Privacy Policy 

Ribeiro, Carinhas & Lopes, Lda – Ó Turista, with registered office in Portugal, is the entity responsible for the processing of personal data collected through this website and other communication channels, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR). Contact: info@oturistatours.com()

a) Data provided directly by the user • Full name • Email address • Telephone number • Information required to manage reservations or respond to contact requests • Payment information (credit/debit card details), when necessary to secure bookings b) Data collected automatically • IP address • Device and browser information • Pages visited and time spent on the website • Date and time of access c) Other situations • Photographs and videos taken during tours or activities (for promotional purposes)

Personal data may be processed for the following purposes: • Managing bookings and delivering contracted services • Processing payments and securing reservations • Responding to enquiries and customer requests • Sending promotional or informational communications (when consent has been given) • Improving service quality and user experience • Fraud prevention and compliance with legal obligations • Promotional use of photographs and videos captured during activities (unless the client objects)

Personal data is processed based on one or more of the following legal grounds: • Performance of a contract (e.g. booking management and payment processing) • Consent (e.g. newsletters, marketing communications, use of photos or videos) • Compliance with legal obligations (e.g. accounting and tax requirements) • Legitimate interests of Ó Turista, including security, fraud prevention, and marketing activities permitted by law

Personal data may be shared with third parties when necessary, including: • Payment service providers (for secure transaction processing) • Email and marketing platforms (when consent has been provided) • Analytics providers (e.g. Google Analytics, Microsoft Clarity) to improve website performance • Tour booking platforms and travel agencies, where reservations are made through such partners All third parties operate under written agreements and are required to comply with applicable data protection laws. Ó Turista is not responsible for personal data collected by third-party booking platforms or websites outside our control.

When personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are applied, including: • Standard Contractual Clauses approved by the European Commission • Adequacy decisions • Other GDPR-compliant transfer mechanisms

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Payment and financial data (such as credit card information) is used solely during the booking or payment process and is not stored on Ó Turista’s servers.

Under the GDPR, data subjects have the right to: • Access their personal data • Rectify inaccurate or incomplete data • Request erasure (within legal limits) • Restrict processing • Object to processing • Data portability Requests should be submitted to info@oturistatours.com.() Ó Turista reserves the right to verify the identity of the requester and may refuse requests that are manifestly unfounded or excessive, as permitted by law.

We apply appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. All payment transactions are encrypted during transmission, and access to company databases is restricted to authorized personnel only.

During tours and activities, Ó Turista staff or contracted professionals may take photographs or videos of guests for promotional purposes (including website, social media, and printed materials). Formal written consent is not required; however, guests may opt out at any time by informing a staff member or avoiding filming areas. Guests wishing to photograph or film other participants should request verbal consent beforehand.

Our website may contain links to external websites. Ó Turista is not responsible for the privacy practices or content of those websites.

Ó Turista reserves the right to update this Privacy Policy at any time. The most current version will always be available on our website. Last updated: December 1, 2025

If you have any questions, concerns, or wish to exercise your data protection rights, please contact us at: 📧 info@oturistatours.com()