Privacy Policy

Privacy Statement

With this privacy policy we would like to inform you about the nature, extent and purpose of the processing of personal data on our Backpacker Spirit website. 


Personal data are all data which have a personal relation to you, e.g. name, address, e-mail address or user behaviour.

Backpacker Spirit

Suite 545, 12B Anzac Square Arcade 

198 Adelaide Street

Brisbane QLD 4000 Australia


Processing of your data in our company in the context of tour and travel bookings

We process your personal data transferred to us within the framework of the contractual and pre-contractual relationships existing between us. The scope, type, purpose and necessity of the processing depends on the underlying contractual relationship and the selected tours. For this purpose we store and process your data in the computer systems used by us. To the data processed by us belong all those data which have been provided by you for the purpose of using the contractual or pre-contractual services and which are required for processing your travel enquiry or the concluded travel booking.

This may include the following data in particular:

Name, e-mail, telephone number, age, tour selection and travel duration

Data for travel bookings

The processing is limited to those data, which are necessary and expedient for the answer of enquiries or bookings and for the fulfilment of a travel booking closed between you and us. Personal data will only be passed on to third parties with your express consent and in the event that there is a legal obligation to do so. As well as for the initiation and processing of contractual relationships, in particular the transfer to Australian cooperation partners in the implementation of the tours offered by us. The processing by us takes place according to your instructions or the legal regulations. Legal basis:

Your personal data will be processed and transferred to third parties in accordance with Art. 6 para. 1 lit. b) GDPR and serves to fulfil the contract between you and us. Otherwise, we only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) GDPR or if there is a legitimate interest in this, Art. 6 para. 1 lit. f) GDPR. This is the case, for example, if this is necessary to pursue our claims. 

Deletion: Your data will be deleted as soon as it is no longer required for the fulfilment of the travel agreement or statutory welfare obligations. This does not affect the legal obligation to retain data.


Web hosting

To maintain our online presence, we use an Internet service provider on whose server the website is stored (hosting) and who makes our website available on the Internet. The Internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Name and address of Internet service provider: Inc. 500 Terry A. Francois Boulevard, 6th Floor, San Francisco, CA, 94158 USA 

You can view its data protection regulations here: The Internet service provider is based outside the EU. It is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law. Legal basis: The Internet service provider processes the aforementioned data on our behalf, Art. 28 GDPR. Data processing is carried out on the basis of our legitimate interest in the efficient and secure provision of our Internet service, Art. 6 Para. 1 lit. f) GDPR. If you only use our website for information purposes, our Internet service provider will only collect the personal data that the browser you are using transmits to its server. These are the following data: IP address, the date and time of access to our website, time zone difference to Greenwich Mean Time (GMT), access status (HTTP status), the amount of data transferred, the Internet service provider of the accessing system, the type of browser you are using and its version the operating system you are using, the website from which you may have accessed our website, the pages or subpages that you visit on our website.

The aforementioned data is stored as log files on the servers of our Internet service provider. This is necessary in order to display the website on the device you are using and to guarantee stability and security. Our legitimate interest in data processing lies in the aforementioned purposes. Legal basis: Data processing is carried out on the basis of our legitimate interest in the efficient and secure provision of our website, Art. 6 Para. 1 lit. f) GDPR. Duration: The above data for the provision of our website will be stored for a period of 7 days and then deleted.



Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on the terminal device you are using. Cookies neither transmit viruses nor can they execute programs. Rather, they are primarily used to exchange information between the end device you are using and our website in order to make our website more user-friendly and effective for you. A distinction must be made between temporary (transient) cookies and persistent cookies. Transient cookies include session cookies in particular. These store a so-called session ID, which can be used to assign various requests from your browser to the joint session. This enables our website to recognise your computer when you return to our website. The session cookies are deleted when you log out or close your browser. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You have the option of deleting these cookies at any time in the security settings of your browser. The cookies are used to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. In particular, information on language settings or log-in information can be stored in these cookies.

In addition, we also use cookies on our website, which enable us to analyse your visit to our Internet pages. In particular, these cookies may contain information on search terms entered, the frequency of page views or the use of website functions. These cookies enable us to understand how frequently and in what way the website and its functions are used. They thus serve to improve the quality and user-friendliness of our website, in particular its content and functions. This enables us to continuously optimise our offer. The data collected in this way is pseudonymised by technical precautions. Therefore it is not possible to assign the data to your person. The data will not be stored together with other personal data concerning you. Our legitimate interest in data processing lies in the aforementioned purposes. The legal basis for this is Art. 6 Para. 1 S. 1 lit. f GDPR. As the cookies are stored on your computer, you as a user also have full control over the use of cookies. You have the option of using the security settings of your browser to determine whether cookies are stored at all. You can, for example, not accept cookies from the outset or only accept cookies on request or specify that cookies are deleted each time you close your browser. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to their full extent.


Storage period/deletion

We will delete or block your personal data as soon as the purpose of storage has been achieved or

no longer applies. Any further storage will only take place if this is given to us by national or European regulations. In this case, the data will be blocked or deleted when the storage period stipulated in the respective regulations has expired, unless we need your data to fulfil a contract concluded between us.


Information on the contact possibilities we provide

If you address us via e-mail, social media, telephone, post and our enquiry form or contact form or otherwise and provide us with personal data such as your name, your telephone number or your e-mail address or provide further information about your person or your concern, these data will be stored and processed in our company to process your inquiry. Legal basis: If you have submitted your request via our contact form, the legal basis for the processing of your data is Art. 6 Para. 1 lit. a GDPR. If you make your request within the scope of contractual or pre-contractual relations with us, the legal basis for the processing of your data is Art. 6 Para. 1 lit. b. GDPR.

If your inquiry does not fall under one of the aforementioned categories, our legitimate interest in the processing of your data lies in answering your inquiry properly and in your interest, Art. 6 para. 1 lit. f GDPR. 

Deletion: The personal data collected by us will be deleted if they are no longer required. We check the necessity every 2 years. You can also revoke the data processing at any time.


Dealing with your data in the trip planning procedure

If you enquire to us to plan travel, we will process the personal data you provide to us during the planning process. If you send the data by e-mail or via the enquire or contact form of our online presence, the processing will take place electronically. If an travel contract is concluded following the planning process, we store your data for the purpose of processing your booked trip in accordance with the statutory regulations. 

Purpose: The purpose lies in the handling of the application procedure. Legal basis: The legal basis for the processing of your data for the aforementioned purpose is Art. 6 Para. 1 lit. b GDPR. 

Deletion: If a planned travel is not concluded, your data will be deleted after completion of the planning procedure or at the latest 2 months after its conclusion. This does not apply if legal regulations prevent the deletion or if the further storage of your data is necessary for the purpose of the presentation of evidence.

Prevention: In addition, you have the right at any time to withdraw your travel enquiry or to demand the deletion of your personal data.


Your rights under the GDPR

According to the GDPR, you are entitled to the rights listed below, which you can assert at any time with the responsible person named in section 1 of this data protection declaration:

Right of access: Pursuant to Art. 15 GDPR, you may request confirmation as to whether and which of your personal data we process. In addition, you may request from us free of charge information on the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of complaint and the origin of your data, if not collected from us. You also have a right to know whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you have the right to obtain information about the appropriate guarantees in connection with the transfer. Right to rectification: Pursuant to Art. 16 GDPR, you may request the correction of incorrect or incomplete personal data stored by us and relating to you. Right to deletion: In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, provided that we do not require their processing for the following purposes: to fulfil a legal obligation,to assert, exercise or defend legal claims, the exercise of freedom of expression and information, or for reasons of the cases of public interest referred to in Article 17(3)(c) and (d) GDPR. Right to limitation: Pursuant to Art. 18 GDPR, you have the right to request limitation of the processing of your personal data if the accuracy of the data is disputed by you for a period of time that allows us to verify the accuracy of the personal data, the processing of your data is unlawful, but you refuse to delete it and instead demand that the use of the data be restricted, we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims you have objected to the processing of your data in accordance with Art. 21 GDPR, but it is not yet clear whether the justified reasons which entitle us to further processing despite your objection outweigh your rights.

Right to be informed: If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of the correction or deletion of the data requested by you or the restriction of processing, unless this proves to be impossible or involves disproportionate effort.You have the right to be informed by us of such recipients.


Our online presence on social networks

We operate online presences within the social networks listed below. If you visit one of these presences, your usage data will be collected and processed by the respective provider. As a rule, this is done using cookies, which are stored on the end device you are using. For the term "cookie" see above under the corresponding heading. Cookies are used to store your usage behaviour and your interests and to create corresponding usage profiles. In addition, data can be stored in the user profiles independently of the device you are using. This is particularly the case if you are a member of the respective platform and logged in to it.


On our website we have embedded plugins in the form of "social media buttons" of the providers we use. You can tell which plugin belongs to which provider by the logo with which the plugin is marked. If you call up a page of our online presence on which such a plugin is implemented, a connection is automatically established between your browser and the provider's servers with the respective provider of the plugin and a cookie is set on the end device used by you by the provider. Already at this time a data transfer can take place even if you do not have an account with the respective operator of the social network or have an account there, but are not logged in there at the moment of visiting our website.


In addition, data is transferred to the provider as a result of further interactions with the respective social plugin (e.g. clicking the "Like me" button on Facebook). The data collected is generally used by the provider for advertising and market research purposes by creating user profiles based on your usage behaviour. These, in turn, can be used by the providers to play out interest-related advertising to you. You have a right of revocation against the creation of user profiles. In order to exercise this right, you must contact the respective provider. If you have an account with the provider, your usage data can be linked to it. In order to prevent such a linking of your data, you can log out of the provider's service before visiting our site.


For which purpose and to what extent data is collected by the provider, you can find out from the respective data protection declarations of the providers, which are communicated in the following. We ourselves have no influence on which data is collected and how this data is used by the provider. If you request information in detail or wish to exercise your rights, you can do this most effectively with the respective provider itself, as only the respective providers have access to your data. We would like to point out that your user data can be transferred and processed outside the European Union. In this case, there is a risk that the enforcement of your rights may be made more difficult. Those US providers who are certified under the Privacy Shield have undertaken to comply with EU data protection standards. The information on whether the respective provider has such a certificate can be found in the information on the providers listed below. Legal basis: If you have been asked by one of the providers listed below to consent to data processing, the legal basis for processing is Art. 6 Para. 1 lit. a GDPR. Otherwise, your data will be processed on the basis of our legitimate interests in contacting you and communicating with you, Art. 6 para. 1 lit. f. GDPR. Prevention: With regard to the respective opt-out options, we refer you to the following linked information provided by the providers.


We maintain online presences on the following social networks:



Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 - USA

Privacy policy available at:




Facebook is a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 - USA.

Seat in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 - Ireland

Privacy policy available at:

Opt-Out: and

Privacy Shield:

Google Analytics

On our website we use "Google Analytics",

a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use Google Analytics to record and statistically evaluate visitor flows on our website. Among other things, Google Analytics collects data on which website you accessed our website from (so-called referrers), which subpages of the website you accessed or how often and for how long a subpage was viewed and which interactions you carried out. To collect and store this data, Google Analytics places a cookie on the device you are using (see the term "cookies" above). We use the AnonymizeIP function to make your IP address anonymous so that it is shortened and can no longer be assigned to your visit to our website. Further transmitted information is not assigned to the anonymous IP address by Google or linked to it. The information generated in this way is transferred to Google's servers in the USA and stored there. Google may pass on this personal data collected through the technical process to third parties. We have concluded an order processing contract with Google. According to this contract, Google is entitled and obliged to evaluate the information obtained for us and to create statistical reports for us on the type and extent of website use. These statistics enable us to constantly improve our services, to carry out a cost-benefit analysis of our Internet marketing and to make our Internet presence more interesting and user-friendly for you as a user. Legal basis: We obtain your consent to the use of this service via a so-called opt-in. This means that the cookie, the pixel-code or similar procedures used to process your personal data via this service will only be activated after you have given your consent. The legal basis is Art. 6 para. 1 lit. a GDPR. If you are in Germany and have not yet reached the age of 16 (14 in Austria and Switzerland), you are not yet in a position, according to the assessment of the respective national legislator, to give effective data protection consent. We regard your opt-in as your reasonable expectation with regard to the use of cookies. In this case, we refer to Art. 6 para. 1 lit. f GDPR as the legal basis. In this case, our legitimate interests lie in the user-friendly design of our online offering and our economic interest in the collection, storage and evaluation of the data material. Deletion: The data collected and transmitted by us in this way are automatically deleted after 26 months. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available at However, you may not be able to use the full functionality of our website afterwards. Alternatively, you can prevent the storage of cookies by setting a so-called opt-out cookie, which prevents data from you being collected on our website in the future. Please click on the following <Link>. In addition, you have the possibility to prevent the storage of cookies by setting this in your browser. Cookies that have already been set can be deleted by you at any time.


Information about the third party provider:

Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of use:

Overview of data protection:

Privacy policy:

Google's use of data when you use the websites or apps of our partners:

Use of data for advertising purposes:

Personalized advertising by Google:


Google has signed and certified a privacy shield agreement with the European Union and the United States. This means that Google is committed to complying with the standards and regulations of European data protection law. For more information, please see the following linked entry: 


Right of withdrawal

In accordance with Art. 7 para. 3 GDPR, you have the right to revoke your consent to the processing of your data at any time. The revocation declared by you does not alter the legality of the processing of your personal data until revoked.


Right of objection

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you on the basis of a weighing of interests (Art. 6 para. 1 lit. f GDPR). This is particularly the case if the data processing is not necessary for the fulfilment of a contract. If you make use of your right of objection, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons worthy of protection outweigh your interests and rights.


Irrespective of the above, you have the right at any time to object to the processing of your personal data for advertising and data analysis purposes.


Please address your objection to the above contact address or to:


Safety precautions

In addition, we take technical and organizational security measures in accordance with the state of the art in order to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties.


Timeliness and amendment of this data protection declaration

This Privacy Policy is currently valid and as of May 2019.

Due to changes in legal or official requirements, it may be necessary to amend this Privacy Policy.