Privacy Policy

Last updated on February 12, 2026

This Privacy Policy may be updated whenever necessary, and the date of the latest revision will always be indicated at the beginning of the document.

1. Who is responsible for processing your personal data?

The entity responsible for the collection and processing of your personal data is Trevally Unipessoal Lda, with tax number (NIF) 517472201, headquartered at Rua de Campolide 209, 6th floor left, 1070-026, Lisbon, and the legal owner of the PICTA TRAVEL brand. Email for contact information is [email protected] and contact phone is (+351) 934 098 882

2. What is personal data?

Personal Data refers to any information, of any nature and on any medium, relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified directly or indirectly through any element that allows their identification.

3. How and on what legal basis do we use personal data?

Legal grounds for processing:

Consent: When the customer provides free, informed, specific, and explicit consent, either in writing or verbally.
Example: When a customer makes a purchase and opts to receive further communications.

Performance of a contract and pre-contractual steps: When processing is necessary for the execution of a contract.
Example:

  • Responding to customer inquiries
  • Manage and confirm your bookings
  • Provide customer support
  • Personalize your experience
  • Send service-related communications
  • Conduct internal analysis and improve the website

Compliance with legal obligations: When processing is necessary to comply with legal requirements, such as customer identification or sharing data with police, judicial, tax, or regulatory authorities, or providing location data for emergency services.
Example: Compliance with tax reporting obligations.

Legitimate interest: When processing corresponds to a legitimate interest, such as improving service quality or fraud prevention.
Example: Subscription to free content such as newsletters or eBooks, where data is collected for direct marketing purposes to promote PICTA TRAVEL’s activities.

4. Who are the data subjects?

The data subject is the individual to whom the data relates, even when acting on behalf of a legal entity, who has contracted or shown intention to contract the services of the company, including through the website, even by simply submitting a contact request.

We do not sell or rent your data. However, we may share your information with:

  • Tour guides and service partners, only for operational purposes
  • Payment service providers
  • IT and website hosting service providers
  • Government authorities, when required by law
  • All third-party providers are bound by confidentiality and data protection agreements in accordance with the GDPR.

5. What categories of personal data are processed and how are they obtained?

Examples:

  • Newsletter subscription: Email address
  • Contact form: Name, email address, and phone number (optional)

6. How long do we retain your personal data?

Personal data will only be processed for the period necessary to fulfill its intended purpose, including but not limited to:

  • Accounting records: 10 years (data required for tax and accounting purposes)
  • Personal data collected for information requests: 6 months

After the applicable retention period, the data will be deleted or anonymized unless it must be retained for another valid purpose.

7. With whom do we share personal data?

We share your personal data exclusively with entities necessary to ensure proper contract execution, such as accountants, billing software providers, transport companies, and legal advisors.

8. How do we protect personal data?

We have implemented appropriate technical, physical, organizational, and security measures necessary and sufficient to protect your personal data against destruction, loss, alteration, unauthorized disclosure or access, or any other unlawful or accidental processing.

9. What are your rights and how can you exercise them?

Data subject rights:

  • Right of access: The right to obtain confirmation of whether your personal data is being processed and access related information.
  • Right to rectification: The right to request correction of inaccurate or outdated data or to complete incomplete data.
  • Right to erasure (“right to be forgotten”): The right to request deletion of your personal data, provided there are no valid grounds for retention.
  • Right to data portability: The right to receive the data you provided in a commonly used digital format or request its transfer to another controller.
  • Right to withdraw consent or object: The right to withdraw consent or object to data processing at any time.
  • Right to restriction of processing: The right to request limitation of processing, either by suspending it or restricting it to certain data categories or purposes.
  • Right to lodge a complaint: The right to file a complaint with the supervisory authority, the CNPD (www.cnpd.pt), in addition to contacting the company.

10. What are cookies and which ones do we use?

Cookies are small text files stored on your device when you visit a website. These files allow the website to recognize users, improve browsing experience, and collect information about online behavior.

At PICTA TRAVEL, we use:

  • Essential cookies for website functionality
  • Analytical cookies to understand and optimize user experience
  • Third-party cookies, where applicable, for features such as social media integration or payment processing

You can manage or disable cookies at any time through your browser settings.