Política de Privacidade

The Portuguese Tourism Institute, I.P. (“Turismo de Portugal”) is committed to protecting and respecting the privacy of users of the travelbi.turismodeportugal.pt website (“Website”).

With the entry into force on May 25, 2018, in all Member States of the European Union, of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation - GDPR), it is necessary to publish this Institute’s Personal Data Processing Policy, which is underpinned by Turismo de Portugal’s commitment to comply with personal data protection rules.

This Policy thus establishes the basis on which any personal data obtained or provided by the respective data subjects is processed on this portal and/or on platforms managed by Turismo de Portugal. The term “personal data,” as used in this Policy, refers to specific information such as name, email address, mailing address, phone number, or any other information that can be used to identify the data subject. No personal information is required to browse the public areas of this website.

Consent

By registering on the Portal and/or providing any personal data, the data subject freely gives their explicit consent for the submitted data to be processed for the purposes and terms described in this Policy, in compliance with current laws and regulations regarding personal data.

Processing of personal data

The processing of personal data consists of an operation or set of operations performed on personal data or sets of personal data, whether by automated means or not, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, restriction, erasure, or destruction.

Some personal data is mandatory for the provision of the service and/or information in question. Turismo de Portugal will inform you of this requirement, and in the event of missing or incorrect provision of the required data, Turismo de Portugal will be unable to provide the requested service and/or information. The provision of incorrect or inaccurate data is the sole responsibility of the respective data subject.

Data controller

This website is the exclusive property of Turismo de Portugal, I.P., a public institute under special status, legal entity no. 508666236, with headquarters at Rua Ivone Silva, Lote 6, 1050-124 Lisbon, which is the entity responsible for processing the personal data collected or provided on the Website. Contact may also be made via the email address: dpo@turismodeportugal.pt.

Purposes of personal data collection

The personal data collected on the Portal is processed for the following purposes:

_promotion of the activities carried out by Turismo de Portugal, as well as its products and services, which includes subscribing to and sending the Newsletter;

In addition to the above, it is important to clarify that the Portal collects and uses the following information:

_information expressly provided by the user regarding their profile and interests;

_identification of visitors who register, subscribe to newsletters, or request information, regardless of the computer they use, by creating a login consisting of an email address and a password.

Personal data may be updated and corrected on the Portal in the Registration/Profile section.

Personal data may also be processed to respond to questions, suggestions, or complaints submitted by the data subject.

To assist in the collection, storage, and processing of statistical data, Turismo de Portugal, I.P. may use third-party tools.

Rights of data subjects

Pursuant to and for the purposes of Articles 13 through 22 of the GDPR, Turismo de Portugal hereby informs you that any data in its possession may be accessed, restricted in its processing, or rectified (due to incorrectness, inaccuracy, or incompleteness) by the respective data subject; furthermore, if the processing was based on consent, the data subject also has the data subject has the right to request the erasure of data whose processing does not fall under one of the lawful grounds provided for in Article 6(1)(b) to (f) of the GDPR.

Turismo de Portugal further informs that, in cases where processing depends on consent, the data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent previously given.

The data subject also has the right to object to the continued processing of their personal data, to be informed, upon request, of the purposes of the processing, the categories of data involved, the identity of the recipients to whom the data has been disclosed, and the retention period for their personal data, as well as to receive the personal data concerning them that they have provided and to transmit it to another data controller (“data portability”).

Accordingly, Turismo de Portugal provides data subjects whose data it processes with the following form so that they may exercise their rights easily and electronically.

Subcontractors

Turismo de Portugal may engage subcontractors for the maintenance, hosting, and management of its IT systems and equipment, in accordance with the legislation governing the processing of personal data. These entities are obligated to maintain confidentiality and ensure the security of the Portal users’ data to which they have access for this purpose, and may not use such data for any other purposes or for their own benefit, nor may they link it to other data in their possession.

In any case, Turismo de Portugal remains responsible for the personal data made available to it.

Disclosure and transfer of personal data

Personal data may be disclosed to courts and other competent authorities in strict compliance with the provisions of the law, particularly when necessary for the resolution of disputes and for activities related to the protection of public safety, national defense and security, and the prevention, investigation, or detection of criminal offenses.

Retention of personal data

The period of time during which personal data is stored and retained varies according to the purpose for which the information is processed.

Turismo de Portugal retains personal data only for as long as necessary to achieve the purpose for which it was provided or to comply with any contractual or legal obligations to which it is subject.

Thus, and whenever there is no specific legal requirement, the data will be retained only for the minimum period necessary to fulfill the purposes that motivated its collection or subsequent processing, in accordance with the law.

Complaints

Without prejudice to the right to file complaints directly with Turismo de Portugal through the contact information provided for that purpose, the data subject may file a complaint directly with the National Data Protection Commission (CNPD), which is the Supervisory Authority in Portugal, using the contact information provided by that entity for that purpose.

Minors

Minors under the age of 16 must obtain permission from their parents or guardians before accessing or providing personal data on the portal.

The responsibility for identifying the content and pages accessed by minors under the age of 16 lies with their parents or legal guardians.

Changes to this policy

Turismo de Portugal reserves the right, at any time, to make adjustments or changes to this Personal Data Processing Policy, publishing such changes through its own communication channels.