Privacy Policy
Last updated: 2 October 2026
1. Controller
Tip Top Tours OG
Bachweg 26, 6091 Götzens, Austria
Email: office@tiptop.tours
We process personal data in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act and the Austrian Telecommunications Act 2021.
2. Hosting and server logs
Our website is hosted by IONOS. When you access it, technically necessary data such as your IP address, date and time, requested page, referrer, browser and operating system may be processed in server logs. This serves the secure and stable operation of the website based on our legitimate interests under Art. 6(1)(f) GDPR.
3. Contacting us
If you contact us by form, email or telephone, we process your details to handle your enquiry and any follow-up questions. Depending on the matter, the legal basis is Art. 6(1)(b) GDPR (pre-contractual or contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in communication). Statutory retention duties remain unaffected.
4. Bookings, tours and online shop
For enquiries, bookings and orders we process contact, billing, booking, participant and service data where required to perform the contract, organise the tour, invoice you or comply with legal duties. The legal bases are Art. 6(1)(b) and (c) GDPR.
If you book through GetYourGuide or another booking platform, that provider also processes data under its own responsibility and privacy policy. We receive only the information required to deliver and manage the booked service.
5. Bookings through RateHawk
When we book accommodation, flights, transfers or other individual travel services at a customer's request, we use the external B2B booking platform RateHawk. The service provider and recipient of the data is Emerging Travel Inc., 1000 N West Street, Suite 1200, Wilmington, Delaware 19801, USA.
We transmit only the data required for the relevant booking. This may include the traveller's name, contact, booking and travel details and, depending on the service booked, nationality, place of residence, date of birth or identification details. We transmit booking-related health information only where necessary and with the traveller's explicit consent.
Processing is necessary for pre-contractual measures and performance of the contract under Art. 6(1)(b) GDPR. Where special categories of personal data are involved, we rely on explicit consent under Art. 9(2)(a) GDPR. RateHawk processes the submitted data under our contractual arrangement and may disclose it to affiliated companies and to hotels, airlines, transfer providers and other suppliers involved in the booking.
As Emerging Travel Inc. is established in the United States, data may be transferred to a third country. The transfer is safeguarded by the European Commission's Standard Contractual Clauses under Art. 46 GDPR. RateHawk is not integrated into our website and does not place cookies through tiptop.tours. Further information is available in the RateHawk Privacy Notice.
6. Payments
Payments are handled by the payment service providers offered during checkout. Required payment and transaction data are processed directly by the respective provider. We do not store full credit card numbers or card verification data on our website.
7. Cookies and consent
Technically necessary cookies are used where required for operation, security, the shopping cart or a function requested by you. Non-essential cookies or comparable technologies are used only with your consent. You can withdraw consent for the future at any time through the cookie settings.
8. Google Search Console
We use Google Search Console, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to monitor technical performance and improve the discoverability of our website. Domain ownership is confirmed by a meta tag. This verification tag does not set cookies and does not transmit additional personal data to Google when a page is viewed. Search Console mainly provides aggregated performance and indexing data. See Google's Privacy Policy for further information.
9. Instagram
We link to our public Instagram profile @tiptop_tours. The service is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. We currently do not use a Meta Pixel, embedded Instagram feed or social plugin on this website. You leave our website only when you click the link; from that point Meta processes data under its own responsibility. Our Instagram profile may also be linked to Google Search Console as a platform property. This does not add extra tracking to our website. See the Instagram Privacy Policy for further information.
10. Recipients and international transfers
We disclose data only where necessary to perform a contract, comply with a legal duty, act on your consent or pursue a legitimate interest. Recipients may include hosting, IT, payment, booking, tax advisory and delivery providers as well as public authorities. For transfers outside the European Economic Area, we rely on an adequacy decision or suitable safeguards under Art. 44 et seq. GDPR.
11. Retention
We keep personal data only for as long as needed for the relevant purpose. Statutory retention and limitation periods also apply, in particular to contractual, accounting and invoice records.
12. Your rights
Where the legal requirements are met, you have the right to access, rectification, erasure, restriction, data portability, objection and withdrawal of consent for the future. Contact office@tiptop.tours. You may also lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
13. Updates
We update this Privacy Policy when our website, the services we use or the legal framework changes.