Privacy Policy

The data controller for your personal data is the company IBN BATTUTA VOYAGES (GO-Makkah), a limited liability company (SARL) with a share capital of €7,000, SIREN 790 357 875, headquartered at 32 avenue Pierre Sémard, 94200 Ivry-sur-Seine, France.

This policy explains what data we collect, why, to whom it is transmitted, how long it is retained and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Informatique et Libertés) of 6 January 1978, as amended.

• Identity and contact details: last name, first name, title, date and place of birth, nationality, address, phone number, email address.
• Travel documents: number, dates and copy of passport, identity photograph, visa, residence permit, when required by the trip.
• Travel-related information: group composition, room choice, flights, hotels, options, preferences and special requests.
• Strictly necessary health data (vaccination required by the Saudi authorities, need for assistance or a wheelchair), collected only with your consent.
• For Hajj: the identifiers for your Nusuk account, when you entrust us with the steps to be carried out on your behalf.
• Payment data: amounts, dates and references of payments. Bank card numbers are entered on the secure page of our payment provider and are never stored by GO-Makkah.
• Electronic signature of the contract: name of the signatory, date and time, IP address and single-use verification code.
• Exchanges with our advisors: messages sent by form, email, phone or WhatsApp.
• Browsing data: pages visited, source of the visit (campaign, advertising link), audience measurement identifiers, subject to your consent where required.

• Preparing your quotes, booking and fulfilling your trip (flights, accommodation, transfers, visa, insurance) — performance of the contract or pre-contractual measures.
• Managing payments, billing and accounting — legal obligations.
• Completing the formalities required by the authorities (visa, Nusuk, passenger information transmitted by airlines) — legal obligations and performance of the contract.
• Keeping you informed during the preparation and execution of your trip (email, SMS, WhatsApp) — performance of the contract.
• Processing your requests, complaints and the exercise of your rights — legitimate interest and legal obligations.
• Reminding you when you request it — consent, valid for 3 months and revocable at any time.
• Sending you our offers and newsletter — consent or, for our clients, legitimate interest for similar trips; you may object at any time.
• Measuring site traffic and the effectiveness of our campaigns — consent collected via the cookie banner.
• Securing the website and preventing fraud — legitimate interest.

Your data is intended for GO-Makkah departments authorised to process it. It is transmitted, strictly to the extent necessary, to the following recipients:

• your travel service providers: airlines, hotels, carriers and on-site providers;
• the competent Saudi authorities for visa issuance and the organisation of Hajj and Umrah (including the Nusuk platform);
• the insurer, when you take out travel insurance;
• our secure payment provider and our bank;
• our technical service providers: website hosting, sending of emails and SMS, WhatsApp messaging, audience measurement tools and, where applicable, conversational assistance;
• administrative or judicial authorities, upon requisition.

We do not sell or rent your personal data.

A trip to Saudi Arabia involves the transfer of your data to the service providers and authorities of that country. This transfer is necessary for the performance of the contract you have entered into (Article 49.1.b of the GDPR).

Some technical service providers may be located outside the European Union, in particular in the United States. These transfers are governed by an adequacy decision (Data Privacy Framework) or by the standard contractual clauses of the European Commission.

• Customer file (contract, travel documents, correspondence): during the preparation and execution of the trip, then archived for 5 years, the statutory limitation period.
• Contracts concluded electronically for an amount equal to or greater than €120: retained for 10 years, and accessible upon simple request.
• Invoices and accounting documents: 10 years.
• Prospects who have not concluded a contract: 3 years from the last contact.
• Consent to be called back: 3 months.
• Audience measurement data: 6 months at most; visit source data (campaigns): 90 days.

We implement appropriate technical and organisational measures to protect your data: encrypted connections, access restricted to authorised personnel only, access logging, hosting in France and payment on a secure page.

Strictly necessary cookies for the website's operation are placed without consent. Audience measurement and advertising trackers (Google Analytics, Google Tag Manager, Microsoft Clarity and advertising tags) are only activated after your consent. You can change your choices at any time via the "Manage cookies" link at the bottom of the page. Full details are provided in our cookie policy.

You have the right of access, rectification, erasure, restriction and portability of your data, the right to object, the right to withdraw your consent at any time and the right to define instructions regarding the fate of your data after your death.

To exercise them, write to us at [email protected] or at IBN BATTUTA VOYAGES, 32 avenue Pierre Sémard, 94200 Ivry-sur-Seine, specifying your request. We will respond within one month; proof of identity may be requested in case of reasonable doubt.

If you do not wish to be subject to commercial prospecting by phone, you can register for free on the Bloctel opposition list (www.bloctel.gouv.fr).

If, after contacting us, you believe that your rights are not being respected, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

This policy may evolve, in particular in the event of regulatory changes or new services. The date of the last update appears at the top of the page.