As of October 2026 · This is a translation for your convenience; the German version is legally binding.
Hidma GmbH (Hidma Reisen)
Egerländer Straße 20, 82024 Taufkirchen, Germany
Phone: (089) 896 44 729 · E-mail: [email protected]
We only process personal data as far as necessary to operate this website and to handle your enquiries and trip registrations. We do not use analytics or advertising tools, do not embed social media plugins and do not load content (e.g. fonts) from third-party servers.
The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Germany. When you visit the pages, technically necessary data is processed (IP address, date and time, page requested, browser and system information, referrer). This data serves the delivery and security of the website, is not combined with other data and is deleted regularly. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). A data processing agreement is in place with the host.
To protect against attacks and for faster delivery we use the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The connection data mentioned in section 3 is routed via Cloudflare servers. A transfer to the USA is possible; Cloudflare is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR.
We only use technically necessary cookies: a session cookie and a security cookie (protection of the forms against misuse, "CSRF protection"). They expire after two hours at the latest or when you close the browser. No consent is required for this (§ 25(2) TDDDG, Art. 6(1)(f) GDPR). We do not use tracking cookies.
When you send us a registration, pre-registration or enquiry via a form, we process the data you enter (e.g. name, phone/WhatsApp, e-mail, country/city, desired trip and date, number of travellers, your message) and the time of the request. The data is stored in our database and forwarded by e-mail to our mailbox in order to process your request and contact you. Our mailbox is provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); a transfer to the USA is possible, Google is certified under the EU-US Data Privacy Framework.
Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract) and your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time with effect for the future. If no contract is concluded, we delete the data no later than twelve months after processing has been completed. For bookings, the statutory retention periods apply (up to ten years under German commercial and tax law).
Please do not send us identity documents via the forms. We will request passport copies and photos needed for the visa and Hajj registration separately after your registration.
The website contains links to WhatsApp. WhatsApp (WhatsApp Ireland Limited / Meta) is only opened when you click such a link; no data is transferred to WhatsApp before that. WhatsApp's privacy policy applies to the use of WhatsApp. If you contact us via WhatsApp, phone or e-mail, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR).
We link to our Instagram profile. It is a simple link; no data is transferred to Instagram when you visit our website.
All fonts are loaded locally from our server. There is no connection to Google Fonts or other providers.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent given at any time. Simply contact [email protected].
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.