PRIVACY POLICY
At AquaTerra Tours, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, disclose, process, and manage the data of our website visitors and customers when you interact with our website or book our tours and services. We are dedicated to maintaining the highest standards of data protection in compliance with Portuguese and European Union (EU) data protection laws, including the General Data Protection Regulation (GDPR).
1. Introduction
This Privacy Policy applies to all personal data collected and processed by AquaTerra Tours (hereinafter "AquaTerra Tours," "we," "us," or "our") through our website, booking platforms, and during the provision of our tour services. By using our website or booking a Tour with us, you agree to the terms of this Privacy Policy.
-
Company Name: AquaTerra Tours
-
Registered Address: [Insert AquaTerra Tours' Registered Address in Portugal]
-
Company Registration Number (NIPC): [Insert AquaTerra Tours' NIPC]
-
Contact Email: [Insert AquaTerra Tours' General Contact Email]
-
Contact Phone: [Insert AquaTerra Tours' General Contact Phone Number]
2. Types of Information We Collect and How We Collect It
We collect various types of information to provide and improve our services to you.
2.1. Information You Provide Directly: * Contact Information: Name, email address, phone number, postal address, nationality. * Booking Details: Dates of travel, number of participants, specific tour preferences, dietary requirements, medical conditions or physical limitations relevant to your safety and participation (as declared by you). * Payment Information: While we process payments, sensitive financial details (e.g., full credit card numbers) are typically handled by secure third-party payment processors. We do not store full credit card details on our servers. * Communication Data: Information you provide when you communicate with us via email, phone, or contact forms.
2.2. Information Collected Automatically (Website Usage Data): * Technical Data: IP address, browser type and version, operating system, device type, referral source, pages visited, time spent on pages, and other browsing behavior. * Cookies and Similar Technologies: We use cookies to enhance your browsing experience, analyze website traffic, and understand user preferences. For more details, please refer to our Cookie Policy [Link to your Cookie Policy, if applicable, otherwise integrate here].
3. Why We Collect Your Information (Purpose of Processing)
We collect and process your personal data for the following specific purposes:
-
To Provide and Manage Tours: To process your bookings, confirm your tours, manage itineraries, arrange logistics, and ensure your safe and enjoyable participation.
-
Communication: To respond to your inquiries, provide customer support, send booking confirmations, updates, and essential information related to your tour.
-
Safety and Well-being: To address any medical or physical needs during the tour and to ensure the safety of all participants.
-
Service Improvement: To understand how our website is used, analyze trends, and improve our services, website functionality, and tour offerings.
-
Marketing (with Consent): To send you promotional materials, newsletters, and special offers that may be of interest to you, where you have provided your explicit consent. You can opt-out at any time.
-
Legal and Regulatory Compliance: To comply with applicable laws, regulations, and legal processes in Portugal and the EU.
4. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
-
Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., booking and delivering a tour).
-
Legal Obligation: Processing is necessary to comply with a legal obligation (e.g., tax regulations, safety requirements).
-
Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving services, preventing fraud, direct marketing where permitted by law), provided your fundamental rights and freedoms are not overridden.
-
Consent: Where required, we will obtain your explicit consent for specific processing activities (e.g., for marketing communications or sensitive personal data).
5. Sharing Your Information with Third Parties
We will not sell, rent, or trade your personal data to third parties. We may share your information only when necessary for the provision of our services or as required by law:
-
Service Providers: With trusted third-party service providers who assist us in operating our business and delivering tours (e.g., payment processors, local transport providers, accommodation providers, activity partners). These providers are contractually bound to protect your data and use it only for the purposes for which it was shared.
-
Legal Compliance: When required by law, court order, or governmental authority.
-
Protection of Rights: To protect the rights, property, or safety of AquaTerra Tours, our participants, or the public.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. The retention period will vary depending on the type of data and the purpose of processing. For example, booking information will be kept for the duration of the contractual relationship and for a period thereafter as required by tax and consumer protection laws.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include [e.g., data encryption, secure servers, access controls, regular security audits]. While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure.
8. Your Data Protection Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
-
Right to Access: You have the right to request a copy of the personal data we hold about you.
-
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
-
Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data under certain circumstances.
-
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
-
Right to Object to Processing: You have the right to object to the processing of your personal data under certain circumstances.
-
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
-
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
-
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe your data protection rights have been violated. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).
-
To exercise any of these rights, please contact us using the details provided in Section 12.
9. Minors' Data
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors without parental consent. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete such information promptly.
10. Cookies and Tracking Technologies
Our website uses cookies to enhance user experience. A cookie is a small file placed on your device that enables website functions and analytics. By using our website, you consent to the use of cookies in accordance with this Privacy Policy. [If you have a separate, detailed Cookie Policy, you should link it here: "For detailed information on the cookies we use and your choices, please refer to our Cookie Policy."]
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new Privacy Policy on our website and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.
12. Contact Information
For any questions regarding this Privacy Policy or your personal data, please contact us:
-
Email: [Insert AquaTerra Tours' General Contact Email]
-
Phone: [Insert AquaTerra Tours' General Contact Phone Number]
-
Website: [Insert AquaTerra Tours' Website URL]
Last Updated: [Insert Date, e.g., July 15, 2025]
