PRIVACY POLICY
Last updated: 29 August 2026
1. Data Controller
The controller responsible for the processing of personal data on this website is:
Vedrana Maricic
trading as Optivista
Münchner Straße 25
83703 Gmund am Tegernsee
Germany
Email: ana@optivistatravel.com
Website: https://optivistatravel.com
Optivista Luxury Travel & Events is a service offered by Optivista and is not currently a separate legal entity.
2. General Information About Data Processing
We process personal data only in accordance with applicable data-protection laws, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Personal data is any information that can identify you personally, such as your name, email address, telephone number or IP address.
3. Website Hosting and Provision
This website is created and hosted using Squarespace. The provider is Squarespace, Inc. and its affiliated companies.
When you visit this website, technically necessary information may be processed, including:
- IP address
- Date and time of access
- Requested page or file
- Referrer URL
- Browser type and version
- Operating system and device information
This processing is necessary to provide the website, maintain its security and stability, and detect and prevent misuse or attacks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and functional provision of our online services.
Squarespace processes data in connection with providing its services and may use sub-processors. Data may also be processed outside the European Union or European Economic Area. Where personal data is transferred to a third country, this takes place only in accordance with the requirements of Articles 44 et seq. GDPR, including appropriate safeguards such as EU Standard Contractual Clauses.
Further information:
https://www.squarespace.com/privacy
4. Contact by Email or Contact Form
If you contact us by email or through our contact form, we process the information you provide. This may include:
- Name
- Email address
- Company
- Telephone number, if provided
- Details of your planned event, travel programme or project
- The content of your message
We process this information to respond to your enquiry, communicate with you and, where applicable, take steps prior to entering into a contract.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a potential or existing contract. In all other cases, processing is based on our legitimate interest in responding to enquiries efficiently pursuant to Art. 6(1)(f) GDPR.
Form submissions may be stored through Squarespace and sent to our business email address. We use Google Workspace for business email. The provider is Google Ireland Limited and/or Google LLC.
Data may also be processed outside the European Union or European Economic Area. Where personal data is transferred to a third country, this takes place only in accordance with the requirements of Articles 44 et seq. GDPR.
Further information:
https://workspace.google.com/terms/dpa_terms/
We retain enquiry data for as long as necessary to handle the enquiry. Statutory retention obligations remain unaffected.
5. Newsletter
If you subscribe to our newsletter, we process your email address, as well as the date and time of your registration and confirmation. Where technically recorded, we may also process information needed to document your consent, such as your IP address and the date and time of registration and confirmation.
Subscription takes place through a double opt-in process. This means that, after registering, you will receive an email asking you to confirm your subscription. Your email address will only be added to our mailing list after confirmation.
We use your data solely to send occasional information from Optivista, including destination inspiration, group travel and event ideas, and news from Optivista Luxury Travel & Events.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect, for example by using the unsubscribe link in every newsletter email or by contacting ana@optivistatravel.com.
We use Squarespace and/or Squarespace Email Campaigns to store newsletter subscriptions. Data may also be processed outside the European Union or European Economic Area.
Further information:
https://www.squarespace.com/privacy
6. Cookies and Cookie Consent
This website uses technically necessary cookies. These cookies are required to ensure that the website functions securely and properly. The storage of, or access to, information on your device is carried out in accordance with Section 25(2) TDDDG. The processing of personal data is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Where we use optional cookies or similar technologies in the future, for example for analytics or marketing, we will do so only with your explicit consent in accordance with Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
You can change or withdraw your consent at any time through this website’s cookie preferences.
At the time of publication of this Privacy Policy, we do not use additional analytics or marketing tools such as Google Analytics or Meta Pixel.
7. Recipients of Personal Data
We only share personal data where necessary for the purposes described above, where you have provided consent, where we are legally obliged to do so, or where disclosure is necessary to establish, exercise or defend legal claims.
Recipients may include:
- Squarespace, as provider of our website, hosting, forms and newsletter storage
- Google Workspace, as provider of our business email communication
- Service providers acting on our behalf as data processors
- Authorities or other bodies where we are legally required to disclose information
8. Data Retention
We retain personal data only for as long as necessary for the relevant purpose or where statutory retention obligations apply.
Data from contact enquiries is deleted once the enquiry has been fully handled, unless statutory retention obligations or legitimate reasons require further storage.
Newsletter data is retained until you withdraw your consent. Following an unsubscribe request, your data will be deleted unless statutory evidence or retention obligations require further storage.
9. Your Rights
Subject to the applicable legal requirements, you have the right:
- to obtain information about the personal data we hold about you under Art. 15 GDPR;
- to request correction of inaccurate data under Art. 16 GDPR;
- to request deletion of your data under Art. 17 GDPR;
- to request restriction of processing under Art. 18 GDPR;
- to receive your data in a portable format under Art. 20 GDPR;
- to object to processing under Art. 21 GDPR;
- to withdraw consent at any time with future effect under Art. 7(3) GDPR.
To exercise any of these rights, please contact:
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a data-protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
The supervisory authority responsible for us is:
Bavarian Data Protection Authority for the Private Sector (BayLDA)
Promenade 18
91522 Ansbach
Germany
11. Changes to This Privacy Policy
We may update this Privacy Policy where legal requirements, this website or the services we use change. The current version published on this website applies.