Your data on this site

Our privacy, in brief

You can read every page of Kamakura Day Trip without an account. The site sets no cookies and runs no analytics, advertising or tracking scripts. What does reach us is the connection data that any web server sees when it sends you a page, and it is described below.

You never book on this site. When you choose a tour, you book it on GetYourGuide, and their privacy rules apply there.

Who runs this site

Kamakura Day Trip
[email protected]

There is no legal duty for us to appoint a data protection officer, so we have not. Write to [email protected] with any question about your data.

What the server logs

Each time your browser asks for a page or a file, our web server records the IP address it came from, the date and time, the address requested, the page you came from and the identification string your browser sends about itself and your operating system.

We need these records to deliver the site, to keep it stable, to recognise attacks and abuse, and to count how often each page is read. The legal basis is Article 6(1)(f) GDPR: our legitimate interest is a site that works and stays safe. Raw records are deleted after 90 days at the latest; counts that contain no IP address are kept longer. The server is run by a hosting company that handles this data for us and on our instructions only.

The delivery network we use

Pages and email for this domain pass through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA), which delivers the site quickly, filters attacks and forwards email to our mailbox. To do that, Cloudflare processes your IP address and technical connection data.

The legal basis is Article 6(1)(f) GDPR, our interest in a fast and protected site. Cloudflare is certified under the EU-US Data Privacy Framework, and the European Commission's standard contractual clauses apply on top. Cloudflare explains its own handling at cloudflare.com/privacypolicy.

Pictures of the tours

Photographs of the tours are shown straight from the image servers of GetYourGuide (GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany). To show such a photograph, your browser contacts those servers and passes them your IP address. We cannot influence that exchange.

The legal basis is Article 6(1)(f) GDPR: our interest is to show each tour with the provider's current pictures.

Clicking through to book

Booking links lead straight to GetYourGuide. Each link carries our partner number, so that the platform can credit us with a booking made through it.

Once you are on GetYourGuide, the platform sets its own cookies and handles your data under its own privacy policy. From them we receive commission reports with totals only: no names, no contact details and no payment data.

Embedded videos

Videos are embedded in YouTube's privacy-enhanced mode and stay a still picture until you press play. Before that, your browser does not contact YouTube at all. When you press play, the video loads from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which receives your IP address and may set cookies.

Pressing play is your consent: Article 6(1)(a) GDPR and Section 25(1) TDDDG. Google's policy: policies.google.com/privacy.

Notes kept on your device

A few small notes are kept in your own browser so the site behaves the way you asked. They never leave your device and we cannot read them:

• the boxes you tick on a checklist, so they are still ticked when you come back (local storage, until you clear it);
• the currency you pick in the menu, so prices stay in it on every page (local storage, until you clear it);
• if you start a chat: its reference number, an access key, your email address and a copy of the conversation, so it is still there when you come back (local storage, until you clear it);
• that the chat bubble has been shown once, so it does not appear again (session storage, gone when you close the tab);
• that the window offered when you are about to leave has already been shown once, so it does not return (session storage, gone when you close the tab).

These notes are strictly necessary for features you use yourself (Section 25(2) No. 2 TDDDG). Your browser settings delete them at any time.

Messages in the chat

If you start a chat, you give us your name, your email address and your messages. The chat service also records the country your connection comes from, a scrambled form of your IP address (a salted hash, from which the address cannot be read back), and the page and language you wrote from.

The conversation is stored with Cloudflare (named above), and every message you write is forwarded to our account on the messaging service Telegram, which processes it outside the European Union; our answers come back the same way. More: telegram.org/privacy. We use your email address only to answer you.

The legal basis is Article 6(1)(b) GDPR, because you ask and we answer, and Article 6(1)(f) GDPR for the scrambled IP address, which we use only to stop abuse and spam. A conversation is deleted automatically 180 days after its last message.

If you email us

If you email us, we use what you send to answer you. The legal basis is Article 6(1)(f) GDPR, and Article 6(1)(b) GDPR where your message concerns a contract. We delete the conversation once it is finished, unless a legal duty requires us to keep it.

Typefaces and maps

The fonts are served from our own server, so no font service learns about your visit. The maps are pictures stored on our own server, drawn from OpenStreetMap data; looking at them or zooming in contacts no map service. A "Google Maps" link opens Google only when you press it.

The sources we cite

Our pages cite official and expert sources and link to them. Nothing is sent to those sites unless you open a link; from then on, their own privacy rules apply.

What you can ask of us

You may ask us what data we hold about you (Article 15 GDPR), have it corrected (Article 16) or erased (Article 17), have its processing restricted (Article 18) and receive it in a portable form (Article 20). Where we rely on our legitimate interest, you may object at any time (Article 21), and any consent you gave can be withdrawn for the future. An email to [email protected] is enough.

You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live, where you work or where you believe the infringement took place (Article 77 GDPR).

We make no automated decisions about you and build no profiles. You are under no obligation to give us data, but without the technical connection data a page cannot reach your screen.