PRIVACY POLICY

Explore Iberia, a trade mark of Elos da Montanha – Cooperativa de Desenvolvimento Rural, C.R.L., with registered office at Lugar da Costinha, Mentrestido, Vila Nova de Cerveira, Portugal, NIPC 507232402, is the controller of the personal data processed through this website and through related communications.

This Privacy Policy explains how Explore Iberia collects, uses, stores and protects personal data when you visit our website, request information, ask for an itinerary, contact us, subscribe to communications, or use our services.

Personal data collected

Explore Iberia may collect and process the following categories of personal data, depending on how you interact with us:

identification and contact details, such as name, email address, telephone number and country of residence;
travel-related information provided by you in connection with requests, bookings or itinerary preparation;
communication data contained in emails, contact forms and other messages sent to us;
billing or transaction-related data, where applicable;
technical data, such as IP address, browser type, device information, and website usage data collected through cookies or similar technologies, where applicable.

Purpose and legal basis of processing

Explore Iberia processes personal data only where there is a valid legal basis under the GDPR, including:

to respond to enquiries, prepare itineraries, send proposals and manage pre-contractual requests, on the basis of steps requested by the data subject prior to entering into a contract;
to manage bookings, provide travel services and communicate operational information, on the basis of contract performance;
to comply with legal, tax, accounting and regulatory obligations, on the basis of legal obligation;
to manage complaints, incidents, disputes and the defence of legal claims, on the basis of legitimate interests and, where applicable, legal obligation;
to send marketing communications, newsletters or promotional content, where consent is required, on the basis of your consent;
to improve website functionality, security and performance, and to analyse website usage where applicable, on the basis of legitimate interests or consent, depending on the tool used and the applicable cookie settings

Data sharing

Explore Iberia does not sell or rent personal data. Personal data may be shared only where necessary and appropriate, including with:

service providers and technology providers acting on our behalf, including website, hosting, form, CRM, email marketing or automation providers such as Wix;
local partners, guides, accommodation providers, transport providers, activity providers or other suppliers, where necessary to prepare, organize or deliver the requested services;
insurers, professional advisers, public authorities or other entities, where required by law or necessary for the establishment, exercise or defence of legal claims.

Where third-party providers process data on behalf of Explore Iberia, they are required to process it only under appropriate contractual and legal safeguards.

International transfers

Where personal data are processed by service providers operating outside the European Economic Area, Explore Iberia will ensure that such transfers are subject to appropriate safeguards in accordance with applicable data protection law.

Data retention

Personal data are kept only for as long as necessary for the purposes for which they were collected, and, where applicable, for the periods required by law or necessary for the establishment, exercise or defence of legal claims. Different categories of data may be kept for different periods depending on the applicable purpose and legal basis.

Your rights

Under the GDPR and applicable Portuguese law, you may have the right to:

access your personal data;
request rectification of inaccurate or incomplete data;
request erasure of your data, where legally applicable;
request restriction of processing;
object to processing based on legitimate interests;
withdraw consent at any time, where processing is based on consent;
request data portability, where legally applicable;
lodge a complaint with the Portuguese Data Protection Authority, Comissão Nacional de Proteção de Dados (CNPD).

To exercise your rights, please contact: info@exploreiberia.pt

Cookies and website technologies

This website may use cookies or similar technologies to ensure proper functioning, improve performance, analyse usage and, where applicable, support communications or marketing tools. Where legally required, non-essential cookies will only be used with your consent. For more information, please refer to our Cookie Policy.

Data security

Explore Iberia implements appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction or damage. Access to personal data is limited to persons who need it for legitimate business purposes and who are subject to confidentiality obligations.

Images and promotional use

Photographs or videos in which individuals are identifiable will only be used for promotional or communication purposes where there is an appropriate legal basis, including consent where required.

Legal disclosures

Personal data may be disclosed where required by law, regulation, court order or request from a competent authority, or where necessary to protect legal rights or comply with legal obligations.

Changes to this Privacy Policy

Explore Iberia may update this Privacy Policy from time to time. The most current version will be made available on the website, together with its effective date. Where changes are material, appropriate notice may also be provided.

Applicable law

This Privacy Policy is governed by Regulation (EU) 2016/679, Portuguese Law No. 58/2019, and other applicable data protection rules in force in Portugal and the European Union.