers

Some of the third-party services we use involve the transfer of your personal data outside the European Economic Area (EEA). Specifically:

• Formspree: operated by Formspree, Inc., a US-based company. Formspree relies on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal basis for transferring data from the EEA to the United States. You can review Formspree's data transfer safeguards at formspree.io/legal/privacy-policy.
• Google Analytics: operated by Google LLC, a US-based company. Google relies on Standard Contractual Clauses and participates in the EU-US Data Privacy Framework. You can review Google's data transfer safeguards at policies.google.com/privacy.

We only use services that provide appropriate safeguards for international transfers as required by Chapter V of the GDPR. We do not transfer your personal data to any other countries outside the EEA.

8. Your rights under GDPR

As a resident of the European Union, you have the following rights regarding your personal data:

• Right of access: you may request a copy of the personal data we hold about you
• Right to rectification: you may ask us to correct inaccurate or incomplete data
• Right to erasure: you may ask us to delete your personal data
• Right to restriction: you may ask us to limit how we use your data
• Right to data portability: you may request your data in a structured, machine-readable format
• Right to withdraw consent: you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal
• Right to object: you may object to processing of your personal data in certain circumstances

To exercise any of these rights, please contact us at mwena.info@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données): www.dataprotectionauthority.be.

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data submitted via our enquiry form is transmitted over an encrypted HTTPS connection.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date at the top. We encourage you to review this page periodically.

11. Contact

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us at:

mwena.info@gmail.com