Privacy Policy

1. Personal Data

What is personal data?
Personal data refers to any information, in any format, that relates to an identified or identifiable individual. An individual is considered identifiable if they can be directly or indirectly identified, for example, through their name, identification number, location data, electronic identifier, or other elements that lead to their identification.

The privacy and protection of personal data for all customers and users of the services provided by https://AzoresIslandsExperience.com are essential aspects of how we operate and organize our activities.

The Privacy Policy of https://AzoresIslandsExperience.com aims to ensure that all customers are always aware of the rules and principles regarding personal data protection and processing. We make every possible effort to safeguard the security of this data, in accordance with applicable laws and regulations.

On the online platforms of https://AzoresIslandsExperience.com, you may find links to external websites. These links are provided in good faith, but we cannot be held responsible for the collection and processing of personal data on those websites, nor for their accuracy, reliability, or functionality. The presence of such links does not imply any responsibility on our part.

We also recommend that customers take additional security measures, such as keeping devices and software updated and configured properly, using protection against malicious software and firewalls, and avoiding websites that lack authenticity guarantees.

This Privacy Policy may be subject to changes or updates at any time. Any changes will be duly communicated through our online platforms.

Who are the data subjects?
The data subject is the individual to whom the data pertains and who uses the services or products of https://AzoresIslandsExperience.com. The customer is the person who enters into a contract with https://AzoresIslandsExperience.com, while the user is the person who benefits from the services or products.

2. Processing of Personal Data

Who is responsible for processing your personal data?
The entity responsible for processing your personal data is https://AzoresIslandsExperience.com, which provides the service or product, determines what data is collected, and defines how and for what purposes the data will be processed.

3. Legal Basis for Data Processing

These are the circumstances under which we process your personal data:

Consent:
When you provide explicit consent, either in writing or by selecting an option in an electronic form, provided that such consent is free, informed, specific, and unambiguous.
Consent for Minors:
If the personal data of minors requires consent, https://AzoresIslandsExperience.com will require authorization from those with parental responsibility.
Contract Execution and Pre-Contractual Measures:
When processing is necessary for the execution, management, or fulfillment of a contract with https://AzoresIslandsExperience.com, such as preparing service proposals, managing contacts, processing information and requests, handling billing, collections, and payments.
Compliance with Legal Obligations:
When processing is required to comply with legal obligations applicable to https://AzoresIslandsExperience.com.
4. Purposes of Data Processing

We process your personal data for the following purposes:

Marketing and Sales
Customer Management and Service Provision
Accounting, Tax, and Administrative Management
Compliance with Legal Obligations
https://AzoresIslandsExperience.com may subcontract third parties to carry out the above-mentioned purposes, which could involve access to customer personal data. In such cases, we ensure that subcontracted entities implement the highest technical, organizational, and human security measures. These subcontractors are legally bound to comply with data protection regulations, maintain confidentiality, and apply appropriate security measures to prevent unauthorized access or misuse of data.

Outside of these cases, https://AzoresIslandsExperience.com will only share personal data when:
a) It is legally required to do so, within the strict scope of legal obligations;
b) The customer has given explicit and specific consent, being duly informed in writing about the recipients and purposes of the shared data.

5. Data Retention Period

https://AzoresIslandsExperience.com processes and retains personal data for as long as necessary to fulfill the purposes for which it was collected.

In some cases, legal requirements mandate a minimum retention period. If no specific legal obligation exists, data will be retained only for as long as necessary for its intended purpose, always in compliance with applicable laws and guidelines from the relevant data protection authorities.

As a general rule, data will be retained for the duration of the contractual relationship. However, data may be kept beyond this period when necessary to fulfill legal obligations, protect contractual rights, or for other legitimate interests.

6. Collection of Personal Data

We collect personal data with your consent when you purchase products or services from https://AzoresIslandsExperience.com. This may be done orally, in writing, or through online platforms. Personal information may also be collected from publicly available sources or other lawful sources.

Data collection is always based on your explicit consent, following the rules of the General Data Protection Regulation (GDPR) and applicable national laws.

Customers can withdraw their consent at any time. However, some personal data is essential for service provision. Customers will be informed in advance about the necessity of such data and the consequences of not providing it.

If essential data is not provided or is insufficient, incorrect, or outdated, https://AzoresIslandsExperience.com may not be able to provide the requested service. Customers assume full responsibility for the accuracy and completeness of the data they provide.

7. Data Protection Rights

What are your rights?

Right of Access: The right to obtain confirmation of whether your personal data is being processed and access to relevant details such as processing purposes and retention periods.
Right of Rectification: The right to correct inaccurate or incomplete personal data (e.g., address, tax number, email, phone numbers).
Right to Erasure ("Right to be Forgotten"): The right to request the deletion of your personal data when legally permissible and when there are no valid reasons for retention (e.g., legal obligations).
Right to Data Portability: The right to receive your data in a common digital format or request its direct transfer to another entity.
Right to Object and Automated Decision-Making: The right to object to data processing or withdraw consent at any time, when legally permissible (e.g., marketing purposes).
Right to Restriction of Processing: The right to request limitations on processing in certain cases, such as suspending processing or restricting it to specific categories of data.
Right to File a Complaint: The right to lodge a complaint with the relevant data protection authority (CNPD).
How to Exercise Your Rights?

Requests to exercise these rights are free of charge, except in cases of excessive or unfounded requests, which may incur a reasonable fee. Identity verification may be required. We aim to respond within 30 days, although complex requests may take up to two months.

To exercise your rights, contact us via:

Website: https://AzoresIslandsExperience.com
Company: NIF 230099742 - Azores Islands Experience
Address: Rua Direita 17, 9600-220 Ribeira Grande
Email: [insert email]

8. Personal Data Protection Measures

https://AzoresIslandsExperience.com implements appropriate technical and organizational measures to ensure data security, confidentiality, and protection against unauthorized access, destruction, or modification. These measures are regularly reviewed and updated.

Version 1.0 - March 16th, 2025