top of page

​

Privacy and Data Policy

​

General Data Protection Regulation (GDPR) – May 2018

We inform you that personal data provided by our customers will be treated in accordance with the principles of transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality, while also respecting all obligations and guarantees established in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals regarding the processing of personal data and the free movement of such data.

In compliance with this regulation, we have updated our Privacy Policy.

​

Purposes of Processing

The personal data collected may be used to:

  • Manage reservations made by the user.

  • Respond to questions or requests submitted by the user.

  • Send newsletters, marketing, and promotional communications only if consent is given.

​​​

Recipients

Data will not be transferred to third parties except where legally required.

 

Retention Period

Data will be retained for the time necessary to manage the reservation and related services. Once management is completed, your data will be kept for six (6) months. If you consent to receive marketing or promotional materials, your data will be stored until you withdraw consent.

 

User Rights

Users have the following rights regarding their personal data:

  • Right of access

  • Right to rectification or deletion

  • Right to request limitation or object to processing

  • Right to data portability

  • Right to withdraw consent

To exercise these rights, please send a written request to hello@surfridersericeira.pt , specifying the right you wish to exercise.

 

Cookies

Our website uses cookies to analyze visitor behavior and improve user experience. Cookies collect anonymized information such as product searches, browsing language, time spent on pages, number of users, browser type, and more.

You can manage, block, or delete cookies using your browser settings:

 

Privacy and Personal Data Policy – Reservations

 

Data Controller: Surf Riders X Experiences (the Hospitality Business providing the requested service). Contact details are available on the website used for booking and appear on invoices.

 

Data Compliance Officer: Not applicable.

​

User: You, who completed the reservation form or related documentation.

​

Purpose: To manage your reservation and respond to inquiries or requests.

​

Legal Basis:

  • Performance of a contract or pre-contractual steps at your request.

  • Consent given by ticking the acceptance box of the Terms & Conditions and Privacy Policy.

​

Duration: Data is stored for the duration required to manage your reservation and accommodation services, plus six (6) months afterward. Marketing data is stored until consent is withdrawn.

​

Processor: We use our partner Wix Hotels for reservation management. Wix Hotels terms, privacy, and data security policies are available at:

​

We have a contract with Wix Hotels to provide their services under GDPR compliance.

​

Data of Third Parties: If you provide data of other individuals, you are responsible for obtaining their consent.

Data Transfer: Personal data will not be transferred outside the EEA (European Economic Area).

Data Subject Rights: Users can exercise rights of access, rectification, cancellation, or objection via email or postal service using contact information from our reservation website or invoices.

Supervisory Authority: Users may contact the competent supervisory authority in their Member State if they believe their rights have been violated. More info: EU Data Protection

bottom of page