Privacy Policy

At Travelutions – Agência de Viagens e Turismo, LDA (“Travelutions”), we are committed to protecting the personal data of our clients and ensuring transparent and lawful processing in accordance with the GDPR and applicable Portuguese legislation.

This Privacy Policy explains what data we collect, how we use it, how it is stored, with whom it is shared, and what rights you have as a user of our website and services.

1. Identity and Contact Details of the Data Controller

Data Controller:
Travelutions – Agência de Viagens e Turismo, LDA
RNAVT: 9475
NIF: 516194577
Morada: Avenida D. João II, 98 A, Parque das Nações, 1990-100 Lisboa, Portugal
Email: geral@travelutions.pt

Travelutions does not currently appoint a Data Protection Officer (DPO), but all privacy-related questions can be sent to the email above.

2. Personal Data We Collect

We may collect the following categories of personal data:

Data provided directly by the user

• Full name

• Email address

• Phone number

• Billing address

• Payment and transaction details

• Passport information (when required for travel bookings)

• Date of birth (only when travel providers require it)

• Information submitted through booking forms

• Newsletter subscription details

Data collected automatically

• Browsing information and analytics

• Cookies and similar technologies (see our Cookies Policy)

3. Purpose of Processing Personal Data

Your data is used strictly for purposes related to booking and delivering travel services, including:

• Managing reservations for tours, transfers, and travel packages

• Processing payments securely

• Issuing invoices and travel documents

• Communicating relevant information about the booked service

• Customer support

• Compliance with legal obligations (tax, financial reporting, tourism regulations)

• Sending marketing communications (only with your consent)

• Improving website functionality and user experience

4. Legal Basis for Processing

We process your personal data only when legally permitted:

• Execution of a contract: To process and manage your travel booking

• Compliance with legal obligations: Tourism and tax regulations

• Consent: For newsletters, marketing communications, and cookies

• Legitimate interest: Website security and service improvement

5. Recipients of Personal Data

To provide your travel services, your data may be shared only with trusted partners:

• Airlines

• Hotels and accommodation providers

• Local transport and tour operators

• Travel insurance companies

• Payment processors (including secure and certified partners)

• IT and website service providers (for hosting and analytics)

We do not sell or disclose personal data to unrelated third parties.

6. Data Retention Period

Your personal data is stored only for the necessary time:

• Booking and service data: up to 10 years (legal and tax obligations)

• Marketing data: until you withdraw your consent

• Passport and sensitive travel data: deleted immediately after service completion unless law requires otherwise

7. Security Measures

We implement appropriate technical and organizational measures to protect data, including:

• Encrypted communication (SSL)

• Secure payment processing

• Restricted access to personal data

• Compliance with GDPR standards

• Continuous system monitoring and protection against unauthorized access

8. User Rights

As a data subject, you may request at any time:

• Access to your personal data

• Correction of inaccurate or incomplete data

• Deletion of your data (“right to be forgotten”), when applicable

• Restriction of processing

• Objection to processing

• Withdrawal of consent

• Portability of your data

Requests can be made via: geral@travelutions.pt

9. Changes to This Privacy Policy

Travelutions may update this Privacy Policy whenever necessary to reflect legal or operational changes.
The updated version will always be published on this page.