Privacy notice

Provider and data controller

Pernoita and Pernoita Business are services of Redye Intelligence LLC, a limited liability company formed in New Mexico, USA. These notices cover pernoita.com, pernoita.de, pernoita.es and their Business subdomains.

Registry: New Mexico Secretary of State · Entity ID: 0008083564. Represented by Alexander Hochheimer, Managing Member.

Registered address at our registered agent; not a public-facing travel office.

Contact

Leisure travel: travel@pernoita.com
Business travel: business@pernoita.com

You may use the same contact channels or our postal address for privacy requests.

Website and hosting

We use Netlify, Inc., USA, to host this website. Page requests involve technical information such as IP address, requested URL, time, browser information and, where supplied, the referring page. This supports delivery, troubleshooting and security.

Where the GDPR applies, the legal basis is Article 6(1)(f): our legitimate interest in a reliable and secure website. Images and fonts are served through our website; Google Fonts, maps and social-media content are not embedded.

Cloudflare DNS

Cloudflare, Inc., USA, resolves our domain names, processing domain names and technical DNS-query information. Website records remain DNS only, without an HTTP proxy. The purpose is reliable availability (Article 6(1)(f) GDPR where applicable). Optional visitor analytics is separate.

Enquiry forms

Your name, email address and message are required so that we can identify and answer your enquiry. Destination, dates, travellers, budget and, for business enquiries, company or assistant details are optional. The form cannot be submitted without the required fields.

Submitting the form sends your details over HTTPS to Netlify Forms, where they are stored for our authorised team. Technical submission information also supports abuse prevention. Configured notifications may create additional email copies. The form uses a spam-prevention field, not embedded reCAPTCHA. It resets after a confirmed submission; following an error, entries remain available for editing.

We handle enquiries about your own travel to take pre-contractual steps or perform a contract, under Article 6(1)(b) GDPR. For assistants and business contacts, we rely on our legitimate interest in business communication and coordination, under Article 6(1)(f). An enquiry is neither a booking nor a newsletter subscription.

Email

We use Google Workspace for business email. Google processes messages, contact details and technical metadata to provide and secure the service. The legal basis is handling your enquiry or our contract (Article 6(1)(b) GDPR), or our legitimate interest in communication with business contacts (Article 6(1)(f)). International processing is governed by the applicable Google contractual terms and transfer safeguards.

Communication and bookings

We use correspondence and travel information to answer enquiries and prepare requested services. Forms do not automatically forward every enquiry to Fora. Where necessary for the requested service, we share relevant information with Fora Travel, Inc. and participating hotels, airlines, cruise operators, transfer providers or other travel suppliers. Specific recipients depend on your journey.

Pernoita is responsible for its own processing. Fora and suppliers may be separate data controllers for their processing; their notices also apply to their services. Payments, including planning fees, are handled through Fora. This website does not collect credit-card or bank details.

Other travellers and sensitive information

Please do not include passport copies, payment details, health information or confidential business documents in an initial enquiry. If additional or sensitive information is needed for a booking, we separately explain the appropriate channel, purpose and required legal basis. Voluntarily sending information does not replace any required explicit consent.

Please inform fellow travellers or other people whose information you share about this notice. Information about children is supplied for travel enquiries through a responsible adult; the form is not directed at children.

International processing

Our company is registered in the USA; our team may handle enquiries in Thailand. Hosting providers and travel suppliers may process information in the USA and other countries. We do not promise exclusively European storage.

Where Chapter V GDPR applies, transfers require an appropriate legal basis. The linked Netlify and Cloudflare data-processing agreements contain international-transfer provisions, including standard contractual clauses where applicable. This is not a blanket guarantee covering every travel supplier. You may request information about the safeguards relevant to a particular recipient, and a copy, through our contact channels.

Retention

We keep enquiry information for as long as it is needed to handle the enquiry and any commissioned services. For enquiries that do not proceed, that purpose ends once the enquiry is closed and no reasonably justified follow-up is expected.

Longer retention may be necessary for statutory records or establishing, exercising or defending legal claims. Relevant criteria include the type of record and applicable obligations or limitation periods. This applies to form submissions, correspondence and booking records. Technical logs are retained as needed for operation, security and troubleshooting. We do not promise a single automatic deletion period.

Optional analytics and your choice

On Pernoita hosts where it is enabled, we load Cloudflare Web Analytics only after your consent. Its purpose is to analyse countries of origin, referring websites, page views, devices and loading performance. Page addresses, referrers and technical browser/performance information are transmitted to Cloudflare; your IP address is also involved in the connection. Cloudflare is a US provider; international processing and safeguards are described in the international-processing section and Cloudflare’s privacy information.

We rely on your consent for optional analytics (Article 6(1)(a) GDPR and, where required, section 25(1) TDDDG). Without consent, the analytics script is not loaded. We use no advertising trackers or individual visitor profiles. According to Cloudflare, Web Analytics uses neither cookies nor Local Storage to measure visits.

Separately, we store your banner choice, timestamp and configuration version in your browser’s Local Storage for 180 days solely to respect your choice. This necessary preference function is not visitor measurement. Your choice applies to this browser and website host, not automatically across domains. If storage is blocked, you may be asked again.

Use Analytics settings in the footer to decline or withdraw at any time. Withdrawal reloads the page to stop the analytics script; it does not retrospectively delete data already transmitted or affect earlier lawful processing. No analytics runs without JavaScript. External links load third-party services only when opened. We make no automated decisions producing legal or similarly significant effects.

Your rights

Where the GDPR applies, you have rights of access, correction, erasure, restriction and portability, subject to the statutory conditions. You may withdraw consent at any time for future processing without affecting the lawfulness of earlier processing.

You may object to processing based on legitimate interests for reasons relating to your particular situation (Article 21 GDPR). You may object to direct marketing at any time. We do not automatically use travel enquiries for direct marketing.

You may complain, in particular, to the supervisory authority where you habitually reside, work or believe an infringement occurred. Additional rights under applicable local privacy law are unaffected. Please use the contact channels above for requests.

Audience and changes

Our focus is on travellers in Asia; we occasionally address travellers in the European Union. We offer worldwide destinations independently of that focus. Privacy laws applicable to a particular processing activity remain applicable. We update this notice when our services change.