Privacy Policy

1. Who is responsible for your data?

The data controller responsible for the processing of personal data covered by this Privacy Policy is:

Travel With Pipa does not publish a professional or residential address on the Website. You may contact the data controller by email using the address above.

2. What personal data may we collect?

The personal data collected depends on how you interact with the Website.

When you contact Travel With Pipa through the contact form, we may collect information such as:

• your name;
• your email address;
• your telephone number, if provided;
• the contents of your message;
• any other information you voluntarily include in your message.

We do not ask you to provide sensitive personal data through the contact form. Please avoid including sensitive or unnecessary personal information in your message.

3. How do we collect your personal data?

Personal data may be collected when you:

• contact Travel With Pipa through the Website's contact form;
• contact us directly by email;
• use the Website after providing consent for optional analytics technologies.

Some technical information may also be processed automatically when you visit the Website, particularly when you have consented to analytics technologies.

4. Why do we use your personal data?

Personal data may be processed for the following purposes:

• to respond to enquiries and messages sent through the Website;
• to communicate with you regarding your enquiry;
• to provide information or assistance requested by you;
• to maintain and operate the Website;
• to understand how visitors use the Website and improve its content and user experience, where you have consented to analytics;
• to comply with applicable legal obligations;
• to protect the security and integrity of the Website.

5. Legal basis for processing

Depending on the circumstances, personal data may be processed on the following legal bases under the General Data Protection Regulation (GDPR):

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Google Analytics 4

Travel With Pipa uses Google Analytics 4 (GA4) to understand how visitors interact with the Website and to improve its content and user experience.

Analytics is configured using Google's consent mechanisms. Analytics storage is initially set to denied and analytics functionality is enabled only after the visitor provides the relevant consent.

Depending on the configuration and the visitor's consent, Google Analytics may process information relating to website usage, device and browser characteristics, pages visited, interactions and approximate geographic information.

Google states that individual IP addresses from users in the European Union, Switzerland and United Kingdom are not logged or stored by Google Analytics. Google may nevertheless derive approximate geographic information from IP-based signals before the IP information is discarded.

Further information about Google's privacy controls for Google Analytics is available in Google's documentation.

7. Contact form

If you use the contact form on the Website, the information you provide is used to respond to your enquiry and communicate with you regarding your request.

We only ask for information that is relevant to handling your enquiry. Please do not submit sensitive personal data or information that is not necessary for your request.

Information submitted through the contact form may be transmitted through the Website's hosting and email infrastructure in order to deliver your message.

8. Email communication

If you contact Travel With Pipa by email, your email address, message and any other information contained in your communication may be processed in order to respond to you and manage the correspondence.

We will not use your contact information for unrelated marketing purposes unless we have an appropriate legal basis to do so.

9. Newsletter

Travel With Pipa may introduce a newsletter in the future to send subscribers information about new articles, travel content and related updates.

At the time of this Privacy Policy's last update, the newsletter service has not yet been activated.

If a newsletter is introduced, the relevant subscription process, provider, legal basis and privacy information will be updated before the service is used.

10. Social media links

The Website may contain links to Travel With Pipa's social media profiles, including Instagram, Pinterest and TikTok.

These are standard links to external websites. Travel With Pipa does not currently embed social media feeds or social media widgets on the Website.

When you follow one of these links, you leave the Travel With Pipa Website and the relevant platform's own privacy policy applies.

11. Third-party service providers

Travel With Pipa may rely on third-party service providers to operate the Website and provide certain technical services.

These may include website hosting, email infrastructure, analytics and other technical providers necessary to operate the Website.

Where third-party providers process personal data on behalf of Travel With Pipa, appropriate contractual and organisational safeguards will be used where required by applicable data protection law.

12. International data transfers

Some third-party service providers used by Travel With Pipa may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, appropriate safeguards will be applied where required under applicable data protection law, such as an adequacy decision or appropriate contractual safeguards.

13. How long do we keep your data?

Personal data is kept only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The retention period may depend on the type of information, the purpose for which it was collected and any applicable legal obligations.

Analytics data is subject to the retention settings configured within Google Analytics. Google Analytics allows website administrators to configure retention periods for user-level and event-level data.

14. Your data protection rights

Depending on the circumstances and applicable law, you may have the following rights regarding your personal data:

• Right of access — to request access to personal data we hold about you.
• Right to rectification — to request that inaccurate or incomplete data be corrected.
• Right to erasure — to request deletion of your personal data where the legal conditions for erasure are met.
• Right to restriction — to request restriction of processing in circumstances provided by law.
• Right to object — to object to certain processing, including processing based on legitimate interests where the relevant legal conditions apply.
• Right to data portability — where applicable, to receive personal data in a structured, commonly used and machine-readable format.
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time.

These rights are not absolute and may be subject to legal conditions or exceptions.

The European Commission confirms that individuals have rights including access, rectification, erasure, restriction, portability and objection under the GDPR.

15. How to exercise your rights

To exercise your data protection rights, please contact:

Please provide enough information to allow us to understand your request and, where necessary, verify your identity.

Requests will be handled in accordance with the applicable requirements and deadlines under data protection law.

16. Right to lodge a complaint

If you believe that your personal data has not been processed in accordance with applicable data protection law, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Portugal, the relevant supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

17. Data security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission or storage over the Internet can be guaranteed to be completely secure.

18. Children's privacy

Travel With Pipa is a general-audience travel website and is not specifically directed at children.

We do not knowingly seek to collect personal data from children through the Website.

19. Changes to this Privacy Policy

Travel With Pipa may update this Privacy Policy when the Website, services, data processing activities or applicable legal requirements change.

The date shown at the beginning of this Policy indicates when it was most recently updated.

We recommend checking this page periodically for the latest information.