Privacy Policy

1. IDENTIFICATION OF THE CONTROLLER AND THE DATA PROTECTION OFFICER

‍
• Company: Movimento Viagens, Viagens e Turismo Unipessoal Lda. (hereinafter “Movimento Viagens”)

• Headquarters: Av. da República, 90, 3º Esq., 1649-024 Lisboa

• NIPC: 508425409
• Telephone: +351 213 943 317

• Email: protecaodados@takeoffsurftravel.com

• Data Protection Officer: dpo@wamos.pt

2. INFORMATION AND CONSENT

The Law on the Protection of Personal Data (hereinafter “LPDP”) and the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, hereinafter “GDPR”) ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data.

In the legal terms “personal data” is considered any information, of any nature and regardless of the respective medium, including sound and image, relating to an identified or identifiable natural person, so the protection does not cover the data of legal persons.

By accepting this Privacy Policy, the user gives informed, express, free and unequivocal consent for the personal data provided through the site http://www.takeoffsurftravel.com to be included in a file under the responsibility of Movimento Viagens, whose treatment in accordance with the LPDP and the RGPD complies with the appropriate technical and organizational security measures.

The formalization of reservations through our website implies the introduction into the system, by the user, of personal identification data, such as aspects related to their personal preferences, special circumstances that affect them or others, data relating to credit and debit cards, which will be used to facilitate and allow the contracting and reservation of specific services that make up the customer's request, as well as to provide information related to Movimento Viagens products and services. In no case will information be requested on philosophical or political convictions, party or trade union affiliation, religious faith, private life and racial or ethnic origin as well as data relating to health and sexual life, including genetic data. In no case will we carry out any of the following activities with the personal data provided through this site:

• Assign to other people or other entities, without the prior consent of the data subject;
• Transfer outside the European Economic Area (EEA), without the prior consent of the data subject.

3. PURPOSES OF THE PROCESSING OF PERSONAL DATA

The personal data that we process through this page will only be used for the following purposes:
‍
(i) Inherent to the activity linked to a travel agency, wholesaler and retailer;
(ii) Provision to participants in the services requested by the User for the realization of the reservation/service contracted by the User;
(iii) Management, administration, provision, expansion and improvement of the services that the user decides to subscribe and register or use the adequacy of these services to the preferences and tastes of the user;
(iv) Verify credit cards and other types of cards used in the payment and indicated by the User himself;
(v) The study of the use of the services by users;
(vi) Verify, maintain and develop statistical systems and analyses;
(vii) Advertising, promotion and commercial prospecting activities, if duly authorized and consented by the User;
(viii) Send survey forms to which the user is not obliged to respond;
(ix) Send SMS messages for direct sales, advertising or related to the contracted service, if duly authorized and consented by the User.

You may consent to Movimento Viagens processing your Personal Data in order to determine your profile and offer you appropriate products and services. These services can be your own or those of third parties.

On the other hand, the user agrees that the information regarding the service contracted with Movimento Viagens can be accessed in order to be able to offer additional services to the contracted one.

The personal data collected through the “Newsletter” form or other forms related to the activity of the website are necessary and appropriate, and that the user may, voluntarily, make available, without the lack of response implying a decrease in the quality or quantity of the corresponding services. However, the lack of response to the data considered mandatory, will imply the impossibility of accessing the specific service for which the data were requested or the query requested by the data subject.

If you do not agree with the conditions mentioned above, Movimento Viagens. will not be able to contract with the user and consequently will not be able to accept your reservation.

4. TRANSFER OF PERSONAL DATA

Movimento Viagens may disclose the information of users to third parties only for the purpose of completing the requested reservation and for administrative reasons in accordance with the legislation in force for the realization of travel/service to certain countries.

Any data collected in this way on the website will be transmitted, in accordance with current data protection legislation, to the entities involved to contract the requested services to the extent absolutely necessary for the realization of the reservation/service intended and to comply with the legislation of the Destination Countries.

In addition, the user expressly consents that personal data may be transferred to:

‍
(i) National and international authorities competent in matters of tourism, the fight against terrorism or crimes that violate human rights;
(ii) Any legal entity subsidiary or owned by Movimento Viagens or the company that has provided the contracted service (hotels, water transport company, land, rail, air, rental, etc.), to use them for the purpose of a correct provision of each service requested by the user.

The user guarantees that the information provided is true, accurate, complete and up to date, and is responsible for any damage or loss, direct or indirect, that may be caused as a result of the breach of this obligation. In the event that the data provided belongs to a third party, the user guarantees that he has informed said third party of the aspects contained in this document and has obtained his authorization to provide his data to Movimento Viagens for the purposes indicated.

5. SECURITY MEASURES

Movimento Viagens declares that it has implemented and will continue to implement the security measures of a technical and organizational nature necessary to guarantee the security of the personal data provided to it in order to prevent its alteration, loss, treatment and/or unauthorized access, taking into account the current state of technology, the nature of the stored data and the risks involved. outposts.
‍

The personal data obtained through registration on the websites are incorporated into a computer application owned by Movimento Viagens.

Access to the information on file by Movimento Viagens employees is only possible with the insertion of access passwords and the registration is documented. The change to existing data in the files is, however, possible by keeping a record of the date and the user code responsible for the change.

Personal data are treated with the level of protection legally required to guarantee their security and prevent their alteration, loss, treatment or unauthorized access, taking into account the state of technology, the user being aware and accepting that the security measures on the Internet are not impregnable.

Movimento Viagens is equipped with technical infrastructures for peripheral control, namely network firewalls, private circuits and VPNs that respect security requirements. The computer servers are hosted by a data center operator which performs a digital information protection service for the hosted servers. The service includes file backup (backup), preservation according to the defined policy and restore at the request of Movimento Viagens.

For security in user communications, Movimento Viagens uses SSL - Secure Socket Layer technology that guarantees security in all transactions made with credit card. This technology encodes credit card data and transfers it, via the internet, into individual modules that will only be collected later. Credit card details are used only to proceed with the payment and, after the transaction is made, are deleted from our records.

For security reasons applicable to certain countries, it is mandatory to place information on flight reservations concerning data such as name, passport number, gender, age, nationality. The information contained in the reservation may, in accordance with the applicable legislation, be consulted by the customs authorities of the countries of origin or destination.

Movimento Viagens by accessing any personal data, undertakes to:

‍
• Store them by means of security measures, legally required, of a technical and organizational nature, which guarantee their security, thus avoiding alteration, loss, treatment or unauthorized access, in accordance with the state of technology at all times, the nature of the data and the possible risks to which they are exposed;
• Use the data exclusively for the previously defined purposes;
• Ensure that the data is processed only by employees whose intervention is necessary for the provision of the service and they are obliged to the duty of secrecy and confidentiality. Where it is possible for the information to be disclosed to third parties, they shall be obliged to maintain due confidentiality in accordance with this document.

6. COMMERCIAL AND PROMOTIONAL COMMUNICATIONS

One of the purposes for which we process personal data provided by the user is to send electronic communications with information relating to commercial and promotional communications.

Whenever we make such a communication, it will be directed exclusively to the user who has previously and expressly authorized it.

If the user wishes to stop receiving commercial or promotional communications from Movimento Viagens, he may request the opposition of the service by sending an e-mail to the following address: protecaodados@takeoffsurftravel.com or through the link enabled for this purpose in the communications themselves.

7. EXERCISE OF THE RIGHTS OF THE DATA SUBJECT

In accordance with the provisions of the LDPD and the RGPD, the user may exercise their rights of access, rectification, deletion, limitation, opposition and portability at all times, by written request by any of the following means, always including, always, a certified copy of a document proving the identity of the data subject and specifying the right or rights you wish to exercise:
‍
• Post Office: Av. da República, 90, 3rd Left, 1649-024 Lisbon
• Email: protecaodados@takeoffsurftravel.com

8. CONTROL AUTHORITY

In legal terms, the data subject has the right to lodge a complaint regarding the protection of personal data to the competent control authority, the National Data Protection Commission (CNPD): www.cnpd.pt.

‍