When you access the Book Viagens website, you are accepting the terms set out and the general rules of privacy and processing of your personal data, which we collect and process in compliance with the Personal Data Protection Law.

Book Viagens, with the corporate name of Direct Book, Agência de Viagens, Lda., headquartered at Rua de Santo António 58, 3830-153 Ílhavo, holder of the identification number of a legal person 510400078 is committed to protecting the privacy of your personal data (hereinafter "data") and, therefore, undertakes to process and ensure the security of such data in accordance with the personal data protection legislation in force, and, in particular, with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, General Data Protection Regulation (GDPR). 

This Privacy Policy aims to make known how Direct Book, Agência de Viagens, Lda. treats your data and your rights as a data subject.
Any data that you provide to Direct Book, Agência de Viagens, Lda. will be understood as obtained, processed and transmitted in strict observation and in full compliance with the requirements established in the GDPR and legislation in force.

The collection of the user's personal data may be carried out via the Internet (on the website itself), telephone or through printed materials and will be processed automatically, under the terms approved by the Portuguese National Data Protection Commission. All data collection will operate in accordance with the strictest security rules.

Direct Book, Agência de Viagens, Lda. uses appropriate security measures to protect your data, including appropriate technical and organisational measures to protect it against misuse or unlawful processing and against accidental loss, damage or destruction.

All employees of the entity responsible for processing personal data are bound by a duty of secrecy and confidentiality regarding the data they have access to when entering data into the respective computer database. They are duly informed of the importance of complying with this legal duty of secrecy and are required to assume the corresponding responsibility.

The user accepts that Direct Book, Agência de Viagens, Lda. may provide third parties with information relating to the habits, uses and customs of customers as statistical information, solely for the purpose of establishing partnerships, not including the identity or characteristics of any particular user.

The processing of personal data is necessary for the purpose of sending communications intended to inform you of news, promotions, campaigns and other opportunities from which you may benefit. This includes: marketing and management development, and communication of general and personalised offers by Direct Book, Agência de Viagens, Lda.

Personal data means any information relating to an identified or identifiable natural person (an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier).

Direct Book, Agência de Viagens, Lda. does not process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, or data concerning health or sex life.

In accordance with the provisions of the GDPR, Direct Book, Agência de Viagens, Lda. acts as the entity responsible for the processing of your data. For any clarification regarding this Privacy Policy or the processing of your data, you can contact us through the following means:
 
Direct Book, Agência de Viagens, Lda.
Address: Rua de Santo António 58, 3830-153 Ílhavo
Email: admin@bookviagens.pt 

Type of personal data, Purposes and Basis of Processing:
This policy covers the online and offline data collection activities of Direct Book, Agência de Viagens, Lda., including data collected through various channels, such as brand websites, agencies and events/fairs in which Direct Book, Agência de Viagens, Lda. participates.

 Direct Book, Agência de Viagens, Lda. collects and processes your data for a number of purposes:

• Reservation or purchase of services: There is a set of data that must be collected so that Direct Book, Agência de Viagens, Lda. can organise and provide the requested service (including sending the reservation confirmation and travel documents), as well as to manage any complaints related to the reservation or purchase of services, such as name, date of birth, identification document details, address, loyalty card numbers, mobile or telephone number, email address, travel preferences, interests, reason for and details of complaints, special occasions and special requests. The basis for collecting this data is the management of the contractual relationship and the legitimate interest of Direct Book, Agência de Viagens, Lda.
  
  In order to obtain a visa, Direct Book, Agência de Viagens, Lda. may need to collect certain types of data requested by the issuing entities, those strictly necessary for the issuance, such as: passport data, vaccination record and data related to the criminal record to comply with the legal obligation of certain destination countries. The basis for collecting this data is compliance with a legal obligation.
   
• Conducting satisfaction surveys: In order to assess your level of satisfaction with the services provided, Direct Book, Agência de Viagens, Lda. may send you quality surveys. Customers are not obliged to respond to these quality surveys, which aim to gather opinions about the services provided, with the aim of improving/developing them. The basis for the processing of this data is the legitimate interest of Direct Book, Agência de Viagens, Lda. in continuously improving the quality of its services.
   
• Management and administration: The data collected so that Direct Book, Agência de Viagens, Lda. can fulfil its accounting/tax and legal and administrative obligations includes your name, address and Tax Identification Number. The basis for the processing of this data is compliance with a legal obligation and the legitimate interest of Direct Book, Agência de Viagens, Lda. in managing customer relations.
   
• Commercial and promotional communications:  Direct Book, Agência de Viagens, Lda. collects data such as your name, telephone or mobile phone number and email address in order to provide you with information about services that may be of interest to you (e.g. marketing communications or campaigns and promotions), obtaining your consent where necessary. You may object to the processing of your data for these purposes at any time, as stipulated in the paragraph below entitled ‘Your Rights’. The basis for the processing of this data is the legitimate interest of Direct Book, Agência de Viagens, Lda. or, when requested, your consent.
   
• Management of competitions, challenges or promotional events: The data collected so that Direct Book, Agência de Viagens, Lda. can consider and manage your participation in a given competition, challenge or promotional event is generally your name, address, mobile or telephone number and email address. For more information about competitions, challenges and other promotions, please refer to the rules or terms and conditions included in each competition, challenge or promotion. The basis for the processing of your data is your consent.
   
• Video surveillance: With regard to the closed-circuit television video surveillance system, implemented in some facilities and duly signposted, your image may be captured by the aforementioned cameras. The purpose of these video surveillance cameras is to ensure the safety of people and property, and this image capture is carried out based on the legitimate interest of Direct Book, Agência de Viagens, Lda., in the exercise of functions of public interest or for the fulfilment of legal obligations.

 As part of your booking and/or purchase, Direct Book, Agência de Viagens, Lda. may share your data with the following entities:

1. Service providers (such as airlines, hotels, car rental companies, operators, insurance companies), so that they can use it for the purpose of correctly providing each service requested and to comply with the legislation of the destination countries;
2. Government authorities (such as immigration, border control, public safety and security entities, and counter-terrorism entities).

Depending on your destination, Direct Book, Agência de Viagens, Lda. may need to transfer your data to service providers within or outside the European Union. Any transfer of personal data to a third country will only be carried out in compliance with legal obligations or provided that compliance with the applicable EU and national legal standards in this area is guaranteed.

Data relating to minors is collected and processed with the consent of their parents or legal guardian. With regard to this data, parents or legal guardians may exercise the rights granted to data subjects under the General Data Protection Regulation.

Your personal data is kept by Direct Book, Agência de Viagens, Lda. only for the period strictly necessary for the purposes mentioned above, except when there are statutory retention obligations in accordance with applicable legislation (such as tax or commercial law) that require the retention of your personal data for a longer period.

As the data subject, you may exercise the following rights, within the limits established by law:

1. Access to personal data
2. Rectification of personal data
3. Right to be forgotten
4. Portability of personal data
5. Objection to the processing of personal data [For reasons related to your particular situation, you have the right to object to the processing of your personal data carried out on the basis of legitimate interest or in relation to direct marketing.]
6. Withdrawal of consent to processing

The exercise of these rights depends on a written request (including a copy of a document proving the customer's identity and mentioning the right or rights they wish to exercise), to be sent by one of the following means:
 
Mail: Direct Book, Agência de Viagens, Lda. - Rua de Santo António 58, 3830-153 Ílhavo
E-mail: admin@bookviagens.pt 
In person: at one of the Book Viagens counters, by filling out the appropriate form
 
After sending the request with the necessary information, Direct Book, Agência de Viagens, Lda. will respond within one to two months, taking into account the complexity and number of requests.

In addition to the means mentioned above, the user will always have the right to submit their request or complaint to the supervisory authority, currently the National Data Protection Commission (CNPD) - www.cnpd.pt.

Direct Book, Agência de Viagens, Lda. reserves the right, at any time, to make modifications or updates to this Privacy Policy, and these changes will be duly updated on our platforms and websites. Please check back regularly for any updates or changes to this policy.