Privacy Policy

Controller:

Curiosidade Plena Unipessoal Lda. – NIPC 517876841

Registered office: Rua Matias Fernandes de Oliva, nº 5, 2º C, Montenegro, 8005-264 Faro, Portugal

General contact email: support@holistictravelplan.pt

Data Protection Officer (DPO):

Email: privacy@holistictravelplan.pt

1. Categories of Data Subjects

This information sheet applies to:

• Clients / Users: individuals who use the Platform to search, book, or interact with services.
• Service Providers (SP): professionals or companies that advertise and sell services on the Platform.
• Visitors: any person who accesses the website without creating an account or making bookings.

2. Types of Personal Data Processed

• Identification and contact: name, email, phone number, country, address.
• Account data: username, password (encrypted), preferences.
• Booking data (Clients): booking history, dates, type of service, amount.
• Payment data: IBAN or billing details (via external processors).
• Professional data (Service Providers): company, Tax Identification Number (NIF), IBAN, certifications, legal and verification documentation.
• Technical data: IP address, approximate location, browser, device.
• Cookies and browsing: pages visited, time on page, clicks.

3. Purposes of Processing

• Clients:
• Account creation and management
• Processing of bookings, payments, and communications with Service Providers
• Sending newsletters and promotional campaigns (with consent)
• Personalisation of experience (cookies and preferences)
• Compliance with legal obligations (tax, consumer protection)
• Service Providers:
• Creation and management of provider account
• Verification of legal requirements (RNAL, insurance, licences, etc.)
• Management of contracts, invoicing, and payments
• Communication with Clients and the HTP team
• Audit, security, and fraud prevention
• Visitors:
• Cookies management and browsing analytics
• Content personalisation (if consented)

4. Legal Basis

• Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR)
• Compliance with a legal obligation (Art. 6(1)(c) GDPR)
• Legitimate interest (Art. 6(1)(f) GDPR)
• Explicit consent (Art. 6(1)(a) GDPR)

5. Data Retention

• For the duration of the contractual relationship and mandatory legal periods (e.g., 5 years for tax purposes).
• Browsing data: up to 13 months.
• Account data: erased at the request of the data subject, unless there is a legal obligation to retain.
• Consent records: until withdrawal.

6. Data Sharing with Third Parties

• Technology service providers (hosting, payments, email marketing).
• Partner providers (for confirmed bookings).
• Public authorities, when legally required.

7. International Transfers

If transfers outside the EEA occur, these will only be carried out with:

• A European Commission adequacy decision; or
• Standard Contractual Clauses; or
• The data subject’s explicit consent.

8. Data Subject Rights

Clients, Service Providers, and Visitors may exercise the following rights:

• Access, rectification, and erasure
• Restriction of processing or objection
• Data portability
• Withdrawal of consent (when applicable)
• Complaint to the CNPD – www.cnpd.pt

9. Security and Confidentiality

HTP applies appropriate technical and organisational measures (GDPR, Law 58/2019, ISO/IEC 27001, NIS2) to ensure the confidentiality, integrity, and availability of information.

10. Cookies

The website uses:

• Essential cookies (platform operation)
• Analytics and personalisation cookies (with consent)
• Third-party cookies (Google Analytics, social networks, etc.)

Users may configure their preferences at any time through the Cookie Policy available on the website.

11. Contacts

• General enquiries: support@holistictravelplan.pt
• Privacy enquiries or to exercise rights: privacy@holistictravelplan.pt

2. Place of Publication, updates and version history

This information sheet is available in the Privacy Policy area of the Holistic Travel Plan website.

Version History and Dates

• Version number: 00000001
• Creation Date: 02.10.2025
• Effective Date: 02.10.2025
• Last Update: 02.10.2025
• Next Scheduled Review: 02.10.2026