PRIVACY POLICY / POLÍTICA DE PRIVACIDADE

Last Updated / Última Atualização: May 2026

ENGLISH VERSION

PRIVACY POLICY

MOBYDICK-TOURS, LDA ("Moby Dick Tours", "we", "our", or "us") respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), Portuguese data protection law, and applicable electronic communications legislation.

This Privacy Policy explains how we collect, use, process, store, and protect your personal information when you use our website, contact us, or book our services.

By using our website, booking our services, or contacting us, you acknowledge and accept the practices described in this Privacy Policy.

1. DATA CONTROLLER

MOBYDICK-TOURS, LDA
NIPC / VAT Number: 512 426 262
Registered Office: Rua dos Açores, nº 12, 9500-794 Ponta Delgada, São Miguel, Azores, Portugal
Email: info@mobydick-tours.com
Mobile: (+351) 919 942 831
Office: (+351) 296 283 241

MOBYDICK-TOURS, LDA is the data controller responsible for the processing of your personal data.

2. PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

Booking Information

• Full name

• Email address

• Phone number

• Number of guests

• Passenger category (adult, child, infant)

• Booking preferences

• Tour selection

• Payment confirmation details

• Special requests voluntarily provided

Contact Information

When you contact us via:

• contact forms

• email

• WhatsApp

• telephone

We may collect:

• your name

• email address

• phone number

• message contents

• communication preferences

Payment Information

Payments are securely processed through Wix secure payment infrastructure and trusted payment providers.

Accepted payment methods may include:

• Visa

• Mastercard

• American Express

• Apple Pay

• Google Pay

• other supported payment gateways

We do not store complete payment card details on our own servers.

Payment information is encrypted and processed by authorized payment processors.

3. CHILDREN'S DATA

Our tours are family-friendly.

Children’s bookings must be made by a parent or legal guardian.

We do not knowingly collect personal data directly from children without parental authorization where required by law.

Children under applicable minimum age thresholds should not independently submit personal data.

4. HOW WE USE YOUR DATA

We process your data for the following purposes:

Contract Performance

To:

• process bookings

• confirm reservations

• provide customer service

• manage tour participation

• communicate booking details

• issue confirmations

• process payments

• provide operational updates

Legal basis:
Article 6(1)(b) GDPR – Performance of a contract

Customer Communication

To:

• respond to inquiries

• answer booking questions

• provide support

• handle service requests

Legal basis:
Article 6(1)(b) and Article 6(1)(f) GDPR

Legal Compliance

To comply with:

• accounting obligations

• tax obligations

• regulatory obligations

• fraud prevention obligations

• tourism sector legal requirements

Legal basis:
Article 6(1)(c) GDPR

Website Security

To:

• protect our website

• detect abuse

• prevent fraud

• ensure operational integrity

Legal basis:
Article 6(1)(f) GDPR

Cookie and Analytics Use

Subject to consent where required, we may use cookies and analytics technologies to:

• improve website performance

• understand user behavior

• optimize services

• enhance user experience

Legal basis:
Article 6(1)(a) GDPR (consent)

5. WHATSAPP COMMUNICATIONS

If you contact us via WhatsApp, your communications may be processed by WhatsApp / Meta Platforms according to their privacy practices.

By initiating WhatsApp contact, you acknowledge the use of that third-party platform.

We recommend avoiding the transmission of sensitive personal information via messaging platforms unless necessary.

6. COOKIES

Our website uses cookies and similar technologies.

These may include:

Essential Cookies

Required for:

• website functionality

• secure booking sessions

• authentication

• shopping/cart functionality

• payment processing

These cannot be disabled without affecting functionality.

Analytics Cookies

Used to:

• analyze traffic

• improve performance

• understand visitor interaction

Only activated where legally required consent has been provided.

Preference Cookies

Used to:

• remember language preferences

• improve browsing experience

Users may manage cookie preferences through our cookie consent banner.

7. PAYMENT SECURITY

Payments are processed using secure encrypted payment technology via Wix infrastructure and authorized providers.

Security measures may include:

• SSL encryption

• secure payment gateways

• fraud monitoring

• PCI-compliant payment processing where applicable

We do not retain full card payment details.

8. DATA SHARING

We may share your information only where necessary with:

Service Providers

Including:

• Wix platform services

• payment processors

• hosting providers

• email systems

• customer communication tools

Legal Authorities

Where required by law, regulation, legal process, or lawful request.

Business Advisors

Including:

• accountants

• auditors

• legal advisors

• compliance professionals

All sharing is limited to legitimate operational necessity.

9. INTERNATIONAL DATA TRANSFERS

Some service providers may process data outside the European Economic Area (EEA).

Where this occurs, appropriate safeguards are implemented, including:

• Standard Contractual Clauses

• adequacy decisions

• equivalent lawful transfer mechanisms

10. DATA RETENTION

We retain personal data only as long as necessary.

Typical retention periods:

Booking records:
up to 10 years where legally required

Customer communications:
up to 36 months

Analytics data:
according to consent settings and platform configurations

Payment transaction records:
as required by financial and tax law

Data may be retained longer where legally required.

11. YOUR GDPR RIGHTS

You have the right to:

• access your data

• correct inaccurate data

• request deletion

• restrict processing

• object to processing

• request portability

• withdraw consent

• lodge a complaint

To exercise rights:
info@mobydick-tours.com

Identity verification may be required.

12. COMPLAINT AUTHORITY

If you believe your data rights have been violated, you may contact:

Comissão Nacional de Proteção de Dados (CNPD)
Website: https://www.cnpd.pt

13. SECURITY MEASURES

We implement reasonable technical and organizational safeguards including:

• encrypted communications

• secure hosting

• access control

• payment encryption

• monitoring protections

However, no internet transmission is completely risk-free.

14. THIRD-PARTY LINKS

Our website may include links to:

• Google

• Tripadvisor

• WhatsApp

• social media

• partner services

We are not responsible for third-party privacy practices.

Users should review those providers independently.

15. POLICY CHANGES

We may update this Privacy Policy periodically.

Changes become effective upon website publication.

Users are encouraged to review this page regularly.

16. CONTACT

For privacy requests:

MOBYDICK-TOURS, LDA
Email: info@mobydick-tours.com
Mobile: (+351) 919 942 831
Office: (+351) 296 283 241

VERSÃO PORTUGUESA

POLÍTICA DE PRIVACIDADE

A MOBYDICK-TOURS, LDA respeita a sua privacidade e compromete-se a proteger os seus dados pessoais em conformidade com o Regulamento Geral sobre a Proteção de Dados (RGPD), Regulamento (UE) 2016/679, legislação portuguesa aplicável e legislação sobre comunicações eletrónicas.

Ao utilizar este website, efetuar reservas ou contactar-nos, aceita os termos desta Política de Privacidade.

1. RESPONSÁVEL PELO TRATAMENTO

MOBYDICK-TOURS, LDA
NIPC: 512 426 262
Morada: Rua dos Açores, nº 12, 9500-794 Ponta Delgada, São Miguel, Açores, Portugal
Email: info@mobydick-tours.com
Telemóvel: (+351) 919 942 831
Telefone: (+351) 296 283 241

2. DADOS RECOLHIDOS

Podemos recolher:

• nome completo

• email

• telefone

• número de participantes

• tipo de passageiro

• preferências de reserva

• mensagens enviadas

• detalhes operacionais da reserva

3. PAGAMENTOS

Os pagamentos são processados através da infraestrutura segura da Wix.

Métodos suportados podem incluir:

• cartões bancários

• Apple Pay

• Google Pay

• outros métodos autorizados

A empresa não armazena dados completos de cartões.

4. FINALIDADES

Tratamos dados para:

• gestão de reservas

• atendimento ao cliente

• comunicações operacionais

• processamento de pagamentos

• cumprimento legal

• segurança do website

• melhoria de serviços

5. CRIANÇAS

As reservas para menores devem ser efetuadas por pais ou representantes legais.

6. COOKIES

Utilizamos cookies essenciais, funcionais e analíticos sujeitos ao consentimento aplicável.

Os utilizadores podem gerir preferências através do banner de consentimento.

7. PARTILHA DE DADOS

Podemos partilhar dados com:

• Wix

• processadores de pagamento

• fornecedores tecnológicos

• autoridades legais

• consultores profissionais

8. TRANSFERÊNCIAS INTERNACIONAIS

Sempre que aplicável, utilizamos mecanismos legais adequados para proteção de dados.

9. CONSERVAÇÃO

Os dados serão mantidos apenas pelo período necessário ou legalmente exigido.

10. DIREITOS

Tem direito a:

• acesso

• retificação

• apagamento

• oposição

• limitação

• portabilidade

• retirada de consentimento

• reclamação

Contacto:
info@mobydick-tours.com

11. AUTORIDADE DE CONTROLO

CNPD – Comissão Nacional de Proteção de Dados
https://www.cnpd.pt

12. SEGURANÇA

Aplicamos medidas técnicas e organizacionais adequadas para proteger dados pessoais.

13. CONTACTOS

MOBYDICK-TOURS, LDA
Email: info@mobydick-tours.com
Telemóvel: (+351) 919 942 831
Telefone: (+351) 296 283 241