Privacy Policy

Privacy, Personal Data Protection and GDPR

Classic Portugal Travel is committed to protecting the privacy and security of personal data and processes all personal information in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), applicable Portuguese data protection legislation and any subsequent amendments.

Personal Data Collected

Classic Portugal Travel may collect and process personal information including:

  • Full names;
  • Dates of birth;
  • Nationality;
  • Passport information;
  • Contact details;
  • Emergency contact information;
  • Travel preferences;
  • Dietary requirements;
  • Accessibility requirements;
  • Payment-related information; and
  • Other information necessary for the provision of travel services.

Purpose of Processing

Personal data may be processed for the following purposes:

  • Preparing travel proposals and itineraries;
  • Booking accommodation, transport and experiences;
  • Providing concierge and customer support services;
  • Communicating with clients regarding their travel arrangements;
  • Complying with legal, regulatory and tax obligations;
  • Protecting the safety and welfare of travellers;
  • Marketing communications where consent has been provided.

Legal Basis for Processing

Personal data is processed on one or more of the following legal bases:

  • Performance of a contract;
  • Compliance with legal obligations;
  • Legitimate business interests;
  • Protection of vital interests;
  • Consent, where required by law.

Data Sharing

Classic Portugal Travel may share personal data with:

  • Hotels and accommodation providers;
  • Transportation providers;
  • Tour guides and activity operators;
  • Insurance providers;
  • Payment processors;
  • Professional advisers;
  • Governmental, border control or regulatory authorities where legally required.

Certain suppliers may be located outside the European Economic Area. Where international transfers occur, appropriate safeguards will be implemented in accordance with GDPR requirements.

Data Retention

Personal data will be retained only for as long as necessary to fulfil contractual, legal, accounting, regulatory and business obligations.

Certain records may be retained for up to ten (10) years where required by Portuguese tax, accounting or legal obligations.

Client Rights

Subject to applicable law, clients have the right to:

  • Access their personal data;
  • Request correction of inaccurate information;
  • Request erasure of personal data;
  • Restrict processing;
  • Object to processing;
  • Request data portability;
  • Withdraw consent where processing is based on consent.

Requests may be submitted in writing to Classic Portugal Travel using the contact details provided on our website.

Data Security

Classic Portugal Travel maintains appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, disclosure, alteration or destruction.

Data Breaches

In the event of a personal data breach presenting a risk to individuals' rights and freedoms, Classic Portugal Travel will comply with all notification obligations required under GDPR and applicable Portuguese law.

Supervisory Authority

Clients have the right to lodge a complaint with the Portuguese Data Protection Authority:

Comissão Nacional de Proteção de Dados (CNPD)

www.cnpd.pt

Nothing in this clause limits any rights granted to data subjects under GDPR or applicable Portuguese legislation.