Privacy policy

1. Introduction and data controller

The controller of personal data collected through the website tourgal.pt and associated services is Tourgal.

For privacy issues or to exercise your rights, you can contact us through info@tourgal.pt.

2. Data we collect

Depending on how you use the platform, we can collect:

• Identification and contact details you provide (e.g. name, email address), when creating an account, contact us, suggest a location or subscribe to the newsletter;
• Content you submit (comments, reviews, messages or suggestions);
• Technical and user data such as IP address, type of device and browser, visited pages and interactions with the site;
• Information obtained through cookies and similar technologies as described in the cookie section and the consent banner.

We do not request sensitive data deliberately. If you send us this kind of information on your own initiative, we will treat only what is strictly necessary.

3. Purposes and legal bases

We use personal data to:

• Provide, maintain and improve our tourist discovery services (execution of contract or pre-contractual measures, and legitimate interest);
• Managing user accounts and responding to contact or support requests (execution of contract and legitimate interest);
• Send communications, such as the newsletter, when you have given your consent or when the law permits it;
• Ensure platform security, prevent fraud and comply with legal obligations;
• Analyze the use of the site in an aggregate way, to improve content and experience, based on legitimate interest or consent when required (e.g. analytical cookies).

When the treatment is based on consent, it may withdraw it at any time without affecting the lawfulness of the treatment carried out until that date.

4. Cookies and similar technologies

We use cookies and similar technologies for the essential functioning of the website (e.g. session and security), to remember preferences and, with your consent when applicable, for analysis and improvement of the service.

When visiting the site, you can manage your preferences through the cookie banner. You can also configure your browser to block or delete cookies; note, however, that some features may stop working properly.

5. Sharing with third parties

We don't sell your personal data. We may share information with service providers who help us operate the platform (e.g. accommodation, email, analytics or payments), only to the extent necessary and under confidentiality and data protection obligations.

When interacting with providers listed on Tourgal (tours, restaurants or other businesses), those providers are responsible for processing the data they provide directly or via their own channels.

We may also disclose data when required by the law, or to protect the rights, security and integrity of Tourgal, users or third parties.

6. Data retention

We keep personal data only for the time required for the purposes for which it was collected, including compliance with legal obligations, dispute resolution and application of our terms. Concrete deadlines may vary according to the type of data and the relationship with the user (e.g. active account, newsletter or contact request).

7. International transfers

Whenever possible, we process the data in the European Economic Area (EEA). If it is necessary to transfer data outside the EEA, we ensure appropriate safeguards, such as appropriate European Commission decisions or standard contractual clauses, in accordance with the GDPR.

8. Security

We have adopted appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or undue disclosure. Despite our efforts, no system is totally risk-free; transmission of data over the internet can involve vulnerabilities.

9. Data subject rights

Under the GDPR, the data subject may, under applicable legal conditions, exercise the following rights:

• Access to personal data relating to him;
• Rectification of inaccurate or incomplete data;
• Deletion (right to be forgotten), where applicable;
• Limitation and opposition to treatment;
• Data portability when processing is based on contract or consent and is carried out by automated means;
• Withdrawal of consent when treatment is based on that basis.

To exercise these rights, send a request to info@tourgal.pt. We may request additional information to confirm your identity.

It shall also have the right to lodge a complaint with the National Data Protection Commission (CNPD) or another competent supervisory authority.

10. Amendments to this policy

We may update this Privacy Policy periodically. The date of the last update will be indicated on this page. In the event of relevant changes, we will seek to inform users appropriately. We recommend that you consult this page regularly.

11. Contact

For questions, requests or complaints related to privacy and data protection, please contact us through: info@tourgal.pt.