Privacy Policy
Last updated: July 2026
At Nortada Travels, we value your privacy and are committed to protecting your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable European Union legislation.
By using our website, you agree to the practices described in this Privacy Policy.
This Privacy Policy regulates the processing of personal data collected, handled, and used by NORTADA TRAVELS (1 Mesmo Mar, Lda.), a travel and tourism agency and tourist activities company registered under RNAVT no. 13523, VAT no. 519333101, with registered address at Largo do Bairro Social, 154, Esposende, Portugal (hereinafter referred to as the “Agency”).
1. Data Controller
The Agency is the data controller responsible for processing the personal data of its clients and website visitors, in accordance with the General Data Protection Regulation (GDPR), and applicable Portuguese data protection laws.
2. Types of Personal Data Collected
The Agency may collect and process the following data:
- Name, nationality, date of birth, gender;
- Contact details (address, phone, email);
- Identification document and passport information;
- Payment details;
- Preferences and booking history;
- Health information, if necessary for special requests or insurance;
- Password (encrypted);
- Website navigation data (IP address, cookies, interactions, browser type, device type).
3. Purpose of Data Processing
Personal data collected is used for the following purposes:
- Create and manage your personal account;
- To manage travel bookings and deliver the contracted services;
- Provide customer support;
- To comply with legal and fiscal obligations;
- To manage client communications and service-related information;
- To respond to inquiries, quotations, or complaints;
- To perform pre-contractual procedures and execute the contract;
- For direct marketing (only with explicit consent).
4. Legal Basis
Data processing is based on the following legal grounds:
- Execution of a contract or pre-contractual measures;
- Compliance with legal obligations;
- Consent of the data subject, when applicable;
- Legitimate interests of the Agency, when permitted by law.
5. Third Parties Services and Websites
We never sell your information.
Personal data may be shared with contracted service providers (accommodation, transport, insurers, authorities, email marketing services, payment platforms, website hosting providers, etc.) only to the extent necessary for service delivery or legal compliance.
This website may also contain links to other websites. Our privacy policy does not apply to third-party websites and services. Therefore, if you access another website or service through ours, you should read and accept that provider’s privacy policy. You must also acknowledge that the Agency does not control the content of such websites or services and assumes no responsibility for the privacy policies or content published on them.
As a rule, personal data is processed within the European Union. Where data is transferred to countries outside the EU/EEA, the Agency aims to implement appropriate safeguards whenever reasonably possible and in accordance with applicable data protection laws.
6. Data Retention
Personal data will be retained only for as long as necessary to fulfill the purposes collected or as required by applicable law. After this period, data will be deleted or anonymized.
We take appropriate technical and organizational measures to protect your information from unauthorized access, disclosure, or misuse.
Passwords are securely encrypted before being stored.
7. Data Subject Rights
Data subjects have the right to:
- Access their personal data;
- Rectify inaccurate or incomplete data;
- Erase data (unless legal retention applies);
- Withdraw consent where processing is consent-based;
- Restrict or object to processing;
- Personal account deletion;
- Data portability.
Requests to exercise these rights may be sent to the Agency at: info@nortadatravels.com
8. Image Rights
By contracting with the Agency, the traveler automatically authorizes the Agency to access, use, publish, and share all images and videos captured by the Agency during the experience for marketing, social media, website, and similar purposes, and to access and use images and videos published by the customer (e.g., on social media) relating to the experience.
If the customer does not authorize the capture and use of their image, they must email info@nortadatravels.com no later than 7 days before the trip begins.
9. Data Protection and Consent to Data Transmission
By contracting with the Agency, the customer expressly consents to all information, including personal and health data, provided in connection with the trip being transmitted to government authorities and the Agency’s local partners for the performance of the travel program.
10. Data Security
The Agency implements technical and organizational measures to protect data against unauthorized access, loss, alteration, or disclosure.
11. Cookies and Tracking Technologies
The website may use cookies and similar technologies to enhance user experience and gather usage statistics. Users can manage cookie preferences via their browser settings.
12. Policy Updates
The Agency reserves the right to update this Privacy Policy at any time. Changes will be posted on the website. The last update was in July 2026.
13. Contact
If you have any questions about our privacy policy, please contact us via email: info@nortadatravels.com .