Privacy policy
This site collects one thing: whatever you write in the contact form. It uses no cookies, has no traffic analytics, carries no advertising and follows nobody across the web. This page explains the rest in detail.
Who is responsible for your data
The controller of data collected through this site is [full registered company name], with registered office at [registered address], tax number [NIF], referred to below as Almovya.
For anything concerning your data, write to reservas@almovya.com or call +351 227 848 579.
What we collect
Only what you give us in the contact form:
- Name
- Required. So we know who we are speaking to.
- Required. This is where we reply.
- Telephone
- Optional. Only if you would rather we called.
- When you are thinking of travelling
- One of four options, so we understand the urgency.
- Your message
- Whatever you write. Please don't include health data, bank details or identity documents here: if those become necessary later, we handle them by another route.
- Consent
- The record that you agreed to be contacted.
We do not collect your IP address, we do not profile visitors, and we make no automated decisions about you.
We use no cookies
This site sets no cookies, uses no local storage in your browser, and has no analytics tooling such as Google Analytics. That is why you will find no cookie banner here: there is nothing to consent to.
Typefaces are served from our own domain rather than from a third party's servers. Visiting this site communicates nothing about you to anyone else.
What we use your data for
To reply to you and, if things progress, to prepare and deliver the service you ask us for. Nothing else.
We send no newsletters, no promotions and no unsolicited commercial messages of any kind. We do not sell, rent or pass your data to anyone for marketing purposes.
On what legal basis
- Your consent, given when you submit the form, under Article 6(1)(a) GDPR. You may withdraw it at any time, without affecting processing carried out beforehand.
- Performance of a contract or pre-contractual steps taken at your request, under Article 6(1)(b), once an enquiry becomes a concrete service.
- Compliance with legal obligations, under Article 6(1)(c), chiefly tax and accounting obligations, where invoicing occurs.
Who else handles your data
We work with a deliberately small number of processors:
- FormSubmit
- Receives the form contents and forwards them to us by email. It does not retain them persistently for its own use. Its servers may sit outside the European Economic Area.
- GitHub Pages (GitHub, Inc., United States)
- Hosts these pages. Like any web server, it technically logs the requests it receives, including IP addresses. We have no access to those logs and make no use of them.
- Email provider
- The mailbox where enquiries arrive and from which our reply is written.
Beyond these, your data may be passed to operators (airlines, owners, residence proprietors, restaurants), but only when and to the extent necessary to deliver what you asked for, and only with your knowledge. Never before that point.
Transfers outside the European Union
Some of these providers are based in the United States. Where that applies, the transfer rests on the safeguards in Chapter V of the GDPR, chiefly standard contractual clauses or European Commission adequacy decisions. If you plan travel outside the European Union, operators at that destination will receive the data needed for the booking.
How long we keep it
- Enquiries that go nowhere: up to [24 months] after the last contact, then deleted.
- Clients: for the duration of the relationship and for the statutory periods that follow it, as a rule ten years for documents of fiscal relevance under Portuguese law.
Your rights
At any time, and free of charge, you may:
- Find out what data we hold about you and obtain a copy;
- Correct data that is wrong or incomplete;
- Ask for it to be erased;
- Restrict or object to the processing;
- Receive your data in a format you can take elsewhere;
- Withdraw the consent you gave us.
Write to reservas@almovya.com. We reply within one month.
If you believe we have not handled the matter properly, you may lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Protecção de Dados, Av. D. Carlos I, 134, 1.º, 1200-651 Lisbon, www.cnpd.pt.
Security
The site is served exclusively over an encrypted connection (HTTPS). Access to the mailboxes where enquiries arrive is protected by two-step authentication. No system is infallible, but we treat your data with the same care we give the itineraries.
Changes to this policy
If this policy changes, the date at the top changes with it. Changes that materially affect how your data is handled will be communicated to anyone with an enquiry in progress.
Note for whoever publishes this site. This text accurately describes what the site does today: we verified there are no cookies, no local storage and no third-party loads. The fields marked in orange are still unfilled, and identifying the data controller is a legal requirement. Before treating this as final, have a lawyer review it: not everything required of a travel intermediary in Portugal fits in a template.