Privacy Policy

Privacy Policy
Last updated: 29 May 2026

This Privacy Policy sets out the terms under which Joana Maria Pereira Monteiro, Unipessoal Lda., legal entity with tax number 513609040, with registered office at Rua de Paredes, 56, 4575-039 Alpendorada e Matos, owner of the Douro Extreme brand and business operation, collects and processes personal data through the website https://douroextreme.pt/. The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation or GDPR) and any other applicable national data protection legislation.

Use of the website, submission of contact requests, and making reservations imply knowledge and acceptance of the terms of this Privacy Policy, without prejudice to the rights legally recognized to data subjects.

1. Identification of the controller

The controller of personal data is:

Joana Maria Pereira Monteiro, Unipessoal Lda.
Tax number: 513609040
Address: Rua de Paredes, 56, 4575-039 Alpendorada e Matos
Telephone: (+351) 913 264 752
Email: info@douroextreme.pt

For any matter related to the processing of personal data or the exercise of data subject rights, contact should be made through the means indicated above.

2. Categories of personal data processed

In the context of using the website and providing services marketed under the Douro Extreme brand, the following personal data may be processed, namely:

• Identification data, including name.

• Contact data, including email address and telephone number.

• Data necessary for the formalization and management of reservations.

• Billing data and other elements necessary for compliance with legal, tax, and accounting obligations, where applicable.

• Technical browsing data, including IP address, cookie identifiers, device type, operating system, browser type, pages visited, visit duration, and interaction with the website, within the scope of the use of analytical and advertising tools.

3. Purposes of processing

Personal data collected through the website are processed for specific, explicit, and legitimate purposes, namely:

• Management of information and contact requests.

• Processing, confirmation, and management of reservations.

• Execution of the commercial transaction associated with the reservation.

• Provision of the contracted services.

• Issuance of invoices and compliance with legal, tax, accounting, and administrative obligations.

• Management of communications with customers before, during, and after the provision of the service, when necessary for the contractual relationship.

• Monitoring website performance, producing aggregated usage statistics, and improving browsing experience through Google Analytics.

• Assessing the effectiveness of advertising campaigns, measuring conversions, and developing remarketing and segmentation actions through Facebook Pixel, where permitted under applicable law.

Data entered in the context of a reservation are used exclusively for managing the commercial transaction, performing the requested service, and complying with the associated legal obligations, and are not used for purposes incompatible with those for which they were collected.

4. Legal basis for processing

Personal data are processed on the basis of the lawful grounds set out in the GDPR, depending on the specific purpose involved, namely:

• Performance of a contract or steps prior to entering into a contract, in relation to reservation management and service provision.

• Compliance with legal obligations to which the controller is subject, particularly in tax, accounting, and administrative matters.

• Legitimate interest of the controller, notably to ensure website security, prevent abusive use, improve service quality, and assess digital performance, provided that the rights, freedoms, and interests of the data subjects do not override such interest.

• Consent of the data subject, whenever legally required, particularly for the installation and use of non-essential cookies, including analytical and advertising cookies.

5. Google Analytics

The website uses Google Analytics, a service provided by Google, for statistical analysis and measurement of website usage. This tool collects information about user browsing activity, such as pages visited, visit duration, traffic source, interactions carried out, and technical characteristics of the device and browser used.

The information collected through Google Analytics is used to understand overall user behavior, improve content, optimize website operation, and support digital management decisions. Where legally required, the use of this tool depends on the user’s prior, free, specific, informed, and unambiguous consent, obtained through the cookie management mechanism adopted on the website.

6. Facebook Pixel

The website uses Facebook Pixel, a technology associated with Meta Platforms, for the purposes of measuring advertising results, conversion analysis, audience creation, and possible remarketing. This technology may collect or associate information relating to user interactions with the website, namely page visits, actions performed, and response to advertising campaigns.

Where required by applicable law, the activation of Facebook Pixel and the resulting data processing will depend on the user’s prior consent, obtained through the cookie management platform. Refusal or withdrawal of consent does not prevent general use of the website, but may limit the personalization of the advertising experience.

7. Cookies and similar technologies

The website uses cookies and similar technologies to ensure its operation, remember preferences, collect statistical information, and measure the performance of digital marketing campaigns. Strictly necessary cookies may be used without consent when essential to website functioning, whereas analytical and advertising cookies will depend, where applicable, on user consent.

The user may, at any time, configure their cookie preferences through the mechanism available on the website or through the settings of their browser. Disabling certain cookies may affect the proper functioning of some website features.

8. Disclosure of data to third parties

Personal data may be disclosed to third-party entities whenever necessary for the purposes identified above, namely:

• Website hosting, maintenance, development, and technical support providers.

• Billing, accounting, or administrative management service providers, where applicable.

• Digital tool and technology platform providers, including Google and Meta, in connection with the use of Google Analytics and Facebook Pixel.

• Public entities, administrative, judicial, police, or regulatory authorities, whenever disclosure is legally required.

In any event, data disclosure will be limited to what is strictly necessary and, where required, appropriate measures will be adopted to ensure the confidentiality and protection of personal data.

9. International data transfers

The use of services provided by entities such as Google and Meta may involve the transfer of personal data to third countries or access to data from jurisdictions outside the European Economic Area, under the terms defined by those platforms and their respective contractual conditions.

Where international data transfers occur, they will be governed by the legally appropriate mechanisms provided for under applicable law, namely European Commission adequacy decisions, standard contractual clauses, or other legally admissible instruments.

10. Data retention period

Personal data will be retained only for the period necessary to achieve the purposes that justified their collection and processing, without prejudice to legally mandated retention periods.

In particular:

• Reservation data will be retained for the period necessary for commercial transaction management, service provision, customer support, and the possible exercise or defense of rights in administrative, extrajudicial, or judicial proceedings.

• Billing data and other accounting records will be retained for the legally required periods.

• Data processed on the basis of consent will be retained until such consent is withdrawn, without prejudice to the lawfulness of the processing carried out up to that moment.

11. Rights of data subjects

Under applicable law, the data subject has the right to:

• Request access to their personal data.

• Request rectification of inaccurate or incomplete data.

• Request erasure of data, in legally permitted cases.

• Obtain restriction of processing, in legally permissible situations.

• Object to processing, where applicable.

• Request data portability, where technically feasible and legally required.

• Withdraw consent previously given, without affecting the lawfulness of processing carried out on the basis of that consent before its withdrawal.

• Lodge a complaint with the competent supervisory authority, in Portugal the National Data Protection Commission (CNPD).

The exercise of rights may be requested by written communication to the postal or electronic address indicated above, and proof of identity may be requested whenever necessary to ensure that personal data are only disclosed to the respective data subject.

12. Security of personal data

Appropriate technical and organizational measures will be adopted to protect personal data against destruction, loss, alteration, unauthorized disclosure or access, as well as against any other form of unlawful or improper processing. Such measures will be reviewed and updated in light of technological developments, the nature of the data processed, and the risks associated with processing.

Notwithstanding the security measures implemented, no data transmission over the internet or electronic storage system can be guaranteed to be absolutely secure, and therefore total and absolute security cannot be assured in all circumstances.

13. Links to third-party websites

The website may contain hyperlinks to third-party websites. This Privacy Policy applies exclusively to the website douroextreme.pt, and the controller is not responsible for the privacy practices, content, or policies of third parties. Users are advised to read the respective privacy policies before providing any personal data.

14. Changes to the Privacy Policy

This Privacy Policy may be amended or updated at any time, depending on legal, regulatory, technological, or operational changes. Any relevant changes will be published on the website and will take effect from the date of publication.

15. Contact details

For any matter related to this Privacy Policy or to the processing of personal data, any of the following contact details may be used:

Joana Maria Pereira Monteiro, Unipessoal Lda.
Rua de Paredes, 56
4575-039 Alpendorada e Matos
Telephone: (+351) 913 264 752
Email: info@douroextreme.pt

If you want, I can also format this into a more website-ready version with cleaner HTML-style headings and shorter paragraphs.