+351 966 144 698
Menu
+351 966 144 698

PRIVACY POLICY / POLÍTICA DE PRIVACIDADE

 

Website: https://buggyboat.pt/

Data Controller: GOLDPRESTIGE PORTUGAL UNIP. LDA / NIPC 513512861

Address: Rua Dom Nuno Álvares Botelho, 65, r/c esqº 2870-827 Montijo, Portugal

Contact Email: geral@buggyboat.pt

1. Introduction

At BuggyBoat, we respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, process, and protect the information you provide when using our website https://buggyboat.pt/ and when booking our adventure tours and rentals.

By using our website or booking our services, you agree to the practices described in this policy.

2. Information We Collect

We collect personal data that you voluntarily provide to us when you make a booking, fill out a contact form, or subscribe to a newsletter. This may include:

  • Identity Data: First name, last name, date of birth (to verify age requirements for activities), and identification/passport number (if legally required for rentals or insurance).
  • Contact Data: Email address, phone number, and billing/physical address.
  • Payment Data: Credit/debit card details, bank details, or phone number (MB Way info). Note: Payments are processed via secure third-party payment gateways; we do not store full credit card details on our servers.
  • Technical & Usage Data: Your IP address, browser type, operating system, and data about how you interact with our website (collected via cookies).

3. How We Use Your Data (Legal Basis for Processing)

We process your personal data under the following legal bases allowed by the GDPR:

  • Performance of a Contract: To process your booking, manage reservations, issue invoices, and communicate updates regarding your tour or rental.
  • Legal Obligation: To comply with Portuguese tax laws (issuing fiscal invoices), insurance requirements, and reporting to local authorities (such as maritime or tourism entities) if legally mandated.
  • Legitimate Interest: To improve our website, prevent fraud, and ensure the safety of our operations.
  • Consent: To send you marketing newsletters, special offers, or promotional content. You can withdraw your consent at any time.

4. Data Sharing and Third-Party Disclosures

We do not sell your personal data. We only share your information with trusted third parties necessary to operate our business and provide services:

  • Payment Processors: To securely handle your financial transactions.
  • Insurance Companies: To provide the mandatory personal accident and civil liability insurance required for tourist activities in Portugal.
  • Public & Regulatory Authorities: If required by Portuguese law, courts, or tax authorities (Autoridade Tributária).
  • IT and Hosting Providers: Entities that maintain our website servers and booking systems.

All third-party partners are strictly required to respect the security of your personal data and treat it in accordance with GDPR regulations.

5. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If any of our technical service providers (such as email marketing platforms) transfer data outside the EEA, we ensure they provide an adequate level of data protection equivalent to the GDPR (e.g., through Standard Contractual Clauses approved by the European Commission).

6. Data Security

We have implemented appropriate security measures (including SSL/TLS encryption) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your personal data is restricted to authorized employees and partners who have a business need to know.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for.

  • Invoicing Data: By Portuguese tax law, financial documents must be kept for a minimum of 10 years.
  • Inquiry/Contact Data: Kept for as long as necessary to resolve your request, or up to 1 year if no contract is formed.
  • Marketing Data: Kept until you unsubscribe or request deletion.

8. Your Legal Rights under GDPR

As a resident of the EU, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of any incomplete or inaccurate data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your data when it is no longer necessary for the purposes it was collected (subject to legal retention obligations).
  • Right to Restrict or Object to Processing: Object to direct marketing or request restrictions on how we process your data.
  • Right to Data Portability: Request the transfer of your data to you or a third party in a structured, electronic format.

To exercise any of these rights, please contact us at geral@buggyboat.pt. We will respond to your request within 30 days.

9. Cookies Policy

Our website uses cookies to improve your browsing experience, analyze site traffic, and optimize our marketing efforts. You can choose to accept or decline cookies through your browser settings. For detailed information, please read our dedicated Cookies Policy.

10. Complaints to the Supervisory Authority

If you believe that our processing of your personal data infringes on data protection regulations, you have the right to lodge a formal complaint with the Portuguese national data protection authority:

  • CNPD – Comissão Nacional de Proteção de Dados
  • Website: https://www.cnpd.pt/
  • Address: Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa, Portugal

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The “Last Updated” date at the bottom of this page will indicate when the latest revisions were made.

Last Updated: May 2026