This Privacy Policy statement explains how we use the personal information we collect from users when they use the website papa-leguas.com.
All personal information regarding the users of this website will be treated in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR – General Data Protection Regulation).
Papa-Léguas is an adventure travel agency founded in 1997 with the aim of inspiring travelers to discover the world in a unique way. Over the years, we have expanded our range of activities, offering hiking in Portugal, expeditions to the Himalayas, and photography trips. Our mission is to make travelers happy, encouraging the protection of the planet and leaving a positive impact on the visited destinations.
All copyrights, trademarks, and other applicable rights used or referenced on this website are the property of Papa-Léguas and are protected by copyright law.
All rights not expressly granted by this content are reserved and non-transferable to third parties. Therefore, the copying, modification, distribution, transmission, display, reproduction, publication, transfer, or sale of any information, products, or services obtained through the website provided by Papa-Léguas is strictly prohibited.
Under no circumstances shall Papa-Léguas be held liable, directly or indirectly, for any damage resulting from or in any way related to the use of this website.
Papa-Léguas does not guarantee that its website pages will be uninterrupted, free of occasional errors, or temporarily unavailable.
Papa-Léguas reserves the right to add, remove, or modify any part of the information available on its website without prior notice. Therefore, the User or Client is responsible for reviewing the content whenever consulting or booking trips through the website. Continued use of the website following any such changes will be deemed as implicit acceptance of these modifications.
Papa-Léguas, Agência de Viagens e Turismo, Lda, a legal entity with NIPC and NIF number 504 163 590, headquartered at Rua Conde de Sabugosa 3F, 1700-115 in Lisbon, is the entity responsible for processing personal data collected through the URL https://www.papa-leguas.com/, the website it owns.
Local operators, in turn, may need to use your data to book accommodations, make air, sea, or rail transportation reservations, secure access to protected areas, obtain entry to restricted access zones, and handle all services that are or may become legally required in the destination countries.
The data provided to each entity will be strictly limited to what is necessary for the reservation process and the execution of the trip to proceed according to the planned itinerary.
The data collected on our website will be processed according to its purposes and lawful basis:
Customer Account Area and Trip Registration
Registering for a trip involves two steps. The first, called “Account Creation,” identifies the User in the system. The second, called “Booking,” refers to the actual reservation process. These steps can be completed simultaneously or at different times.
“Account Creation” occurs only once, and the data will be stored in the User Area so the system can identify the customer each time they make a reservation. Once the account is created, the collected data is associated with the User, who has full access to it in their personal area.
When creating an account on the Papa-Léguas website, future Users are asked to provide a set of data that will later be used in their bookings and communications with Papa-Léguas. This data is divided into two categories: mandatory (full name, tax number, preferred name, gender, full address, mobile phone number, email, date of birth, and passport details – number, place of issue, issue date, and expiration date); and voluntary (dietary restrictions, health restrictions, profession, landline phone, how you heard about us, and links to social media – Facebook, Twitter, Instagram, and LinkedIn). Users must also choose a password, which, together with their email, will validate their session on the Papa-Léguas website. After completing this process, the User will receive a confirmation email to verify its authenticity and finalize the “Account Creation” process.
The User Account also includes a section to add billing information if it differs from the details provided during account creation. In this case, the following information is required: the name of the person or entity, full address, and tax number.
To book a trip, in addition to the information already stored in the User Account, the following data will be required: special requests or needs, the name of an emergency contact in Portugal during the trip, their phone number, and their relationship to the User. This information will be linked to the specific date and destination selected for the reservation.
Creating a User Account or booking a trip will never require data related to race, ethnicity, religion, or sexual orientation.
Contact Form
To send a message using the contact form available on the “Contacts” page, you must provide your name and email address. These details will only be used to handle your contact request, based on Papa-Léguas’ legitimate interest in responding to inquiries.
Requesting Information About a Trip
On each trip’s dedicated page on our website, Customers or Users can request more specific information by using the form available through the “Ask Us” option in the sidebar.
The form requires the following mandatory information: first name, last name, email, subject, and message. Optionally, you can provide your mobile phone number and the number of people potentially interested in the trip. These details will only be used to handle your request for information, based on Papa-Léguas’ legitimate interest in responding to inquiries.
Newsletter Subscription
The newsletter contains information about trips, activities, services, or the latest blog posts from Papa-Léguas and is sent via email. By subscribing to our newsletter, you consent to the collection of your name and email address specifically for this purpose. To ensure the subscription was made by you, we will send an email after subscription requesting confirmation of your consent to collect and store your personal data for this purpose.
The Papa-Léguas newsletter includes tracking pixels. These pixels are codes embedded in the newsletter emails and are used to generate statistical data to evaluate the success of the email campaign. Based on this data, we can see if the email was opened and which links were clicked.
You can unsubscribe from the newsletter at any time by clicking the link at the bottom of the email used to send each newsletter. If you do so, your data will be deleted. You will also find another link in the footer that you can use to change or update your details.
The data you provide will be retained in a subscriber database until you request its deletion or after one year of inactivity, assessed by the absence of any interaction, such as opening emails.
Personal data is used for customer management, sending service quality surveys, and promoting trips and activities.
When a User requests the booking of a tourism service, thereby becoming a “Customer,” their data, strictly as necessary, must be shared with the providers involved in delivering the service. To confirm these services, most operators require the Customer’s personal data.
The travel process concludes with a survey sent to the Customer upon their return, aimed at evaluating the quality of the service provided.
All traffic between the Papa-Léguas website and your browser is transmitted via HTTPS protocol, with data encryption up to 256 bits.
The data collected on our website, particularly regarding your bookings, is transferred and stored by subcontracted entities to perform the following data processing operations on behalf of and under the supervision of Papa-Léguas:
Data collected through booking or contact forms
Data collected through account creation, booking, contact request forms, and comments available on various pages of the Papa-Léguas website will be stored on a server contracted with web4you web4you, with data stored on servers located in Lisbon, Portugal.
Newsletters
For managing subscribers and sending newsletters, we use the platform provided by E-goi, one of the market leaders in this field. The subscriber database is separate and independent from the Users / Clients database, so registering in one does not require registering in the other. E-goi is located at Av. Menéres, 840, in Matosinhos, and the data will be stored on servers located in Portugal.
The transferred data will be processed in accordance with the Privacy Policy in effect for each of the companies.
The period for which we keep your data is related to the time necessary to process all aspects related to the trip or activity you have registered for. After the processing is complete and the trip or activity is finished, it is up to the User whether to keep their data in their User Area. If there is no request to remove the data, the User will have access to the details of their trips in their personal area, under the “Reservations” tab.
Legal obligations for retaining documents for a specified period, as required by law, are preserved.
Papa-Léguas does not share the personal data of Users with companies and/or institutions that are not directly or indirectly involved in the processes resulting from the reservation and management of travel and activity bookings. This sharing, in accordance with the GDPR, occurs to the extent necessary to ensure that all processes and bookings can occur without disadvantage to the Customer. The type of data provided may vary depending on the destination of the trip.
Some airlines require that, at the time of booking, passport details, as well as gender, age, and nationality, be provided. This information may be accessed by customs authorities in both the departure and destination countries.
The completion of a booking with Papa-Léguas and the provision of the requested data constitute the Customer’s consent to the disclosure of such data in the manner described above.
These are small text files stored on your computer that collect information about your device and your usage experience. This information is used to manage login and logout processes, record the number of visits, or compile statistical data regarding activity on our website.
You can configure your browser to refuse cookies; however, refusal to accept cookies may result in some functionalities of the Papa-Léguas website not working correctly, especially during the login process and access to your User Account.
Cookies are not used for any other purposes than those mentioned above.
For more precise information, please refer to our Cookie Policy Page.
As the owner of your personal data, users of the Papa-Léguas website have the right to obtain confirmation regarding the processing of personal data that concerns them and, if applicable, they have the right to access, update, obtain a copy, correct inaccurate data, or request the deletion of their personal data.
You may exercise these rights by accessing your User Account or alternatively, by submitting a written request to the email geral@papa-leguas.com.
In all our newsletters, you can also directly update your data or unsubscribe through the links included in the footer of the emails received. By exercising these options, your data will be immediately updated or deleted, depending on the choice made.
The subsequent withdrawal of consent provided for the processing of your data does not affect the lawfulness of the processing based on the consent previously given.
Nonetheless, the data subject has the right to submit a complaint to the CNPD – National Data Protection Commission.
We use appropriate physical and technical security measures to prevent unauthorized or unlawful access, accidental loss, destruction, damage, or theft of the personal data you provide.
We make every effort to maintain and apply the most appropriate threat detection technologies to identify and respond to security or privacy incidents (and any personal data breaches under the GDPR) without undue delay.
Any detected breach will be communicated to you immediately, as well as to the CNPD – National Data Protection Commission and the relevant authorities.
We recommend regularly visiting this page to stay updated on the latest changes.
The most recent version of this privacy policy is from January 2, 2023.