1. Overview & Data Controller
Gateera ("we," "our," or "us") operates the website Gateera.com and associated travel discovery services. We are committed to safeguarding the privacy and personal data of every traveler who visits our platform.
For the purposes of the General Data Protection Regulation (EU GDPR), the UK Data Protection Act 2018, and California Consumer Privacy Act (CCPA/CPRA), Gateera acts as the data controller for information processed through your direct interactions with our search interface. When you click through to complete a hotel reservation with one of our trusted travel partners (such as Agoda, Booking.com, or Trip.com), that provider becomes an independent data controller for your booking transaction.
2. Information We Collect
We collect minimal data necessary to deliver fast, accurate travel search results:
- Search & Travel Preferences: Destination queries, arrival and departure dates, number of rooms, adults and children, preferred display currency (e.g., AED, USD, EUR), and language selection.
- Technical & Device Data: Internet Protocol (IP) address, browser type and version, operating system, time zone settings, device screen resolution, and referral URL headers.
- Usage & Interaction Metrics: Pages viewed, filters applied (price ranges, star ratings, guest review scores), search duration, and link interactions.
- Communications: If you contact our customer support or submit an inquiry, we retain your email address, name, and the contents of your message to resolve your request.
3. Legal Bases for Processing (GDPR Article 6)
We process your information under the following legal frameworks:
- Legitimate Interests: To provide, optimize, and secure our travel booking platform, prevent bot abuse and fraudulent traffic, and analyze platform performance.
- Consent: Where required by law, such as for non-essential analytics and marketing cookies, which you can modify at any time.
- Legal Obligation: To comply with applicable statutory laws, tax regulations, and lawful requests from regulatory authorities (including the EU Digital Services Act).
4. Partner Handoff & Trusted Third-Party Approved Providers
Gateera queries certified travel inventory directly from trusted, verified, and officially approved third-party partner applications and distribution feeds, including:
- Agoda (Booking Holdings Inc.): For verified hotel inventory, live room pricing, and accommodation reservations.
- Viator (Tripadvisor Group): For curated sightseeing excursions, guided day tours, and attraction ticket fulfillment.
- Aviasales & Travelpayouts (Go Travel Un Limited): For international flight search, route schedules and airline bookings.
When you select a deal and click to book, we redirect you securely to the approved partner's encrypted reservation portal through allowlisted routing protocols.
During this redirect, we transmit only your specified travel parameters (e.g. check-in/out dates, passenger count, flight route code, tour date, or room category) so that the provider's checkout opens pre-populated with your chosen itinerary. We do not receive, process, or store your credit card numbers, billing addresses, or national passport details. All payment transactions, voucher issuance, and financial processing are conducted directly on the approved partner's PCI-DSS compliant checkout infrastructure.
5. Cookies & Tracking Technologies
We use essential session tokens to remember your chosen currency, selected language, and active search filters. We also utilize privacy-preserving aggregated analytics to understand search performance. For full details on cookie categories and how to control them, please review our Cookie Policy.
6. International Data Transfers
Because our global search infrastructure operates on distributed edge networks (including Cloudflare Workers), your requests may be processed on servers located outside your country of residence. We ensure all international transfers adhere to Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring equivalent data protection safeguards worldwide.
7. Data Retention Policy
We retain anonymized search telemetry for a maximum of 24 months to evaluate seasonal travel trends and system scalability. Direct support correspondence is retained for 12 months following resolution before being permanently purged.
8. Your Statutory Privacy Rights
Under international privacy laws (GDPR, UK GDPR, CCPA/CPRA), you are entitled to:
- Right of Access: Request a copy of any personal data we hold concerning you.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records where no statutory retention requirement applies.
- Right to Restrict or Object: Restrict or object to the processing of your data based on legitimate interests.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Non-Discrimination: We will never penalize or deny services to users exercising CCPA rights.
9. Data Security Measures
Gateera employs strict technical and organizational safeguards including 256-bit TLS encryption in transit, strict Content Security Policies (CSP), continuous DDoS mitigation, and edge-level rate limiting to prevent unauthorized data access or automated scraping.
10. Contacting Our Data Protection Officer
If you have any questions, wish to exercise your statutory privacy rights, or need assistance regarding this Privacy Policy, please contact our Data Protection Officer:
- Email: privacy@gateera.com
- Support Desk: Gateera Help Center