Legal
Privacy Policy
Last updated: 2026-10-08
Data controller
For bookings and traveller requests on this website, Sonali Shrikant Harshe is the data controller. Use its contact details to exercise your data protection rights. Contact: contact@tourswithsonali.com.
Odybook Platform Role
SYNSETIO provides the Odybook SaaS platform and processes booking data on documented instructions from the operator for tenant booking services. SYNSETIO may also process limited technical data for its own platform security and operation.
Data Used for Booking
Booking forms may request identity, contact, participant count, selected date, payment status, and practical information needed to prepare the experience. Optional practical notes should be limited to what is needed for the service. If you accept "Booking source" in the cookie choices, a booking or tour request also records how you reached this site: the campaign tags of the link you followed (UTM parameters), the referring website and the first page you visited. Without that consent none of this is read, and a request records only your optional answer to "How did you hear about us?". The operator uses this to learn which channels bring bookings, based on your consent, which you can withdraw at any time with the cookies link.
Purposes, Data Categories and Legal Bases
Identity, contact, booking, participant and selected-date data are used to prepare, confirm and perform the booking contract. Payment status and transaction references are used to manage payment and accounting obligations. Messages and practical notes are used to answer traveller requests and prepare the service where needed for the contract or the traveller's request. Security logs and error diagnostics are used for platform security and reliability based on legitimate interests. Optional operator marketing uses your name and email only after your separate consent. Refusal or withdrawal does not affect the booked service.
Required and Optional Data
Identity, contact, selected service, date, participant count and payment information can be required to conclude or perform a booking. Optional practical notes are not required, but refusing them may limit the operator's ability to handle a specific request.
Retention
Retention periods are not specified by the operator on this storefront. Booking, accounting, dispute and security data must be kept only for verified legal, contractual or operational periods.
Operator Privacy Notice
The operator has not published additional operator-specific privacy information on this page yet. Use the contact details on this site for access, correction, deletion, objection, restriction, portability, and withdrawal requests where those rights apply.
Service Providers
Booking operation can require technical, payment, email, hosting, and supplier services. Data is used for the booking and related legal or operational obligations.
Recipients and Transfers
Recipients can include the operator, SYNSETIO as Odybook technical provider, Vercel for hosting, Sentry for error monitoring when enabled, payment and email providers used during booking, and suppliers needed to perform the selected experience. Vercel uses a global network to route requests and deliver content. Your IP address, requested page address and technical request headers may be processed outside the European Economic Area, including in the United States and India. Odybook's application servers run in Vercel's Paris region (France) and booking data is stored in Frankfurt (Germany). Vercel is certified under the EU-U.S. Data Privacy Framework and its data processing addendum includes the European Commission standard contractual clauses. Safeguards for other suppliers chosen by the operator are not specified on this storefront unless the operator states them.
Privacy Rights
Travellers may request access, rectification, erasure, restriction, portability and objection where those rights apply. Where processing relies on consent, consent can be withdrawn without affecting earlier lawful processing.
Supervisory Authority
Travellers may lodge a complaint with the CNIL in France or another competent EU supervisory authority.
Automated Decisions
This storefront does not state that bookings are subject to solely automated decisions producing legal or similarly significant effects. If the operator enables such processing, the operator must disclose it before use.
Visit statistics
Without cookies and without asking for consent, Odybook counts visits to this storefront for the operator, to measure its audience. Each page view records only the page address without its parameters, whether you came from another website (that website is used only for this check and never kept, and campaign tags are never read), the device type (mobile, tablet or computer) and the country derived from your IP address. Your IP address is used only for a moment to filter abuse and is never stored, and no identifier is placed on or read from your device. Booking confirmation and payment pages are never counted. Only daily totals per page are kept, for 25 months, and the operator sees rounded figures. SYNSETIO processes these statistics as the operator's processor and never uses them for its own purposes or combines them with other sites. You can object at any time with the button below; your choice is kept in this browser's local storage. Browsers that send the Global Privacy Control signal are not counted.
Your visits to this storefront are counted anonymously.
Cookies
With your consent only ("Booking source" in the cookie choices), this storefront reads the campaign tags of the link you followed (UTM parameters), the referring website and the first page you visited, keeps them for this browser tab in session storage, and adds them to your booking or tour request. They are not shared with advertising or analytics providers. Nothing is read before you choose, refusing has no effect on bookings, and you can change or withdraw your choice at any time with the cookies link at the bottom of every page. Your choice is kept for 6 months in essential local storage. With your consent only, this storefront also uses the measurement tools below; nothing loads before you choose. Vercel Web Analytics (Vercel Inc.; audience measurement consent) counts page views by page, referring site and campaign without cookies or identifiers stored on your device. Vercel may process this data outside the European Union, including in the United States.