Privacy and Cookies Policy
Effective date: March 27, 2026
§ 1 GENERAL PROVISIONS AND CONTROLLER DETAILS
- The Controller of personal data collected through this website is the company Pura Alma Travel, Lda., with its registered office at: Monte da Saudade 1, Vale Figueira de Baixo, 7630-744 Zambujeira do Mar, Portugal.
- The company is registered in the Portuguese Commercial Registry under the Legal Person Identification Number (NIPC) PT518816699, with the Permanent Certificate Access Code (Código de Acesso): 0253-1087-5510.
- The company holds a travel and tourism agency license registered in the national registry under number RNAVT 12841.
- The legal representative of the Controller (Manager/Gerente) is Marta Anna Sagatowska.
- You may contact the Controller via e-mail at marta@puraalma.travel or by mail at the company's registered office address.
- Data processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR), Directive (EU) 2015/2302 on package travel, and the Portuguese Data Protection Act (Lei n.º 58/2019).
§ 2 PURPOSES AND LEGAL GROUNDS FOR PROCESSING
Personal data of Users are processed for the following purposes:
- Performance of Travel Services (Art. 6(1)(b) GDPR): Necessary for the conclusion and performance of a package travel contract, including flight, hotel, and insurance bookings.
- Newsletter and Marketing (Art. 6(1)(a) GDPR): Sending offers and travel inspirations based on voluntary consent (via the MailerLite system).
- Handling Inquiries (Art. 6(1)(f) GDPR): Legitimate interest of the Controller in providing efficient communication and responding to messages sent via the contact form.
- Legal and Accounting Obligations (Art. 6(1)(c) GDPR): Issuing invoices and maintaining financial reporting in accordance with Portuguese tax law.
§ 3 SENSITIVE DATA (HEALTH AND PREFERENCES)
- To ensure the safety of trip participants, the Controller may process data concerning health status (medical contraindications, allergies, mobility restrictions) and dietary preferences.
- The processing of such data occurs exclusively based on the explicit consent of the User (Art. 9(2)(a) GDPR) provided during the booking process.
- These data are treated with the utmost delicacy, sensitivity, and respect for privacy. They are never shared with third parties unless it is directly necessary for:
- Protecting the health and safety of the participant (e.g., providing allergy information to catering/hotels or medical services in case of emergency).
- Concluding an insurance policy or fulfilling travel requirements.
- Providing this data is voluntary, but necessary to ensure a safe and properly tailored travel experience.
§ 4 YOUR RIGHTS AND SUPERVISORY AUTHORITY
- You have the right to access, rectify, or erase your data ("right to be forgotten"), the right to restrict processing, and the right to object to marketing.
- Withdrawal of Consent: You may withdraw your consent for marketing (newsletter) at any time by clicking the "Unsubscribe" link in the footer of any email.
- Supervisory Authority: The primary supervisory authority for the company in Portugal is the Comissão Nacional de Proteção de Dados (CNPD) (www.cnpd.pt). You also have the right to lodge a complaint with the authority in your country of residence (e.g., President of UODO in Poland).
§ 5 DATA RECIPIENTS AND INTERNATIONAL TRANSFERS
- Data may be shared with service providers (hotels, carriers, local agents) in the destination countries of the trips, including countries outside the European Economic Area (EEA), which is necessary for the performance of the travel contract (Art. 49(1)(b) GDPR).
- The company uses trusted IT tools (Google, Meta, MailerLite) that ensure data protection standards compliant with EU requirements.
§ 6 TRACKING TECHNOLOGIES (COOKIES)
- The website uses cookies (Google Analytics, Meta Pixel) for traffic analysis and offer optimization.
- Users can manage their cookie consents using the Cookiebot tool available on the website.
- Forms are protected against automated attacks by the Google reCAPTCHA system.
§ 7 ARTIFICIAL INTELLIGENCE (AI)
- The company may use AI technologies (e.g., chatbots) for customer support, in accordance with the EU AI Act. These systems do not make binding legal decisions without human oversight and verification.
§ 8 COPYRIGHT PROTECTION
- All travel itineraries, descriptions, graphics, and photos published on the website are the intellectual property of Pura Alma Travel, Lda. Any unauthorized copying, distribution, or use of these materials without the express consent of the Manager is prohibited and subject to legal action.