1. Scope
This Privacy Policy applies to the Blossom Tours website, direct enquiries, booking discussions, company travel planning, B2B programme design, and partner communication. It covers information provided directly by travellers, private clients, agencies, operators, and business partners, as well as technical data created through website use.
2. Data controller
Blossom Tours, Blossom d.o.o., Safvet-bega Basagica 30, 71000 Sarajevo, Bosnia and Herzegovina, acts as the controller for the personal data processed through this website and our related travel planning activity.
3. Personal data we may collect
- Names, company names, traveller names, and contact persons.
- Email addresses, telephone numbers, and WhatsApp details when you share them with us or contact us directly.
- Travel and booking information such as dates, route ideas, group size, rooming, transport needs, and service preferences.
- Special service details that are relevant to safe travel delivery, including dietary, mobility, accessibility, or similar support needs.
- Communication records, proposal history, operational notes, and service follow-up information.
- Technical information created when you visit the site, such as IP address, browser type, device information, and page requests handled by the hosting environment.
4. Why we use personal data
- To answer enquiries and prepare route ideas, proposals, and planning documents.
- To coordinate hotels, transport, guides, visits, and other operational services.
- To manage company programmes, B2B partner requests, and group logistics.
- To communicate before, during, and after a journey or planning process.
- To comply with legal, accounting, tax, and operational obligations.
- To maintain a secure website and document consent preferences where required.
5. Legal basis and fair processing
Depending on the context, Blossom Tours processes personal data because it is necessary to respond to a request, prepare or perform a contract, comply with legal obligations, protect legitimate business and operational interests, or because you have given consent where consent is the appropriate basis.
When optional external content is involved, such as map embeds, the website follows a consent-first model and does not load that content until you choose to allow it.
6. Who we may share data with
We share only the information that is genuinely necessary for delivery or communication. Depending on the service, this may include accommodation providers, transport companies, guides, local coordinators, operational partners, and professional service providers supporting Blossom Tours.
- Cloudflare Turnstile may receive technical verification data when you submit a protected website form.
- OpenStreetMap is used only for optional map content after consent.
- WhatsApp is used only if you choose to contact us through that channel.
Website enquiry forms are processed through a Blossom Tours first-party endpoint and then forwarded to our own email inbox. We may also disclose information when required by law, regulation, or a competent public authority.
7. Cookies and external content
The current Blossom Tours website does not run marketing cookies, advertising pixels, or analytics scripts on the active static site. It does, however, use essential storage to remember consent choices and offers optional external map content that remains blocked until you allow it.
Please read the separate Cookie Policy for a clear explanation of what is stored, what is optional, and how to manage your settings.
8. International transfers and third-party environments
When you use third-party services such as Cloudflare Turnstile, WhatsApp, or optional map embeds, your data or technical connection details may pass through systems outside Bosnia and Herzegovina. Blossom Tours uses these services only where they are operationally useful and proportionate to the request. We prefer the minimum amount of data needed for the task.
9. Retention and security
We retain information only for as long as it is reasonably necessary for planning, delivery, follow-up, legal compliance, record keeping, or legitimate operational protection. We use practical organisational and technical measures to protect data, but no digital environment can be guaranteed to be entirely risk free.
10. Your rights
Subject to applicable law, you may have the right to request access to your personal data, ask for correction, request deletion, object to certain processing, withdraw consent where consent applies, or request clarification about how your information is handled.
11. Contact and complaints
For privacy questions, data requests, or concerns about how Blossom Tours handles personal information, contact contact@theblossomtours.com. If you believe your rights have been affected, you may also have the right to contact the competent data protection authority in Bosnia and Herzegovina.
12. Updates to this policy
We may update this Privacy Policy when the website, our service model, or legal requirements change. The latest published version on this website is the version that applies from the review date shown on this page.