Privacy Policy for KOBA
Last updated: 10th DEC 2025
At KOBA – Cinematic Story Tours (“we”, “us”, “our”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the GDPR.
1. Who We Are
KOBA sp/f
Dýrindalsgøta 66
188 Hoyvík
Faroe Islands
VAT: FO564141
Email: info@koba.fo
Website: https://www.koba.fo
KOBA is a Faroese tour operator providing guided tours and related services.
2. What Personal Data We Collect
We collect only the information necessary to deliver our services:
- Information you provide directly
- Name
- Email address
- Phone number
- Booking details (tour selection, date, number of guests)
- Payment confirmation details (handled by our payment provider)
- Information collected automatically
- IP address
- Browser type
- Device information
- Website usage and analytics (via cookies)
- Information from communications
- Emails you send to us
- Messages via our contact forms or chat widget (Tawk.to)
We do not collect sensitive data.
3. How We Use Your Data
We use your personal data for:
- Managing and confirming bookings
- Providing customer support
- Sending booking information and updates
- Processing payments
- Improving website performance and user experience
- Legal and accounting requirements (invoices, tax records)
- We do not sell or share your data with third parties for marketing.
4. Legal Basis for Processing (GDPR)
We process your data under the following legal bases:
- Contractual necessity – to provide tours you have booked
- Legal obligation – accounting, invoicing, financial records
- Legitimate interest – website analytics, improving services
- Consent – for optional cookies or newsletter sign-ups
5. Payment Processing
All online payments are handled securely by our payment partners:
- Bókun (Booking platform)
- Repayd / Trust My Travel (Payment provider)
We do not store your card details.
Card data is encrypted and processed directly by the payment provider according to PCI-DSS standards.
6. Cookies and Analytics
Our website uses cookies to:
Improve functionality
Understand user behaviour
Provide a better browsing experience
You can accept or reject non-essential cookies at any time.
7. How Long We Keep Your Data
We keep your information only as long as necessary:
Booking records: up to 5 years (required for accounting)
Emails and communication: typically 12–24 months
Analytics data: according to cookie settings
After these periods, data is safely deleted or anonymised.
8. Who We Share Data With
We share data only with trusted service providers who help us deliver our services:
- Booking platform: Bókun
- Payment processors: Repayd / Trust My Travel
- Web hosting provider
- Email service provider
- Analytics providers (e.g., Google Analytics)
- Customer chat system: Tawk.to
All third-party processors comply with GDPR and use your data only for the purposes we specify.
9. Your Rights Under GDPR
You have the right to:
To exercise your rights, contact us at: info@koba.fo
10. Data Security
We take data protection seriously and use:
- Encrypted data transmission (HTTPS)
- Secure servers
- Access controls
- Regular updates and security checks
11. International Transfers
Some of our service providers may store data outside the Faroe Islands or EU.
When this happens, we ensure GDPR-compliant safeguards such as:
Standard Contractual Clauses (SCC)
Adequate protection decisions
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will always be published on this page.
Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact:
KOBA – Cinematic Story Tours
Email: info@koba.fo
Website: https://www.koba.fo