EnquireRequest advice

Privacy

Privacy Policy

Privacy Policy

When you rate a post we store a random id in a necessary cookie so you can change your rating. Comments are published after review. Your email address is never shown. The IP address is stored only as a hash and removed after 30 days.

Last updated: October 2026

Protecting your personal data matters to us. This privacy policy explains which data we process on this website and when organising your trip, why we need it and what rights you have.

1. Controller

The controller responsible for processing your data is:

Incatrekkers Peru Travel E.I.R.L.

RUC: 20608131702

Apv. Virgen Concepción W2-B, Cusco, Peru

E-mail: info@incatrekkers.com

Phone: +51 910 308 736

Incatrekkers is the tour operator. Contracts, invoices and payments are handled by Incatrekkers in Peru.

2. Hosting and technical operation

This website is operated and hosted by Silvertip IT Solutions GmbH, Grabenweg 68, 6020 Innsbruck, Austria. Servers and databases are located in a Google Cloud data centre in Germany (Google Cloud EMEA Ltd., Ireland, as sub-processor).

Silvertip IT Solutions processes your data exclusively on our behalf and according to our instructions. A data processing agreement is in place (Art. 28 GDPR).

When you visit the website, your browser automatically transmits technical data: IP address, date and time, page visited, referrer, browser and operating system. We need this data to deliver the website securely and reliably (Art. 6(1)(f) GDPR). Server log files are deleted after 30 days at the latest unless they are needed to investigate a security incident.

3. Flight offers

If you explicitly request a flight offer in your enquiry or contact Silvertip Tours GmbH, Grabenweg 68, 6020 Innsbruck, Austria, directly, we pass on the data needed for this (name, contact details, travel period, number of travellers, departure airport) to Silvertip Tours. Silvertip Tours processes this data as an independent controller for flight advice and booking (Art. 6(1)(b) GDPR). More information is available at www.silvertip.at.

4. Contact form, enquiries, e-mail, phone and WhatsApp

When you contact us via the contact form, the enquiry form, e-mail, phone or WhatsApp, we process your details (e.g. name, e-mail, phone number, travel wishes, travel period, number of travellers, your message) to answer your enquiry and send you an offer.

The legal basis is the preparation of a contract (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR). If no booking is made, we delete your enquiry no later than 2 years after our last contact.

When you use WhatsApp, data is also processed by WhatsApp Ireland Ltd. and Meta Platforms Inc. (USA). If you prefer not to use WhatsApp, please write to us by e-mail.

5. Booking and carrying out your trip

For a binding booking we need the details of all travellers: title, first and last name, date and place of birth, nationality, passport number, issuing country and expiry date, address, e-mail, phone number, invoice recipient, an emergency contact and your preferences (e.g. room, extras).

We use this data to organise and carry out your trip (Art. 6(1)(b) GDPR). For this we pass on the necessary data to:

  • Peruvian authorities, e.g. the Ministry of Culture (Ministerio de Cultura) and SERNANP for permits for the Inca Trail, Machu Picchu and protected areas
  • Service providers such as railway companies (e.g. PeruRail, Inca Rail), bus companies, hotels and lodges
  • our guides on the ground, as far as they need the data to look after you

Without this data, permits and tickets cannot be issued and a booking is not possible.

Health information: If you voluntarily tell us about allergies, intolerances or health restrictions, we use this only to adapt meals and care accordingly (Art. 9(2)(a) GDPR – your explicit consent). You can withdraw this consent at any time.

Retention: We keep booking and invoice data for as long as required by Peruvian tax and commercial law. We delete passport data 6 months after the end of the trip unless a longer retention period is required by law.

6. Payments

For the deposit and the balance we send you a payment link. Payments are processed by Revolut, whose privacy policy also applies. Your card details are processed directly by the payment provider and are not stored by us.

7. Travel assistant

You can use our digital travel assistant on this website. Your input is sent to Google Cloud Vertex AI (Google Cloud EMEA Ltd., Ireland) and processed there to generate an answer. The assistant only loads after you have agreed in the cookie notice (Art. 6(1)(a) GDPR). Please do not enter sensitive data such as passport numbers or health information in the chat.

8. Google Maps

On the contact page we embed maps from Google Maps (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). When the map loads, your IP address is transmitted to Google, possibly also to the USA. The map only loads after you have given your consent (Art. 6(1)(a) GDPR). Google is certified under the EU-US Data Privacy Framework.

9. Google reCAPTCHA

To protect our forms from spam we may use Google reCAPTCHA (Google Ireland Ltd.). reCAPTCHA uses data such as IP address, mouse movements and browser information to check whether an entry was made by a human. reCAPTCHA only loads after you have given your consent (Art. 6(1)(a) GDPR).

10. Blog comments

When you write a comment on the blog, we store your name, e-mail address, comment and the time. Your name and comment are shown publicly; your e-mail address is not. The legal basis is your consent (Art. 6(1)(a) GDPR). You can ask us to delete your comment at any time.

11. Cookies and local storage

We only use cookies and local storage that are necessary to run the website and – after your consent – the services listed above.

Necessary cookies and storage

eu_consent_v2

stores your choice in the cookie notice (storage period: 12 months)

i18next

remembers your language (storage period: session / 12 months)

topo25_tour_filter, tours:viewMode

remembers filter and view in the trip overview (until you delete it in your browser)

You can change or withdraw your consent at any time via the cookie policy (link at the bottom of every page) or by deleting the cookies in your browser.

12. Transfers outside the EU

Incatrekkers is based in Peru, so your data is processed in Peru when you contact us or book with us. There is no EU adequacy decision for Peru. The transfer is necessary to perform the travel contract or to handle your enquiry (Art. 49(1)(b) GDPR). [In addition, EU standard contractual clauses are in place between Silvertip IT Solutions and Incatrekkers.]

When Google services are used, a transfer to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework.

13. Your rights

You have the right to:

  • access your stored data (Art. 15 GDPR)
  • rectification of incorrect data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on legitimate interests (Art. 21 GDPR)
  • withdraw your consent with effect for the future (Art. 7(3) GDPR)

Under Peruvian law (Ley N.° 29733) you also have the so-called ARCO rights: access, rectification, cancellation and objection.

Just write to us at info@incatrekkers.com.

Right to lodge a complaint: You can complain to a data protection supervisory authority – in Austria the Datenschutzbehörde, in Germany the authority of your federal state, in Peru the Autoridad Nacional de Protección de Datos Personales (ANPD).

14. Changes

We update this privacy policy when the website or the legal requirements change. The version published here applies.