Peak2Peak is committed to protecting the privacy and personal data of our customers and users, handling your information with the utmost security and responsibility. This Privacy Policy aims to explain how we collect, use, share, and protect your personal data in compliance with applicable Portuguese and European legislation, including the General Data Protection Regulation (GDPR).
1. Data Controller
Peak2Peak, duly registered with the National Register of Tourism Entertainment Agents (RNAAT) under number 630/2024, is the entity responsible for processing the personal data provided by our customers. If you have any questions or wish to exercise any of your rights regarding data protection, you can contact us via email at info@peak2peakadventures.com or through the phone number provided on our official website.
2. Collection and Use of Personal Data
The collection of personal data is essential to ensure the efficient, personalized, and secure provision of our services, as well as to comply with the legal obligations imposed on us. The personal data we may collect include:
- Identification Information: Full name, date of birth, and identification number (Citizen Card or Passport), which are necessary to identify our customers and validate their eligibility to participate in activities.
- Contact Information: Email address, phone number, and address, used to ensure effective communication and to send relevant information about bookings and activities.
- Health Data: Sensitive information regarding medical conditions, allergies, or physical limitations that may affect safe participation in our activities, treated solely to ensure the safety and well-being of our customers.
- Payment Information: Data related to the payment method used, including credit or debit card details, and transaction history, necessary for processing payments and fulfilling our tax and accounting obligations.
- Browsing Data: Such as IP address, device type, browser used, and pages visited on our website, collected to improve the user experience on our site and protect the integrity of our systems.
3. Purposes of Data Processing
The personal data collected by Peak2Peak are processed for several purposes, all of which are essential for providing our services and complying with our legal obligations:
3.1. Service Provision: We use personal data to manage and process bookings, ensure that services are provided in a personalized and safe manner, and maintain effective communication with customers before, during, and after activities, thus ensuring the best possible experience.
3.2. Compliance with Legal Obligations: We process your personal data to ensure compliance with the tax, accounting, and legal obligations imposed on us, such as issuing invoices, complying with court orders, or responding to requests from public or regulatory authorities.
3.3. Legitimate Interest: In some cases, we process your data based on Peak2Peak’s legitimate interest, such as the continuous improvement of our services, fraud prevention, protecting our customers, and ensuring the effective operation of our activities.
3.4. Consent: Whenever necessary, we will request your explicit consent to process your personal data for specific situations, such as sending marketing communications, newsletters, or using images captured during activities for promotional purposes. Consent can be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.
4. Sharing and Disclosure of Personal Data
Peak2Peak is committed to protecting the confidentiality of your personal data and will only share it under the following circumstances:
4.1. With Third-Party Service Providers: We may share your personal data with third parties acting on our behalf, such as payment processors, transportation providers, or other partners involved in delivering the contracted services. These third parties are contractually obligated to use personal data solely for the purposes defined by Peak2Peak and to ensure its protection.
4.2. Compliance with Legal Obligations: We may be required to disclose your personal data to government, regulatory, or judicial authorities when necessary to comply with a legal obligation or to respond to court orders, inquiries, or official investigations.
4.3. International Data Transfers: In exceptional cases, your personal data may be transferred outside the European Economic Area (EEA). In such situations, we ensure that data transfers are carried out in accordance with applicable legislation and that the data is protected by appropriate security mechanisms, such as standard contractual clauses approved by the European Commission.
5. Data Security and Retention
Peak2Peak implements strict technical and organizational measures to protect our customers' personal data against unauthorized access, misuse, loss, alteration, or destruction, thus ensuring the integrity and confidentiality of the data:
5.1. Security Measures: We use encryption technologies to protect data during transmission and storage, and we restrict access to personal data to only those employees and partners who need to use it to perform their functions, ensuring the confidentiality and security of the data.
5.2. Retention Period: Personal data is retained only for the time necessary to fulfill the purposes for which it was collected or as required by law. After this period, the data will be securely deleted or anonymized, ensuring the continued protection of your privacy.
6. Rights of Data Subjects
As the data subject, you have several rights that you can exercise at any time to ensure that your data is processed fairly and transparently:
6.1. Right of Access: You have the right to request and obtain information about whether your personal data is being processed and, if so, to access that data and obtain a copy of it.
6.2. Right to Rectification: You can request the correction of any inaccurate or incomplete personal data we hold about you, thus ensuring that your data is always up to date.
6.3. Right to Erasure: Also known as the "right to be forgotten," this right allows you to request the deletion of your personal data, provided there is no legal obligation or legitimate reason for Peak2Peak to continue processing it.
6.4. Right to Restriction of Processing: In certain situations, such as when you contest the accuracy of the data or object to its processing, you can request that the processing of your data be restricted until the issue is resolved.
6.5. Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller if you so wish.
6.6. Right to Object: You can object to the processing of your personal data for specific purposes, such as direct marketing, or when processing is based on Peak2Peak's legitimate interests.
6.7. Right to Withdraw Consent: Whenever the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
7. Changes to the Privacy Policy
Peak2Peak reserves the right to update or modify this Privacy Policy whenever necessary to reflect changes in our data processing practices or to comply with new legal requirements. Any changes to this policy will be properly communicated and published on our website, so we recommend that you regularly check this page to stay informed about how we protect your personal data.
8. Applicable Law and Dispute Resolution
This Privacy Policy is governed by Portuguese law, and any disputes related to its interpretation or application will be submitted to the competent courts in the district where Peak2Peak's headquarters are located, in Madeira, with express waiver of any other jurisdiction. If you have any concerns or disputes regarding the processing of your personal data, we encourage you to contact us first so that we can try to resolve the matter amicably and effectively.
9. Contact Information
If you have any additional questions about this Privacy Policy or if you wish to exercise your rights, you can contact us via email at info@peak2peakadventures.com or through the phone number provided on our website. Peak2Peak is committed to promptly responding to all requests, ensuring the protection of your rights and the privacy of your personal data.
