Privacy policy

Travelcare — Agência de Viagens e Turismo, Lda. (hereinafter, TRAVELCARE), with headquarters at Rua Engenheiro Ferreira Dias 452, 1st floor, and NIPC 509 332 730, is a company dedicated to travel agency activity, being the owner of the domain www.travelcare.pt, where its website is hosted.

TRAVELCARE is committed to protecting the privacy and personal data of its customers, which is why it created and adopted this Policy and the practices described here. This Privacy Policy explains how your personal data is collected and processed, so we advise you to read it.

1. What is this Policy about?

This Privacy Policy explains how we collect and process personal data that is necessary to provide services available through our company. Examples of these services are booking flights, hotels, rent-a-car, business account management and reporting. The aim is for these services to be provided expeditiously and without disruption.

2. What is personal data?

Personal data is all information relating to a person and which identifies that person, or makes that person identifiable, regardless of the nature and support of the information, including the sound and image of the person. Examples of personal data we collect: name, telephone number and email.

Identifiable must be understood as a person who can be identified, directly or indirectly, in particular by reference to an identification number or other specific elements of their physical, physiological, psychological, economic, cultural or social identity.

3. How will we use your personal data?

TRAVELCARE will use the personal data you provide to us for the following purposes:

• Travel booking, with prior consent;
• To analyze and respond to your messages, customer support and information requests;
• To analyze and follow up on your application process to work with TRAVELCARE;
• So that we can send you newsletters or other publications that you have requested or that may be of interest to you;
• For operations and management of your reserves;
• For the operations and management of our website;
• To keep a record of your contact details;
• For commercial purposes, such as data analysis and audits;
• For fraud prevention;
• For the adaptation, improvement and modification of services;
• For the expansion of TRAVELCARE’s commercial activities.

Your personal data will not be reused for other purposes that have not been previously identified or that have no relationship with those for which they were initially collected.

4. What are the grounds for processing personal data?

The personal data that TRAVELCARE processes has specific grounds depending on the purposes for which it is intended: consent for that specific purpose, in the case of newsletters, website management, contact registration, commercial purposes and improvement of services; and the legitimate interests pursued by TRAVELCARE, in the case of website management, commercial purposes, fraud prevention, improvement of services and expansion of activity.

5. What personal data do we collect?

The personal data that TRAVELCARE collects and processes are only those that are necessary and appropriate for the purposes indicated:

• Booking of trips, flights, hotels, rent-a-car, transfer or other services: name, date of birth, passport photo, passport, identity card or citizen card, NIF, email and telephone contact;
• Application to work with TRAVELCARE: name, CV, email and telephone contact;
• Newsletters and other publications: name and email contact;
• Website operations and management: email contact;
• Commercial purposes and fraud prevention: name and NIF;
• Expansion of commercial activities: name, email contact, telephone number and NIF.

6. How do we collect your personal data?

We will collect your personal data through the forms on the website, but also through the communication it makes with your equipment and the email messages you send us. Data is collected directly from the data owner, by subscribing to the newsletter, through the browser, cookies, pixel tags and other similar technologies, IP address, user data and data sent by telephone, SMS and email.

TRAVELCARE is committed to processing your data in accordance with the law and in a legitimate manner. TRAVELCARE will not sell, rent or share your personal data with third parties, except in cases clearly identified in this Policy. TRAVELCARE services are not aimed at minors, and personal data of minors is not intentionally processed.

7. What are cookies?

Cookies are small information files that help identify your browser and that can store information, such as user settings and preferences. TRAVELCARE will store cookies on your device to personalize and make browsing as easy as possible, but also for troubleshooting, statistics, quality assurance and system security monitoring.

With the exception of cookies specifically necessary for the performance of the website, the storage of other cookies will always depend on the user's acceptance and consent, and this consent can be withdrawn at any time through specific browser tools.

8. What are pixel tags and other similar technologies?

Pixel tags, also known as web beacons and clear GIFs, may be used in connection with some services to track the actions of users, including email recipients, measure the success of marketing campaigns, and compile statistics about service usage and response rates.

9. How do we protect your personal data?

Your personal data is kept safe through the adoption of various security measures, of a technical nature — the data is kept on secure servers — and organizational, as only employees and the processes that must access them have access to the data, in accordance with rules created for this purpose.

When you browse the website, we protect your data with encryption, such as Transport Layer Security. Your password is stored using a one-way hash, meaning it cannot be retrieved or disclosed by anyone, including TRAVELCARE, and can only be reset.

Although we take the care and precautions we deem appropriate, we must be aware that no security system is impenetrable. You must keep your password secret, notify us immediately if you believe it has been misused, and be careful to log in and out each time you close your browser.

10. How long do we keep your personal data?

Your personal data will be kept for as long as necessary for the purposes for which they are intended:

• Booking of trips and services inherent to the agency's activity: 12 years;
• Registration of your contact details: 12 years;
• Commercial purposes such as data analysis and audits: 12 years;
• Fraud prevention: 12 years;
• Response to messages, customer support and information requests: 1 year;
• Application process: 1 year;
• Newsletters and other publications: 1 year;
• Website operations and management: 1 year;
• Improvement and modification of services: 1 year;
• Expansion of commercial activities: 1 year.

If the law provides for a specific or mandatory period, the data retention period will be that. After the retention period ends, all personal data collected will be deleted.

11. How can you exercise your rights?

Legislation gives you the right to request us, as controller, access to personal data concerning you, as well as its rectification or erasure, limitation of processing, the right to object to processing and the right to data portability.

• Access: right to obtain confirmation as to whether or not personal data concerning you are being processed and, if this is the case, the right to access your personal data;
• Rectification: the right to obtain the rectification of inaccurate personal data concerning you and to have your incomplete data completed;
• Deletion: the right to obtain the erasure of your personal data when one of the reasons listed in the legislation applies;
• Limitation of treatment: the right to obtain limitation of treatment if one of the situations listed in the legislation applies;
• Opposition: the right to object at any time to the processing of personal data concerning you;
• Portability: the right to receive personal data concerning you in a structured, commonly used and machine-readable format.

You also have the right to lodge a complaint with a supervisory authority, the National Data Protection Commission, at www.cnpd.pt. For the purpose of exercising the rights indicated above, you must contact TRAVELCARE using the contact form or geral@travelcare.pt.

If you ask us to delete some or all of your personal data, some of the services requested may not be provided to you, and TRAVELCARE will retain the personal data necessary to comply with its legal obligations.

12. When do we communicate data to third parties?

TRAVELCARE may use third parties to provide certain services, in terms of maintenance, technical support, marketing, invoicing or payment management, and they may have access to some of the personal data necessary for the contractual purposes.

TRAVELCARE ensures that the entities that have access to the data are credible and offer high guarantees of protection, with data never being transmitted to them beyond what is necessary to provide the contracted service, with TRAVELCARE remaining responsible for the personal data made available. For example, for data center management purposes, TRAVELCARE uses Microsoft services.

TRAVELCARE may also communicate your data to companies within its business group with whom it has commercial partnerships to create and offer benefits, or to other partners outside its business group, but will only do so with prior authorization from you. You may also transmit data to third parties within the scope of investigations, inquiries and judicial or administrative proceedings, as long as it is duly ordered by a court order to that effect.

13. Third-party websites

The website may contain links to other websites, which may collect and process your personal data. This processing is the sole responsibility of the owners of these websites, and TRAVELCARE has no responsibility for their policies or practices. An example of these third parties is Facebook or Google, through the buttons on the website.

14. Data transfers outside the European Union

If data transfers may occur to third countries that do not belong to the European Union, TRAVELCARE will comply with the law, particularly with regard to the suitability of the destination country in terms of personal data protection and the requirements applicable to these transfers, and personal data will not be transferred to jurisdictions that do not offer guarantees of security and protection.

15. The smallest

The website is not aimed at children under 16, so we ask that minors do not provide us with personal data through the website, application, social networks or emails.

16. Sensitive data

TRAVELCARE would like to thank you if you do not send us or make us aware of any sensitive personal data, that is, information that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric information, data relating to health, sex life or sexual orientation. Such personal data will be immediately deleted.

17. Changes to the Privacy Policy

TRAVELCARE reserves the right to readjust or change this Privacy Policy at any time, with these changes being publicized.

18. Contact

If you have any questions or concerns related to this Privacy Policy, please contact us in writing via email geral@travelcare.pt.

Porto, May 21, 2018.