Question 1

1. Data Controller

Accepted Answer

Ribeiro, Carinhas & Lopes, Lda – Ó Turista, with registered office in Portugal, is the entity responsible for the processing of personal data collected through this website and other communication channels, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
Contact: info@oturistatours.com()

Question 2

2. Categories of Personal Data Collected

Accepted Answer

a) Data provided directly by the user
 • Full name
 • Email address
 • Telephone number
 • Information required to manage reservations or respond to contact requests
 • Payment information (credit/debit card details), when necessary to secure bookings
b) Data collected automatically
 • IP address
 • Device and browser information
 • Pages visited and time spent on the website
 • Date and time of access
c) Other situations
 • Photographs and videos taken during tours or activities (for promotional purposes)

Question 3

3. Purposes of Data Processing

Accepted Answer

Personal data may be processed for the following purposes:
 • Managing bookings and delivering contracted services
 • Processing payments and securing reservations
 • Responding to enquiries and customer requests
 • Sending promotional or informational communications (when consent has been given)
 • Improving service quality and user experience
 • Fraud prevention and compliance with legal obligations
 • Promotional use of photographs and videos captured during activities (unless the client objects)

Question 4

4. Legal Basis for Processing

Accepted Answer

Personal data is processed based on one or more of the following legal grounds:
 • Performance of a contract (e.g. booking management and payment processing)
 • Consent (e.g. newsletters, marketing communications, use of photos or videos)
 • Compliance with legal obligations (e.g. accounting and tax requirements)
 • Legitimate interests of Ó Turista, including security, fraud prevention, and marketing activities permitted by law

Question 5

5. Data Sharing with Third Parties

Accepted Answer

Personal data may be shared with third parties when necessary, including:
 • Payment service providers (for secure transaction processing)
 • Email and marketing platforms (when consent has been provided)
 • Analytics providers (e.g. Google Analytics, Microsoft Clarity) to improve website performance
 • Tour booking platforms and travel agencies, where reservations are made through such partners
All third parties operate under written agreements and are required to comply with applicable data protection laws.
Ó Turista is not responsible for personal data collected by third-party booking platforms or websites outside our control.

Question 6

6. International Data Transfers

Accepted Answer

When personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are applied, including:
 • Standard Contractual Clauses approved by the European Commission
 • Adequacy decisions
 • Other GDPR-compliant transfer mechanisms

Question 7

7. Data Retention Period

Accepted Answer

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations.
Payment and financial data (such as credit card information) is used solely during the booking or payment process and is not stored on Ó Turista’s servers.

Question 8

8. Rights of Data Subjects

Accepted Answer

Under the GDPR, data subjects have the right to:
 • Access their personal data
 • Rectify inaccurate or incomplete data
 • Request erasure (within legal limits)
 • Restrict processing
 • Object to processing
 • Data portability
Requests should be submitted to info@oturistatours.com.()
 Ó Turista reserves the right to verify the identity of the requester and may refuse requests that are manifestly unfounded or excessive, as permitted by law.

Question 9

9. Security Measures

Accepted Answer

We apply appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
All payment transactions are encrypted during transmission, and access to company databases is restricted to authorized personnel only.

Question 10

10. Photography and Filming

Accepted Answer

During tours and activities, Ó Turista staff or contracted professionals may take photographs or videos of guests for promotional purposes (including website, social media, and printed materials).
Formal written consent is not required; however, guests may opt out at any time by informing a staff member or avoiding filming areas.
Guests wishing to photograph or film other participants should request verbal consent beforehand.

Question 11

11. Links to Third-Party Websites

Accepted Answer

Our website may contain links to external websites. Ó Turista is not responsible for the privacy practices or content of those websites.

Question 12

12. Changes to This Privacy Policy

Accepted Answer

Ó Turista reserves the right to update this Privacy Policy at any time. The most current version will always be available on our website.

Last updated: December 1, 2025

Question 13

13. Contact

Accepted Answer

If you have any questions, concerns, or wish to exercise your data protection rights, please contact us at:
📧 info@oturistatours.com()

Privacy Policy

Online Complients Book

Privacy Policy

Terms & Conditions

Cookies Policy