Privacy Policy

PRIVACY POLICY

Last updated: May 14, 2025

1. Data Controller

Tugatrips Tours & Events Lda, with registered office at Rua Vale da Carrasqueira nº 9, 3rd floor, 2655-433 Ericeira, Portugal, and tax ID 515303550, is the entity responsible for processing personal data collected through the website www.tugatrips.com, in accordance with Regulation (EU) 2016/679 (GDPR).

2. Categories of Personal Data Collected

We may collect and process the following personal data:

a) Data provided directly by the user:

• Full name
• Email address
• Telephone number
• Information required to manage reservations or contact requests

b) Data collected automatically:

• IP address
• Device and browser information
• Pages visited and time spent
• Date and time of access

3. Purposes of Data Processing

Personal data may be used for the following purposes:

• Managing bookings and delivering contracted services
• Responding to user enquiries and requests
• Sending promotional and informational communications (where consent has been provided)
• Improving service quality and user experience
• Compliance with legal or regulatory obligations

4. Legal Basis for Processing

Processing is based on the following legal grounds:

• Performance of a contract or pre-contractual steps
• Consent of the data subject
• Compliance with legal obligations
• Legitimate interests of Tugatrips, including security, fraud prevention and, where permitted, direct marketing

5. Data Sharing with Third Parties

Personal data may be shared with third parties, in particular:

• Google LLC – for analytics and advertising services
• Meta Platforms, Inc. – for Facebook and Instagram marketing
• Mailjet SAS – for email communications
• Ventrata Ltd. – for online booking management

These entities act as data processors under written agreements and are required to comply with applicable data protection laws.

6. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards will be implemented, such as:

• Standard contractual clauses approved by the European Commission
• Verification of adequacy decisions
• Other safeguards as provided under the GDPR

7. Data Retention Period

Personal data will be retained only for as long as necessary for the purposes for which it was collected, and may be retained for longer periods where legally required.

8. Rights of Data Subjects

In accordance with applicable legislation, data subjects have the following rights:

• Right of access
• Right to rectification
• Right to erasure (within legal limits)
• Right to restriction of processing
• Right to object
• Right to data portability

To exercise these rights, you may contact us at: [email protected]

Tugatrips reserves the right to verify the identity of the requester and may reject requests that are manifestly unfounded or excessive, in accordance with the law.

9. Security Measures

Appropriate technical and organizational measures have been implemented to protect personal data against unauthorized access, loss, destruction or disclosure.

10. Changes to This Policy

Tugatrips may update this Privacy Policy at any time. The most recent version will always be available on our website. Regular consultation is recommended.