1. Introduction

This Privacy Notice (“Notice”) establishes how Eco Viagens protects the privacy of the Personal Data of our employees, customers, partners or any other entity with which Eco Viagens has relationships in the context of its activity.

As a travel agency, Eco Viagens needs to collect, use and disclose Personal Data to carry out business functions and activities, including making and managing travel reservations on behalf of its customers. At Eco Viagens, we are committed to protecting the privacy and confidentiality of Personal Data and maintaining a controlled environment (physical, electronic, human and procedural controls) aligned with operational risks.

In the context of the General Data Protection Regulation 2016/679 (“RGPD”), Eco Viagens is a “data controller” of any personal information provided to us in the context of the relationship with our customers or any other Interested Parties.

2. What Personal Data do we collect?

Personal Data has the meaning given by local data protection laws and, where the GDPR applies, the meaning is considered to be given within the meaning of the GDPR. Personal Data generally means data relating to an individual who can be identified from that data; or is identifiable from the combination of this data with other available data.

Generally, the type of Personal Data we collect is necessary to facilitate travel arrangements, support reservations or to arrange travel-related services and/or products on behalf of our customers.

In this sense, we normally process the following types of Personal Data about our customers:

• Contact details (such as name, home/mailing address, telephone number, email address);
• Payment data;
• Detailed passport data;
• Loyalty/frequent flyer program data;
• Data on dietary needs and health problems (if any); It is
• Other data relevant to travel plans or required by travel service provider(s) (e.g. airlines and accommodation or tourism providers).

By providing Personal Data, Interested Parties agree that this Notice will apply to the way we handle their Personal Data and consent to it being collected, used and disclosed as detailed in this Notice. If they do not agree with any part of this Notice, Interested Parties must not provide us with their Personal Data. If you do not provide us with your Personal Data, as well as if you withdraw the Consent you provided in accordance with this Notice, this may affect our ability to provide services to you, or negatively affect the quality of the services we can provide you. For example, most travel bookings must be made using the traveler’s full name and must include contact details and appropriate identification (e.g. passport details) and we cannot make bookings without this information. Please note that there may be cases where local data protection laws impose more restrictive Personal Data processing practices than the practices set out in this Notice. When this occurs, we will adjust our Personal Data processing practices to comply with these same local laws.

When our customers contact us for other purposes, Personal Data related to those purposes may also be collected. For example, we may collect Personal Data so that we can contact our customers in the context of a competition/campaign in which they have entered or to respond to questions or comments they have sent us. We also collect data necessary for use in our or our related entities’ business activities, including, for example, financial details needed to process transactions, video surveillance footage used for security purposes, or other relevant Personal Data that our customers may want us to provide. to supply.

Under some circumstances we collect Personal Data that may be considered sensitive data according to local data protection laws. Sensitive data may include (without limitation) racial or ethnic origin, philosophical or religious beliefs or affiliations, sexual preferences or practices, criminal history or alleged criminal record, membership of political, professional or commercial associations, biometric and genetic information, financial and health data. We will only collect sensitive data in accordance with local data protection laws, with the explicit consent of those concerned, and where the data is reasonably necessary or directly related to one or more of our functions or operational activities (for example, to make business plans). travel), unless required or authorized to do so by law. To the extent permitted or required by local data protection laws, our customers consent to our use and disclosure of their sensitive data solely for the purpose for which it was collected, unless we subsequently receive their consent for another purpose. For example, if our customers provide us with health data related to travel insurance they wish to take out, they consent to us using and disclosing this health data on their behalf in contacts made with the entity promoting that travel insurance. Another example occurs when our customers want to make their religious beliefs known because they are interested, for example, in certain holiday packages, consenting to the use and disclosure of this information to operate the trip. We will not use sensitive data for purposes other than those for which it was collected, unless we receive consent from its holders to do so.

3. How do we collect Personal Data?

We only collect Personal Data in accordance with local data protection laws. We generally collect Personal Data in the context of contacts with our customers, unless it is unreasonable or impractical to do so. Generally, this collection will occur when our customers:

• contact us in person, by telephone, letter, e-mail;
• visit us through our website; or
• contact us through social media.

We may also collect Personal Data when our customers:

• purchase or inquire about travel plans or other products and services;
• enter competitions or register for campaigns/promotions;
• sign up to receive marketing communications (e.g. e-newsletters);
• request brochures or other information.

In some circumstances, it may be necessary to collect Personal Data about our customers from third parties. This includes cases where an individual makes a travel reservation on behalf of another person(s) (for example, a family reservation, a group reservation or a reservation made through an employer). When this happens, we rely on the authorization of the person making the travel reservation to act on behalf of any other traveler on the reservation, as well as that person’s consent to collect, use and disclose Personal Data in accordance with this Notice. Our customers must inform us immediately if they become aware that their Personal Data has been provided to us by another person without their consent or if they did not obtain such consent before providing us with another individual’s Personal Data.

We make every effort to maintain the accuracy and integrity of the Personal Data we store and to ensure that all Personal Data is up to date. However, any Interested Party may contact us immediately if there are any changes to their Personal Data or if they become aware that we have inaccurate Personal Data (please see section 13 below). We cannot be responsible for any losses arising from inaccurate, erroneous, defective or incomplete personal information that Interested Parties, or someone acting on their behalf, provides to us.

4. How Do We Use Personal Data?

We will only process Personal Data when:

• We have been given consent for such processing (which can be withdrawn at any time, as detailed in section 8 of this Notice);
• Such processing is necessary for us to provide our services;
• Such processing is necessary to comply with legal obligations; and/or
• Such processing is necessary for our legitimate interests or those of any third party who receives that Personal Data (as detailed in sections 5 and 6 of this Notice).

When a customer contacts us in the context of a travel inquiry or reservation, the purpose for which we collect their Personal Data is generally to provide travel advice and/or assist in booking travel-related products and/or services. However, the purpose of the collection may vary depending on the specific circumstances disclosed in this Notice (e.g., collection of Personal Data for the purposes of participating in a campaign, collecting feedback, etc.).

When a customer makes a travel reservation or books products/services with our support, we generally act as an agent for travel service providers (e.g., for a hotel). In this case, we process Personal Data as necessary to provide the requested services, including collecting Personal Data for our internal purposes, as described in this Notice, and for the travel service provider for whom we act as an agent (e.g., to provide the booked services). For example, if a flight is booked through Eco Viagens, we will use the Personal Data to enable the flight booking and disclose the Personal Data to the airline to allow it to provide the flight service.

We may share data with our travel service providers (hotels, airlines, car rental companies, or other travel-related service providers). These travel service providers may also use Personal Data as described in their respective privacy policies to obtain additional information that facilitates the booking or provision of the requested services. We recommend that our customers review the privacy policies of any travel service providers acquired through Eco Viagens. We will provide copies of any relevant travel service provider terms, conditions, and privacy policies upon request.

We act as agents for many travel service providers worldwide, so it is not possible to list all the travel service providers for whom we act (especially their locations) in this Notice. For more information on the disclosure of Personal Data to travel service providers located outside the GDPR context, please refer to section 6 of this Notice.

If there is any concern regarding the transfer of Personal Data to a travel service provider or if further information is needed, please refer to section 13 of this Notice.

The purposes for which we collect Personal Data also include:

• Providing services or tools that our customers choose to use (e.g., saving travel preferences on our website in a wish list or saving Personal Data to allow pre-filling of online forms);
• Identifying fraud or errors;
• Legal or regulatory compliance;
• Developing and improving our products and services;
• Maintaining or improving our relationship with our customers, including creating and maintaining a customer profile that allows us to provide service aligned with their preferences;
• Market research, customer satisfaction assessment, and feedback collection on the services we provide;
• Facilitating our customers’ participation in loyalty programs;
• Conducting analyses related to our services, including but not limited to sales and travel destination preference trends;
• Supporting internal organization and accounting;
• Supporting compliance with applicable legal or customs/immigration requirements related to travel; and
• Other purposes as authorized or required by law (e.g., to prevent a threat to life, health, or safety, or to enforce Eco Viagens’ legal rights).

Where permitted by local data protection laws, we may use Personal Data to conduct marketing activities related to our products and services (and those of third parties) that we believe may interest our customers, unless they have requested not to receive such information. These activities may include, but are not limited to, sending emails, digital marketing, and other electronic notifications. Personal Data will be used for sending digital marketing material (including e-newsletters, emails, SMS, MMS, and IM) if customers have opted to receive such communications. Customers can sign up to receive e-newsletters and other promotional/marketing materials by following the relevant links on our website or requesting one of our staff to do so.

Any individual who does not wish to receive promotional or marketing material from us, or to participate in market research or receive other types of communication, should refer to sections 8 and 13 of this Notice.

5. What Personal Data is Disclosed to Third Parties?

At Eco Viagens, we do not sell, rent, or trade Personal Data. Personal Data will only be disclosed to third parties as set out in this Notice and in accordance with local data protection laws (note: in this Notice, the term “disclose” includes transferring, verbally or written sharing, sending, or making Personal Data available to another entity).

Personal Data may be disclosed to the following types of third parties:

• Contracted entities, suppliers, and service providers, including:
• The situations described in each of the circumstances outlined in section 4 of this Notice (“How Do We Use Personal Data?”);
• CT solution providers that support us in providing products and services (such as any external data hosting providers we may use);
• Publishers, printers, and distributors of marketing material;
• Event and exhibition organizers;
• Marketing agencies or market research consultants;
• Courier or postal services;
• External consultants (such as lawyers, accountants, auditors, or recruitment consultants);
• Travel service providers, such as travel wholesalers, tour operators, airlines, hotels, car rental companies, transfer managers, and other related service providers;
• Any third party to whom we assign or transfer any of our rights or obligations;
• Individuals making travel bookings on behalf of others (for example, a family member, friend, or colleague);
• Employers, in the context of corporate, business, or government travel;
• Contact persons (e.g., a family member) when our customers are unreachable and the contact is, in our opinion, in the customer’s interest (e.g., where the person is concerned for their well-being or needs to act on the customer’s behalf due to unforeseen circumstances);
• As required or authorized by applicable law, and to fulfill Eco Viagens’ legal obligations;
• Customs or immigration services to comply with applicable legal obligations in the context of travel;
• Government agencies or public authorities for fulfilling valid and authorized requests, including court orders or any other valid legal process;
• Regulatory bodies or law enforcement authorities, including for fraud prevention and related security purposes;
• Oversight agencies where there is suspicion of illegal activity and where Personal Data is necessary for investigating or reporting the matter.

In addition to the above, we will not disclose Personal Data without consent, unless we believe that the disclosure is necessary to mitigate or prevent a threat to life, health, or safety of an individual, for public health or safety, or for any action to be carried out by a law enforcement body (e.g., preventing, detecting, investigating, or prosecuting criminal offenses), or when such disclosure is authorized or required by law (including applicable data protection/privacy laws).

On Eco Viagens websites or social media, users may choose to use certain third-party features with which we partner. These features, which may include social media tools and geo-location services, are operated by third parties and are clearly identified as such. These third parties may use or share Personal Data according to their own privacy policies, so we recommend reviewing their privacy policies if you consider these tools relevant.

6. What Personal Data is Transferred Abroad?

We may disclose Personal Data to certain recipients abroad as described below. We will ensure that such international transfers are necessary for the performance of a contract between our Customers and third parties abroad or that they are subject to appropriate or adequate safeguards as required by local data protection laws (e.g., GDPR). We will provide copies of relevant safeguard documents upon request (see section 13 of this Notice).

Personal Data may be transferred to an entity abroad located in a jurisdiction where it is not possible to ensure a level of data protection equivalent to that provided under the GDPR. In such cases, Eco Viagens will not be responsible for how those recipients handle, store, and process Personal Data.

(a) Related Entities Abroad

Eco Viagens operates a global business, including operations in any country where our customers express an intention to travel. Personal Data may be disclosed to our related entities abroad to support travel bookings and/or to facilitate the performance of administrative, advisory, or technical services, including the storage and processing of such data.

(b) Travel Service Providers Located Abroad

To provide our services, it may be necessary to disclose Personal Data to relevant travel service providers abroad. We work with many different travel service providers around the world, so the location of a relevant travel service provider will depend on the travel services being provided. Relevant travel service providers will generally receive Personal Data in the country where they will provide the services or where their business is based.

(c) Our Service Providers Located Abroad

We may also need to disclose Personal Data to service providers located abroad to support the delivery of services, including the storage and processing of such data. We will generally only disclose Personal Data to these recipients abroad in the context of a travel booking and/or to enable the provision of administrative and technical services on our behalf.

If you have any specific questions about where or to whom Personal Data might be sent, please refer to section 13 of this Notice.

7. Information Security

At Eco Viagens, we are committed to protecting Personal Data by implementing and maintaining appropriate technical, organizational, and human controls to ensure a level of security that aligns with the risks related to:

• Accidental or unlawful destruction;
• Loss; alteration or unauthorized disclosure;
• Or unauthorized access to Personal Data transmitted, stored, or processed.

Eco Viagens regularly monitors and reviews security controls and strives to protect Personal Data in the same way that we protect our sensitive business information.

Eco Viagens destroys or anonymizes Personal Data as soon as it is no longer relevant for business purposes or as required by law.

8. Rights Regarding the Personal Data We Collect

If any individual from whom Eco Viagens holds Personal Data wishes to:

• Update, modify, delete, or obtain a copy of the Personal Data; or
• Restrict or prevent Eco Viagens from using any personal information, including withdrawing any consent previously given for the processing of such information; or
• Obtain a copy of personal information processed based on consent or as necessary for the performance of a contract to which they are a party,

they should formally request this from Eco Viagens using the contact details provided in section 13 of this Notice. Upon receipt of the request, we will acknowledge it and provide information on the timeframe within which the information will be made available.

Eco Viagens will make every effort to respond to such requests within one month or less, although it may be necessary to extend this period for complex requests.

Additionally, Eco Viagens reserves the right to deny access to the information for any reason permitted by applicable laws. If a request for access or correction of information is denied, the reasons for such refusal will always be communicated in writing, unless it is unreasonable to do so or when required by local data protection laws.

All communications related to requests for access to Personal Data must be made formally in writing using the contact details provided in section 13 of this Notice.

If we are requested to restrict or cease using Personal Data, including withdrawing previously given consent for Personal Data processing, the ability to provide or maintain services may be negatively impacted. For example, most travel bookings must be made under the traveler’s full name and must include appropriate contact and identification details (e.g., passport details), and bookings cannot be made without this information.

Personal Data shared with Eco Viagens should be accurate, and individuals agree to update it as necessary. Additionally, they agree that, in the absence of updates, Eco Viagens may assume that the information provided is correct.

Any individual can request at any time that Eco Viagens stop sending marketing communications, which can be done using the unsubscribe links provided in marketing emails or through the contact details provided in section 13 of this Notice.

In any of the above situations, a valid means of identification from the requester may be required to ensure that Eco Viagens meets its security obligations and prevents unauthorized disclosure of Personal Data.

Eco Viagens reserves the right to charge a reasonable administrative fee for any manifestly unfounded or excessive requests for access to Personal Data or for any additional copies of Personal Data requested.

9. Social Media Integrations

Eco Viagens’ websites and mobile applications may use social media features and tools (such as “Like” and “Share” buttons). These features are provided and operated by external companies (for example, Facebook) and are also hosted either by external companies or directly on our website or mobile application. Social Media Tools may collect data related to the page visited on the website/mobile application, the IP address, and may set cookies to improve the functioning of the Social Media Tools.

If a user has social media accounts enabled, these accounts may be able to share data about the visit and use of our website or mobile application with those social media accounts. As a result, interactions with Social Media Tools may be recorded by third parties. Additionally, external companies may share Personal Data with Eco Viagens in accordance with their policies, such as your name, profile photo, friend lists, or any other information individuals have chosen to make available to these companies. In such cases, we may share this data with a third-party company for the purpose of targeted marketing through these social media platforms. Users have the option to manage data sharing and can disable targeted marketing in their social media privacy settings.

All interactions with Social Media Tools are governed by the privacy policy of the external company providing them. More information about the data protection practices of these companies should be reviewed directly in their privacy policies.

10. IP Addresses

When a user accesses the website, uses any mobile application, or opens digital correspondence from Eco Viagens, servers may log data related to the device or network the user is connected to, including the IP address. An IP address is a series of numbers identifying a computer and is assigned when accessing the Internet.

IP addresses may be used by Eco Viagens for system administration, security problem investigation, and compiling anonymous data about the use of the website and/or mobile applications. IP addresses may also be associated with other Personal Data available about individuals for the purposes described above (for example, to better tailor marketing and advertising materials, provided the user has opted to receive digital marketing).

11. Tracking Technologies / Cookies

Eco Viagens may use external web analytics services for its websites and mobile applications, such as those listed in the “Cookie Policy”. The providers of these services may use technologies such as cookies and web beacons to help analyze visitors to the websites and applications.

For information on the use of cookies and tracking technologies, please refer to Eco Viagens’ Cookie Policy.

12. Associated Websites

Eco Viagens’ websites may contain links to third-party websites over which Eco Viagens has no control. Eco Viagens is not responsible for the privacy practices or the content of associated websites. Eco Viagens recommends reviewing the privacy policies of any associated websites visited, as their practices and privacy policies may differ from those of Eco Viagens.

13. Feedback / Complaints / Contact

Any questions, comments, or complaints about this Notice or about the handling of Personal Data; or if you wish to inform Eco Viagens about a change or correction to Personal Data; or if you wish to receive information about the Personal Data processed by Eco Viagens; or for any complaint or comment related to data protection should be directed to Eco Viagens using the contact details below:

Email: [email protected]

Address: Apartado 49 – Praia da Rocha, 8501-905 Portimão

Eco Viagens will respond to any inquiries or complaints received as promptly as possible.

14. Changes to the Notice

This Notice may be changed and updated. If changes are made to the Notice, the revised version will be properly archived, published, and dated on Eco Viagens’ website, when available. If necessary, in addition to updating the Notice, we may ask clients for consent to include other types of processing.

This Privacy Notice was last updated on May 25, 2018.