Last updated: 27 October 2026
Who processes your data
The controller of personal data on estadventure.com is the travel agency listed below. We process data in line with the Personal Data Protection Act of the Republic of Serbia (Official Gazette RS, No. 87/2018) and, for visitors from the European Union, the General Data Protection Regulation (GDPR).
- Company name
- Top Holidays Travel DOO Beograd
- Registered office
- Petra Martinovića 23/c4, 11000 Beograd
- Registration no.
- 21715182
- Tax ID (PIB)
- 112660676
- Branch
- TOP HOLIDAYS TRAVEL DOO BEOGRAD (ČUKARICA) OGRANAK EST Adventure
- Branch address
- 11406 Mladenovac, Varovnička 4a
- Phone
- +381 60 699 8616
What data we collect and why
We only collect the data we need to answer your enquiry, organise your trip and keep the site secure. The site has no user accounts and no card payments.
| When | What data | Why | Legal basis | How long |
|---|---|---|---|---|
| Contact form, email, phone | Full name, email, phone (optional), topic and message, the page the message was sent from | To answer your enquiry and send an offer | Your request before entering into a contract; our legitimate interest in answering enquiries | Up to 2 years after the last correspondence, unless the enquiry becomes a booking |
| Booking and travel contract | Full name, date of birth, nationality, passport number and expiry, address, contact details, emergency contact, payment records | To organise the trip: flights, accommodation, climbing permits, visas, travel insurance, guides | Performance of the travel contract; legal obligations (Tourism Act, accounting and tax rules) | Contract and financial records as long as the law requires; other trip data up to 3 years after the trip ends |
| Newsletter sign up | Email address | News about new tours and departures | Your consent, confirmed by email (double opt-in) | Until you unsubscribe; every email has an unsubscribe link |
| Site security | IP address, time and address of the request, browser details; for the contact form, the IP address in shortened (hashed) form | Protection against attacks and spam | Our legitimate interest in a secure site | Contact form limit 1 hour; server and firewall logs briefly, according to server settings |
| Marketing and analytics | Visit data (pages, device, browser, approximate location from the IP address) and a cookie identifier | Measuring visits and showing ads for our tours on social networks | Only your consent on the cookie banner | As in the cookie table below |
We do not sell your data and do not use it for automated decisions or profiling with legal effects for you.
Cookies
Cookies are small files that a site stores in your browser. We use necessary cookies without consent, because the site does not work properly without them. Marketing and analytics cookies are set only after you allow them on the banner; until then, those services are not loaded at all.
Necessary Always on
Needed for the site to work. Not used for tracking and not shared with anyone.
| Cookie | Domain | Purpose | Duration |
|---|---|---|---|
est_kolacici | estadventure.com | Remembers your choice on the cookie banner | 180 days |
wp-wpml_current_language | estadventure.com | Remembers the site language (Serbian or English) | 1 day |
wordpress_*, wp-settings-*, wfwaf-authcookie-* | estadventure.com | Only for staff who log in to the site administration (login and firewall) | until logout or up to 1 year |
Marketing and analytics Only with consent
Set only after you allow them on the banner.
| Cookie | Domain | Purpose | Duration |
|---|---|---|---|
_fbp | estadventure.com (Meta) | Facebook Pixel: recognises the browser to measure visits and ads | 90 days |
_fbc | estadventure.com (Meta) | Facebook Pixel: remembers that you came from a Facebook ad | 90 days |
fr | facebook.com (Meta) | Meta: showing and measuring ads | 90 days |
You can change your choice at any time with the button below or the “Cookie settings” link at the bottom of every page. When you withdraw consent, we delete the marketing cookies the site has set. You can also delete cookies in your browser settings.
Videos and links to other sites
YouTube videos load only when you click on a video, through youtube-nocookie.com, which sets no cookies until you play the video. The video thumbnail is loaded from Google servers, which see your IP address.
Links to Facebook and Instagram are ordinary links; those sites apply their own privacy rules only once you open them. The newsletter form sends your email address directly to Mailchimp. Flags and other emoji in the text are shown as small images from WordPress.org servers (s.w.org).
Who we share data with
- Partners who deliver your trip, only as far as your tour requires: airlines, accommodation, local operators and guides, permit and park offices, the insurance company and embassies when a visa is needed.
- Processors working for us: the site hosting and email service, Mailchimp (Intuit Inc., USA) for the newsletter and, with your consent, Meta Platforms Ireland Ltd. (Facebook Pixel).
- Public authorities, only when the law requires it.
Transfers outside Serbia
When you travel outside Serbia, we share data with partners in the destination country, because the travel contract cannot be performed otherwise. Services based in the USA (Mailchimp and, with your consent, Meta) transfer data with appropriate safeguards: standard contractual clauses or the EU and US Data Privacy Framework.
Your rights
- to know whether we process your data and to receive a copy;
- to have inaccurate data corrected or incomplete data completed;
- to have your data erased or its processing restricted, unless the law requires us to keep it;
- to receive your data in a structured format and transfer it to another controller;
- to object to processing based on legitimate interest and to receiving the newsletter;
- to withdraw consent at any time, without affecting processing before the withdrawal.
Send your request to info@estadventure.com. We reply within 30 days at the latest. If you believe the processing is unlawful, you can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, Serbia, www.poverenik.rs, or with the data protection authority in your EU country.
Data security
The site works only over an encrypted connection (HTTPS) and is protected by a firewall and regular scanning, and only staff who need enquiry and booking data for their work can access it.
Minors
Data about persons under 15 is provided, and consent is given, by a parent or guardian.
Changes to this privacy policy
When we change how we process data, we update this page and the date of the last update at the top. We inform travellers with an active booking about major changes by email.