Photo Tours Azores
1. Personal Data
What is personal data?
Personal Data means any information, of any kind and in any format, relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified, directly or indirectly—e.g. by name, identification number, location data, electronic identifier, or other factors that allow their identification.
Privacy and the safeguarding of personal data of all Clients and users of services provided by ueipazores.com at any given time are essential to how the company operates and is structured.
The Privacy Policy of ueipazores.com is designed to ensure that all Clients are fully informed at all times about the rules and principles governing data protection and processing. ueipazores.com makes every effort to keep this data secure, in accordance with applicable laws and procedures.
Links to other websites may appear on the online communication channels of ueipazores.com. These are provided in good faith, but ueipazores.com is not liable for personal data collection or processing carried out on these sites, nor for their accuracy, credibility, or functionality. The presence of such links does not imply any responsibility for those third-party sites.
ueipazores.com also recommends that Clients adopt additional security measures—such as keeping devices and software up to date, using anti-malware and firewall protection, and avoiding browsing sites without proper authenticity guarantees.
This Privacy Policy may be amended or revised at any time; any changes will be published and communicated via ueipazores.com's online platforms.
Who are the data subjects?
Clients or Users are natural persons whose personal data is processed by ueipazores.com. The Client is the person who enters into a contract with ueipazores.com; the User is the person who uses its services or products.
2. Data Processing
Who is responsible for processing your personal data?
ueipazores.com is the data controller. It decides which data to collect, how it is processed, and for what purposes, as part of the services and products it provides.
3. Legal Basis for Data Processing
We process your personal data in the following situations:
Consent: When you provide express consent—written or via an electronic form—given freely, informed, specific, and unambiguous.
Consent for minors: If data processing involves minors, ueipazores.com will require consent from the legal guardians.
Contract fulfilment & pre-contractual steps: When processing is necessary to prepare, fulfil, or manage a contract, e.g. preparing service proposals, managing contact, billing, invoicing, payments.
Legal obligations: When needed to comply with legal duties applicable to ueipazores.com.
4. Purposes of Data Processing
We use your personal data for:
Marketing and sales
Client management and service delivery
Accounting, tax, and administrative management
Compliance with legal obligations
ueipazores.com may subcontract third parties to help carry out these tasks, who will have access to personal data. In such cases, subcontractors must provide adequate technical, organizational, and human safeguards and are bound by legal and contractual confidentiality and data protection obligations.
Data may be shared with third parties only when:
a) required by law, and only to the extent necessary;
b) you give explicit consent, and you are informed in writing of the recipients and purposes of the data sharing.
5. Data Retention
ueipazores.com retains personal data according to the purposes for which it was collected. If not legally required otherwise, data is only kept as long as needed to fulfil those purposes, in line with law, guidelines, and CNPD (Portuguese Data Protection Authority) decisions.
Personal data is retained for the duration of the contractual relationship. It may be kept longer with your consent, to assert contractual rights or on the basis of legitimate interest—but only as long as necessary and in compliance with CNPD guidance.
6. Collection of Personal Data
We collect your personal data with your consent when you purchase our services or products—either orally, in writing, or via our online channels. We may also gather publicly available information or from other sources.
We only process your personal data with your explicit consent, tailored to each specific purpose, in accordance with the GDPR (implemented in Portugal by Law no. 58/2019 of 8 August).
You may withdraw your consent at any time. However, certain personal data are essential for providing our services. You will be informed of such necessity and the consequences of non-provision.
If essential data is incomplete, inaccurate, or not provided, ueipazores.com may be unable to deliver the agreed service(s), and you will bear full responsibility for any resulting consequences.
7. Data Subject Rights
Your rights include:
Right of access: To confirm which personal data is processed and receive information about it (e.g. purposes, retention period).
Right to rectification: To request correction or completion of inaccurate or incomplete data (e.g. address, tax ID, email, phone).
Right to erasure (“right to be forgotten”): To request deletion where legally permissible and no legitimate grounds exist to retain it.
Right to data portability: To receive your data in a machine-readable format or request direct transfer to another controller.
Right to object & automated decision rights: To withdraw consent or object, e.g. to marketing processing.
Right to restrict processing: To limit processing temporarily or limit it to certain data/categories.
Right to lodge a complaint: With the overseeing authority, CNPD.
How to exercise your rights:
Requests are free unless manifestly unfounded or excessive, in which case a reasonable fee may apply. Proof of identity may be requested. Responses will be provided within 30 days, extendable to 2 months for complex cases.
Submit requests via:
Website: ueipazores.com
Company: NIF 229557244 – Photo Tours Azores, Dr. Homem de Gouveia, 9, 2ᵒ E, 9500‑782 Ponta Delgada
Email: info@ueipazores.com
8. Data Protection Measures
ueipazores.com has implemented appropriate technical and organizational measures to ensure that only the data necessary for each purpose is processed, strictly on a need-to-know basis. These measures are regularly reviewed and updated.
Logical, physical, and organizational security precautions are in place to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to your data.
When sharing personal data with third parties, ueipazores.com ensures that:
a) data sharing complies with the law;
b) transfers are secure;
c) third parties are contractually committed to confidentiality and may not use the data for other purposes, profit, or cross-match with other data.
versão 1.0 - July 20th 2025
