1. Who we are
The data controller is Pockevltbriskio Travel Media, Unipessoal Lda., company number 516 482 907, registered at Rua da Prata 128, 2.º Andar, 1100-052 Lisboa, Portugal. We publish independent travel planning guides. We are not a travel agent, we do not sell transport or accommodation, and we do not take payments through this website.
For any privacy question, including requests to exercise your rights, write to our data protection contact at [email protected] or by post to the registered address above, marked "Data Protection".
2. What data we collect
- Enquiry data. When you use the contact form we collect the name, email address, region selection, optional travel dates and message content you supply, plus the date and time of submission.
- Technical data. Our hosting provider records standard server logs: IP address, user agent, requested URL, referring page and timestamp. These are generated automatically by the act of loading a page.
- Usage data. If you consent to analytics cookies, we collect aggregated information about which pages are viewed, approximate region, device category and how visitors move between guides.
- Preference data. Your cookie choice and, if you allow functional cookies, your last route-planner selection, both stored locally in your browser.
We do not knowingly collect data from children under 16, and we do not collect special category data. Please do not include health, financial or identity document details in an enquiry.
3. Legal bases for processing
We rely on the following bases under the General Data Protection Regulation. Consent for analytics and functional cookies, and for any optional updates you ask to receive. Legitimate interests for keeping the site secure, preventing abuse of the contact form and maintaining server logs. Contract or pre-contractual steps where you ask us a question and we answer it. Legal obligation where retention is required by Portuguese or EU law.
4. Cookies and similar technologies
Essential cookies and local storage entries keep the site functioning, remember your cookie decision and prevent the banner reappearing on every page. Analytics and functional cookies are set only after you accept them. A full table of cookie names, purposes and durations, together with browser-level opt-out instructions, is in our Cookie Policy. You can withdraw consent at any time by clearing site data in your browser, which returns the banner to its initial state.
5. Third-party processors
We keep the supply chain deliberately short. Categories of processor we use are: a European web hosting and content delivery provider that stores the site files and generates access logs; a privacy-focused analytics provider that reports aggregated traffic statistics if you consent; and a business email provider that receives and stores contact-form correspondence. Each processor acts on our written instructions under a data processing agreement, and we select providers that store data within the European Economic Area wherever possible. Where a transfer outside the EEA is unavoidable, it is covered by the European Commission's standard contractual clauses. We do not sell personal data, and we do not share it with advertising networks or data brokers.
6. Retention
Contact-form correspondence is kept for 24 months from the last message in the thread, so that we can follow up on ongoing trip questions, after which it is deleted. Server logs are retained by our host for a rolling period of up to 12 months for security and diagnostics. Aggregated analytics reports contain no direct identifiers and may be kept indefinitely. Cookie and preference values expire according to the durations listed in the Cookie Policy, or when you clear your browser storage.
7. Your rights
If you are in the European Economic Area or the United Kingdom you have the right to access your data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing already carried out. Requests are answered within one month; complex requests may be extended by a further two months with notice.
If you are a California resident, you may request disclosure of the categories and specific pieces of personal information we hold, request deletion, and request correction. You have the right not to be discriminated against for exercising these rights. Because we do not sell or share personal information for cross-context behavioural advertising, there is no "Do Not Sell or Share" mechanism to operate, but you may still submit a request and we will confirm our position in writing.
To exercise any right, email [email protected] from the address you contacted us with, or provide enough detail for us to locate your record. We may ask a limited verification question before acting on a request.
8. Security
The site is served over HTTPS. Access to the enquiry mailbox is restricted to named staff, protected by multi-factor authentication, and reviewed periodically. We apply the principle of data minimisation: if a field is not needed to answer your question, we do not ask for it.
9. Complaints
If you believe we have handled your data improperly, please contact us first so we can put it right. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados, or with the authority in your country of residence.
10. Changes to this policy
We update this policy when our processing or providers change. The revision date appears at the top of the page. Material changes affecting how we use your data will be summarised on this page for at least 30 days.