Data Processing Information Sheet

Controller:

Curiosidade Plena Unipessoal Lda. – NIPC 517876841

Registered office: Rua Matias Fernandes de Oliva, nº 5, 2º C, Montenegro, 8005-264 Faro, Portugal

General contact email: support@holistictravelplan.pt

Data Protection Officer (DPO):

Email: privacy@holistictravelplan.pt

  1. Categories of Data Subjects

This information sheet applies to:

  • Clients / Users: individuals who use the Platform to search, book, or interact with services.
  • Service Providers (SP): professionals or companies that advertise and sell services on the Platform.
  • Visitors: any person who accesses the website without creating an account or making bookings.
  1. Types of Personal Data Processed
  • Identification and contact: name, email, phone number, country, address.
  • Account data: username, password (encrypted), preferences.
  • Booking data (Clients): booking history, dates, type of service, amount.
  • Payment data: IBAN or billing details (via external processors).
  • Professional data (Service Providers): company, Tax Identification Number (NIF), IBAN, certifications, legal and verification documentation.
  • Technical data: IP address, approximate location, browser, device.
  • Cookies and browsing: pages visited, time on page, clicks.
  1. Purposes of Processing
  • Clients:
  • Account creation and management
  • Processing of bookings, payments, and communications with Service Providers
  • Sending newsletters and promotional campaigns (with consent)
  • Personalisation of experience (cookies and preferences)
  • Compliance with legal obligations (tax, consumer protection)
  • Service Providers:
  • Creation and management of provider account
  • Verification of legal requirements (RNAL, insurance, licences, etc.)
  • Management of contracts, invoicing, and payments
  • Communication with Clients and the HTP team
  • Audit, security, and fraud prevention
  • Visitors:
  • Cookies management and browsing analytics
  • Content personalisation (if consented)
  1. Legal Basis
  • Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR)
  • Compliance with a legal obligation (Art. 6(1)(c) GDPR)
  • Legitimate interest (Art. 6(1)(f) GDPR)
  • Explicit consent (Art. 6(1)(a) GDPR)
  1. Data Retention
  • For the duration of the contractual relationship and mandatory legal periods (e.g., 5 years for tax purposes).
  • Browsing data: up to 13 months.
  • Account data: erased at the request of the data subject, unless there is a legal obligation to retain.
  • Consent records: until withdrawal.
  1. Data Sharing with Third Parties
  • Technology service providers (hosting, payments, email marketing).
  • Partner providers (for confirmed bookings).
  • Public authorities, when legally required.
  1. International Transfers

If transfers outside the EEA occur, these will only be carried out with:

  • A European Commission adequacy decision; or
  • Standard Contractual Clauses; or
  • The data subject’s explicit consent.
  1. Data Subject Rights

Clients, Service Providers, and Visitors may exercise the following rights:

  • Access, rectification, and erasure
  • Restriction of processing or objection
  • Data portability
  • Withdrawal of consent (when applicable)
  • Complaint to the CNPD – www.cnpd.pt
  1. Security and Confidentiality

HTP applies appropriate technical and organisational measures (GDPR, Law 58/2019, ISO/IEC 27001, NIS2) to ensure the confidentiality, integrity, and availability of information.

  1. Cookies

The website uses:

  • Essential cookies (platform operation)
  • Analytics and personalisation cookies (with consent)
  • Third-party cookies (Google Analytics, social networks, etc.)

Users may configure their preferences at any time through the Cookie Policy available on the website.

  1. Contacts
  1. Place of Publication, updates and version history

This information sheet is available in the Privacy Policy area of the Holistic Travel Plan website.

Version History and Dates

  • Version number: 00000001
  • Creation Date: 02.10.2025
  • Effective Date: 02.10.2025
  • Last Update: 02.10.2025
  • Next Scheduled Review: 02.10.2026
en_USEnglish
pt_PTPortuguese en_USEnglish