PRIVACY POLICY — QUIMERA TRAVEL EXPERIENCES

1. General Information and Data Controller

This Privacy Policy explains how Quimera Travel Experiences processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and all applicable data protection laws.

Data Controller: Quimera Travel Experiences
Address: Rua da Liberdade, 28 – Belavista, 8400-663 Parchal, Portugal
Email: info@quimeratravelexperiences.com

By using our website, email, WhatsApp or social media channels, you accept the terms of this Privacy Policy.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identification and contact data: name, surname, email, phone number, billing address, VAT/TAX number
Website usage data: IP address, device information, browser, location (approximate), session statistics, pages visited
Communication data: messages sent via email, WhatsApp, contact forms or social media
Booking and billing data: when required for reservations
Cookies and tracking technologies: including analytics and marketing tools (Google Analytics, Meta Pixel, etc.)

Some data are provided directly by the user, while others are collected automatically through cookies.

3. Purpose of Processing

Personal data are processed for the following purposes:

Providing and managing our services (including travel programs and reservations)
Responding to contact requests, quotes or inquiries
Complying with legal and tax obligations
Sending relevant communications related to our services
Improving website functionality, security and user experience
Marketing communications, with prior consent (newsletter, campaigns, remarketing, WhatsApp)

4. Legal Basis for Processing

The processing of personal data is based on one of the following legal grounds:

User consent
Performance of a contract or pre-contractual steps
Legal obligation
Legitimate interest, including service improvement and fraud prevention

5. Data Retention

Personal data will be stored only for the period strictly necessary:

Contact and marketing data: until consent is withdrawn
Billing data: 10 years (legal requirement)
Website usage data: technical period required for the purpose

After the retention period, personal data will be securely deleted.

6. Data Sharing with Third Parties

Personal data may be shared with:

Service providers (accounting, accommodation, transport, booking platforms, IT services, hosting)
Public authorities, when legally required
Technology partners (Google, Meta, email and analytics platforms)

All third parties operate as processors under GDPR and follow the controller’s instructions.

7. International Data Transfers

If data are transferred outside the EU/EEA, such transfer will only occur when:

The destination country ensures an adequate level of protection, or
Standard Contractual Clauses (SCCs) approved by the European Commission are in place.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access or disclosure.

9. User Rights (Data Subjects)

Under GDPR, users have the right to:

Access their personal data
Rectify inaccurate or incomplete data
Request erasure of their data (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time
Lodge a complaint with the Data Protection Authority (CNPD – Portugal)

10. How to Exercise Your Rights

Requests may be submitted via email to:
info@quimeratravelexperiences.com

We will respond within 30 days, in accordance with the law.

11. Communications and Marketing

We only send communications (newsletter, email, WhatsApp or social media messages):

With prior consent, or
When related to services already contracted by the user

The user may unsubscribe at any time.

12. Cookies

This website uses cookies.
Details are available in our Cookie Policy.

13. Minors

We do not knowingly collect personal data from individuals under 18. If such data are collected, they will be deleted.

14. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or significant effects on users.

15. Legal Compliance and Disputes

Personal data may be used in legal proceedings or to comply with requests from public authorities.

16. Changes to this Policy

We may update this Privacy Policy. The latest version will always be available on this page. Continued use of our services implies acceptance of the updated terms.

17. Contact

For any questions related to privacy or data protection:

info@quimeratravelexperiences.com

Last updated: 2025