This Privacy Policy statement explains how we use the personal information we collect from users when they use the website papa-leguas.com.
All personal information regarding the users of this website will be treated in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR – General Data Protection Regulation).
Papa-Léguas is an adventure travel agency founded in 1997 with the aim of inspiring travelers to discover the world in a unique way. Over the years, we have expanded our range of activities, offering hiking in Portugal, expeditions to the Himalayas, and photography trips. Our mission is to make travelers happy, encouraging the protection of the planet and leaving a positive impact on the visited destinations.
The company Papa-Léguas – Travel and Tourism Agency, Lda, a legal entity with the NIPC and NIF 504 163 590, and office at Rua Conde de Sabugosa, 3F, in Lisbon, is the entity responsible for the processing of personal data collected on papa-leguas.pt, the website of which it is the owner.
The data collected on our website will be processed according to the principles and purposes for which they are intended:
Customer Restricted Area and Trip Registration
Registering for a trip involves two steps. The first, called “Account Creation,” is used to identify the User within the system. The second, called “Reservation,” refers to the actual booking process. These steps can be completed simultaneously or at different times.
“Account Creation” only occurs once, and the data will be stored in the User Area so that the system can identify the customer whenever they make a trip reservation. After the account is created, the collected data will be associated with the User, who will have full access to it in their personal area.
When creating an account on the Papa-Léguas website, the future user is asked to provide a series of data that will be used later for their bookings and communications between Papa-Léguas and the user. These data are divided into two groups: mandatory information (full name, taxpayer identification number, preferred name, gender, complete address, mobile phone number, email, date of birth, and passport information – number, issuing location, issue date, and expiration date) and voluntary information (dietary restrictions, health restrictions, profession, landline phone number, how they heard about us, and links to social media profiles such as Facebook, Twitter, Instagram, and LinkedIn). The user is also required to choose a password, which together with the email is used to authenticate their session on the Papa-Léguas website. After completing this process, the user will receive a confirmation email at the provided email address to verify its authenticity and finalize the account creation process.
In the user account, there is also an area to add billing information if it differs from the information provided during the account creation process. In this case, the following mandatory information is requested: the name of the person or entity, complete address, and taxpayer identification number.
To make a travel reservation, in addition to the information already registered in the User Account, the following data will be requested: special requests or needs, the name of a emergency contact person during the trip, their telephone number, and the degree of relationship. These data will be associated with the date and destination chosen by the user for their reservation.
When creating a User Account or making a reservation, no data of a racial or ethnic nature, religious beliefs, or sexual orientation will ever be requested.
Contact Form
To send a message through the contact form available on the “Contacts” page, it is mandatory to provide your name and email address. These data will only be used to manage your contact request, based on the legitimate interest of Papa-Léguas in responding to the inquiries received.
Inquiry about a trip
On the individual page for each trip, available on our website, the customer or user can request more specific information about the trip by using the form provided under the “Ask us” option in the side sidebar.
The presented form collects the following mandatory information: first name, last name, email, subject, and the message to be sent. Additionally, the mobile phone number and the number of potentially interested people in the trip are optional fields. These data will only be used to manage your information request, based on the legitimate interest of Papa-Léguas in responding to the inquiries directed to them.
Newsletter subscription
The newsletter includes information about trips, activities, services provided, or recent blog posts from Papa-Léguas and is sent via email. By subscribing to our newsletter, you are consenting to the collection of your name and email address expressly for this purpose. To ensure that the subscription was made by you, we will send you an email after subscribing on the website, asking you to confirm your authorization for the collection and storage of your personal data for this purpose.
The Papa-Léguas newsletter contains tracking pixels. These pixels are codes included in the newsletter sent by email and are used to generate the statistical data we need to evaluate the success of the campaign. Based on this data, we can see if the message was opened and which links were followed.
You can unsubscribe from the newsletter at any time by following the link provided in the footer of each newsletter email. If you do so, your data will be deleted. In the same footer, you will also find another link that you can use to change or update your data.
The data you provide us will be stored in a subscriber database until you request its deletion or after one year of inactivity, evaluated by the absence of any interaction signals, such as opening the emails.
All communication between the Papa-Léguas website and your browser is securely delivered using the HTTPS protocol, with transmission of data encrypted with up to 256-bit.
The data collected on our website, particularly related to your reservations, is transferred and stored by subcontracted entities to perform the following data processing operations on behalf of and under the supervision of our company:
Data collected through reservation or contact forms
The data collected through the forms for account creation, reservation, or contact requests and comments, available on various pages of the Papa-Léguas website, will be stored on a server contracted from web4you, and the data will be stored on servers located in Lisbon, Portugal.
Newsletters
For subscriber management and newsletter distribution, we use the platform provided by E-goi, one of the leading companies in this field. E-goi is headquartered in Av. Menéres, 840, in Matosinhos, and the data will be stored on servers located in Portugal.
The transferred data will be processed in accordance with the Privacy Policy in force of each of the companies.
These are small text files stored on your computer that are used to collect information about your device and information about your usage experience. This data is utilized to keep track of the number of visits and gather statistical insights regarding the activity occurring on our website.
You can configure your browser to not accept cookies; however, not accepting cookies may result in incorrect execution of some functionalities of the website papa-leguas.pt.
Cookies are not used for any purpose other than those mentioned earlier.
For more accurate information, please refer to our page on the Cookie Policy.
The website papa-leguas.pt contains links to other websites. The Privacy Policy stated on this page only applies to our website, so you should carefully read the privacy policies of all websites that you may access through the external links included in our publications.
As owner of your own data, users of the website papa-leguas.pt have the right to obtain confirmation regarding the processing of their personal data. If applicable, they have the right to access, update, obtain a copy, and correct inaccurate data or request the deletion of their personal data.
These rights can be exercised by submitting a written request to the email address geral@papa-leguas.pt.
In all our newsletters, you can also rectify your data or unsubscribe directly through the links provided in the end of the received emails. By exercising these options, your data will be immediately updated or deleted, depending on the chosen option.
Withdrawing your consent afterwards doesn’t change the fact that the processing done based on your previous consent was legitimate.
The data subject has the right to present a complaint regarding any issue related to the processing of their personal data. To do so, they can use the phone numbers +351 21 845 26 89 / 90 or email geral@papa-leguas.pt.
Furthermore, the data subject has the right to file a complaint with the CNPD – National Data Protection Commission.
We use appropriate physical and technical security measures to prevent unauthorized or unlawful access, accidental loss, destruction, damage, or theft of your provided personal data.
We make every effort to maintain and implement the most suitable threat detection technologies that enable us to identify and respond to security or privacy incidents (including any personal data breaches under the GDPR) without excessive delay.
Any detected breach will be promptly communicated to you, as well as to the CNPD – National Data Protection Commission and relevant authorities.
Our privacy policies are regularly reviewed, and any changes will be published on this page.
We recommend visiting regularly to stay informed about the latest updates.
The most recent version of this privacy policy is dated May 20, 2022.
