This policy explains how personal data is handled on travel-azores.com ("Travel Azores", "we"). It follows the EU General Data Protection Regulation (GDPR) and Portuguese law.
1. Who is responsible
The controller is Sky Wings Digital, Lda (NIPC 517 594 315), Rua Portela das Maรบnรงas 32, 2670-556 Loures, Portugal. You can reach us at info@travel-azores.com.
2. What we collect and why
- Visiting the site. Our servers record technical data such as IP address, browser, pages requested and time. We use it to deliver the site and keep it secure (legitimate interest, Art. 6(1)(f) GDPR).
- Your account. Name, email, password (stored only in hashed form), preferred language and, optionally, an avatar. If you sign in with Google or Facebook, we receive the identifier and basic profile details that provider shares with us (contract, Art. 6(1)(b)).
- Reviews and favourites. The content you publish and the places you save (contract).
- Operator registration. If you register a business: name, email, password, business name, tax ID (NIF), island, phone, website and the descriptions of your business and place (pre-contractual steps and contract).
- Messages. If you write to us, we keep your message and contact details to reply (legitimate interest).
3. Cookies and similar technologies
Strictly necessary (no consent needed): travel-to-azores-session (session, 2 hours), XSRF-TOKEN (protection against forged requests, 2 hours) and ta_consent (remembers your cookie choice, 6 months).
Audience statistics. We use Plausible Analytics, which does not use cookies and does not collect personal data, so it needs no consent. We only see aggregated figures.
Accommodation partner links (Stay22), only with your consent. If you click Accept, we load the Stay22 "Let Me Allez" script from scripts.stay22.com. It can set cookies or identifiers and record that you clicked through to a booking partner (for example Booking.com) so the booking can be attributed to us. We may earn a commission at no extra cost to you. Stay22 acts as an independent controller: see its privacy policy. If you choose Reject, the script is never loaded and the links simply open the partner's page. You can change your choice at any time with Cookie settings in the footer (legal basis: consent, Art. 6(1)(a)).
4. Other services that receive data
- Maps. Maps use OpenStreetMap tiles. When a map is shown, your IP address and the requested area are sent to the OpenStreetMap servers (their policy). This is needed to display the map.
- Sign-in with Google or Facebook, only if you choose it: Google, Facebook.
- External links such as Booking.com have their own privacy policies.
- Fonts are hosted on our own server; no request is made to Google Fonts.
- Hosting is provided by a server provider acting as our processor.
We do not sell your personal data. Some providers above may process data outside the European Economic Area under the safeguards described in their own policies.
5. How long we keep data
Account and review data are kept while your account exists and are deleted on request. Server logs are kept only for the period needed for security. Your cookie choice is kept for 6 months, after which we ask again.
6. Your rights
You may request access, rectification, erasure, restriction, portability and object to processing, and you may withdraw consent at any time (this does not affect processing already carried out). Write to info@travel-azores.com; we reply within one month. You may also complain to the Portuguese data protection authority, CNPD.
7. Children
The site is not directed at children under 13 and we do not knowingly collect their data.
8. Changes
We will update this page when our practices change and show the date above.