Privacy Policy

Privacy Policy

In All Local Tours safety is our number one priority. We have to collect and keep a little data about you, like your name, email address, payment details and passport information. We also have to share your data with our trusted partners.

We promise to collect, process, store and share your data sefely and securely. We'll also sure  that the other businesses we work with are just as careful with your data.

All Local Tours can use the contact details  you share with us to let you know if there are any changes to your tour, or other things happen that might affect your travel plans.

Plus by listening to what our customers tell us, we can make changes, to make things easier where we can.

Personal data we collect about you

When using term "personal data" in our Privacy Policy, we mean information that relates to you and allows us to identify you, either directly or in combination with other information that we may hold. Your personal data may include for example, your name, your contact details, information relating to your itinerary (e.g. your booking reference number)  or information on how you use our website or you interact with us.

We collect some personal data from you, for example when you book a tour with us, use our website, use our services or contact us. If you book a tour on behalf of someone else, you must have their consent to use their personal information.

How and why we use your personal data

We use your personal data for the following purposes:

To manage your travel bookings and provide our services to you.            To communicate with you and manage our relationship with you. We may need to contact you by email and/or SMS for administrative or operational reasons, for example in order to send you confirmation of your bookings and your payments or to inform you  about your travel itinerery. Your opinion is very important to us, so we may send you an email or SMS to seek your feedback.

Changes In Privacy Policy

All Local Tours reserves the right to change the Privacy Policy from time to time at its sole discretion.

 

1. Scope
Infinite Tours unipessoal Lda Agencia de Viagens - (hereinafter referred to as this Entity or (All Local Tours) is a legal person and in the scope of its commercial activity, it may be necessary to collect personal data from its customers / users. Considering the right to privacy of customers, Infinite Tours ( All Local Tours ) does not collect any personal information without the prior consent of its holders.

With regard to navigation and use of the All Local Tours website by its users, to optimize and improve the browsing experience, data is collected through cookies, which may or may not be stored on the user's computer / navigation device.

It is intended to clearly demonstrate the collection and use of these Cookies, their purpose and protection of data collected in the use of the website.

When browsing the website, personal data is not automatically collected without prior consent.

In any case, Infinite Tours ( All Local Tours ) does not commercialize in any way the personal data that may be collected, nor does it transmit them to third parties without the prior consent of the holders, except for legal imposition.

2. Entity Responsible for the Processing of Personal Data
Regarding Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 designated by RGPD – General Data Protection Regime, the entity responsible for the collection and processing of personal data is Infinite Tours unipessoal Lda ( All Local Tours ) Travel Agency - License nº 4081 Contributor – 510636128 Apartments Pinhal do Concelho Lot B2, Shop E Estrada das Açoteias, Olhos de Água 8200 - 380 Albufeira Portugal
Although the entity is not obliged to appoint a Data Protection Officer, internally it has a DPO for dealing with matters related to the Protection of Personal Data who can be contacted by registered letter sent to Infinite Tours Unipessoal Lda Apartamentos Pinhal do Concelho Lot B2, Loja E Estrada das Açoteias, Olhos de Água 8200 - 380 Albufeira Portugal or via emailinfo@alllocaltours.com.
3. Definition of Personal Data
Any information, in any written, magnetic or digital support relating to the identification of a natural person or that may be identifiable.

4. Consent
When browsing the website, whenever it is necessary to identify and collect personal data, the user will have to authorize its collection through authorization mechanisms that may vary depending on the case but which will be clear in their purpose and intuitive in terms of use. For example, in a contact form, there will be a checkbox where the user must click authorizing the collection and processing of personal data entered in the form and subsequent contact by Infinite Tours ( All Local Tours ). However, it should be clear that without authorization for the processing of data, Infinite Tours ( All Local Tours ) will not have a way of contacting the user.

The processing of personal data, once authorized, will be done in accordance with this Privacy Policy, and your authorization must assume that it has been read and understood, as well as the Terms and Conditions of use of the website.

This Privacy Policy and the Terms and Conditions of use of the website may be revised without the need for prior consent, but always in compliance with the RGPD.

5. Personal Data to be collected
The personal data to be collected from the user will only be necessary for the indicated treatment. The collection is done generically through a form that will have the identification of its purpose and authorization of data collection when applicable. Depending on the type of purpose, the following may be requested: Name, Telephone, Email, tax number, among others. Only those marked as mandatory will be necessary and essential for the activity, the others being optional based on the voluntary decision of the data subject.

6. Purpose, accuracy and collection of data
The accuracy of the personal data provided is the sole responsibility of the holder thereof, and Infinite Tours (All Local Tours) cannot be held responsible for its inaccuracy or inaccuracy.

Identification data is necessary for the activity and/or for the fulfillment of legal obligations and for the time necessary for its purpose or until the right of opposition, erasure or consent is withdrawn. The processing of personal data is essential and is consented by the user and without which the commercial relationship of Infinite Tours (All Local Tours) is not possible.

Examples of purpose of data processing:
CRM (Customer Relationship Manager): Management of contacts, information, customers, suppliers, market research, support requests, billing, collections and payments, among others.

Accounting Management: Invoicing, accounting, tax information, sending the SAFT-PT file to the tax authority, among others.

Marketing: creation of consumption profiles (aggregated data), analysis of products and services by profile, among others.

Network and systems management: monitoring, service support, remote support

Registry Operators: data management in operators namely ICANN, DNS.PT, EURID, among others, data management in web service management profiles, data management in accessory service profiles such as personal digital certificates, company, etc.

Control and security management: access logs, incidents, physical and online security, physical and remote system surveillance. Management of protection measures, firewall, intrusion detection system. Surveillance systems on access to the system by employees, levels of access to information and registration of accesses (logs).

Backup Management: Backup, access, recovery and deletion or overlay policy. Management of data redundancy and infrastructure security.
Legal Obligations: compliance with the transmission of data through legal imposition.

Recruitment: in the selection of potential candidates, it is necessary to collect and process the candidates' personal data. They will not be passed on to third parties without your prior consent.

7- Transmission of Data to Third Parties
As a general rule, the data collected is not shared with third parties except by legal imposition or because it is strictly necessary for the activity.

Under the terms of the RGPD, in the eventual transmission of data to third parties, the following procedures are observed: unequivocal information to the holder of the reason for transmission, consent (except for legal imposition), shielding of the form of transmission guaranteeing levels of confidentiality, security and protection. These third parties must comply with the RGDP / Privacy Shield Act, namely in terms of the duty of secrecy, security and protection, and this data cannot be used for any other purpose, nor related to others that they have.

Personal data will be processed whenever possible within the European Union and in countries that comply with the RGPD / Privacy Shield.

8- Duration of the Conservation of the Processing of Personal Data
Only what is necessary for the identified purpose will be kept, that is, during the time of the contract or commercial relationship, after which they may be kept for 2 years for control purposes. By legal requirement, data relating to tax or accounting information is retained for a period of 10 years. On this point, we will follow the guidelines of the CNPD, always complying with the guidance that data should only be kept for the period strictly necessary and for the purpose for which they were transmitted.

9- Security in Data Processing
Data will be stored electronically on a server maintained and controlled by Infinite Tours (All Local Tours), whose security is always monitored in terms of infrastructure and access to data. Access is restricted and protected by various access management and encryption tools, with the aim of preventing unauthorized third parties from gaining access to them. The security risk is thus minimized but not extinguished, and there is always the possibility of illegal access to data. In this case, leakage retention and disclosure measures will be implemented in accordance with GDPR.

9- Security in Data Processing
Data will be stored electronically on a server maintained and controlled by Infinite Tours (All Local Tours), whose security is always monitored in terms of infrastructure and access to data. Access is restricted and protected by various access management and encryption tools, with the aim of preventing unauthorized third parties from gaining access to them. The security risk is thus minimized but not extinguished, and there is always the possibility of illegal access to data. In this case, leakage retention and disclosure measures will be implemented in accordance with GDPR.

10. Rights of the Holders of Personal Data
The holders enjoy, in accordance with the RGPD, the right of access, rectification, opposition, erasure, limitation or portability of data. In order to exercise their rights, they must submit a written request to the DPO of Infinite Tours unipessoal LDA ( All Local Tours ) Travel Agency - License nº 4081 - Apartamentos Pinhal do Concelho Lot B2, Loja E Estrada das Açoteias, Olhos d' Water 8200-380 Albufeira or via email at info@alllocaltours.com.

In the written request, Infinite Tours ( All Local Tours ) will, for security reasons, authenticate the respective issuer as the legitimate holder of the data. In case of doubt, the request is not answered, and the issuer may authenticate in another way.
In any case, the request may not be immediately satisfied (legal or other imperatives). The holder will always be informed in this case, and it is expected that the required procedure will be completed within a period of 1 month.

In the case of erasure (data deletion), they may be retained for further treatment due to legal imposition and for the period that may be imposed (10 years for billing, for example).

11- Right to complain
Infinite Tours (All Local Tours) through its DPO is available to data subjects to clarify any question about the collection and processing of data via email info@alllocaltours.com

The data subject is free to file a complaint with the control authority CNPD – National Data Protection Commission, R. de São Bento 148, 1200-031 Lisboa regarding the way Infinite Tours (All Local) collects and processes data Tours).

12- Cookies, what are they and what are they used What is a Cookie or Cookies?
"Cookies" are code files that are stored on your computer, tablet, or mobile device, through the browser that stores information related to browsing preferences. They make it possible to improve the performance and browsing experience of its users, increasing, on the one hand, the speed and efficiency of responses and, on the other hand, eliminating the need to repeatedly enter the same information.

What are Cookies for? They serve to collect information to allow, for example, a shopping cart to work by storing previously chosen products. In this way, a cookie stores useful and interesting information, allowing for faster and more efficient navigation, eliminating the need to repeatedly enter the same data.

Elimination or Deactivation of Cookies
Cookies retain only information related to the user's preferences and the user can, at any time and through his internet browser (browser), decide to be notified about the receipt of cookies, as well as block the respective entry in his system.

To learn more about how to disable cookies depending on your browser, click here: https://cookies.insites.com/disable-cookies/


Type of cookies used on this website
– Session cookies: temporary cookies that remain in your browser's cookie file until you leave the website. Usually, this information is used to provide a better browsing experience based on the data accessed. It also allows for identifying navigation problems, enabling their resolution.
-Strictly necessary cookies: They allow you to browse the website and use its functions, as well as access secure areas. Without these cookies, the services you have requested cannot be provided;
– Analytical Cookies: normally used to create aggregated and non-personalized (anonymous) information about website usage statistics;
– Functionality Cookies: these allow the website to identify the user and load their profile based on that information. For example, starting a login session when you return to the website, not having to log in again each time you visit the website.

The user, when using this website, is expressly accepting the Conditions of Access and Use described above.