1. Introduction
Curva ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services across Portugal, in compliance with the General Data Protection Regulation (GDPR) and Portuguese data protection law (Lei n.º 58/2019).
2. Data Controller
The data controller for the purposes of this policy is:
- Company: Curva, Lda.
- Location: Cabeço Mouro EN 120 CP 5003X, 8670-321 Odeceixe, Portugal
- Email: contact@curvanomada.com
3. Information We Collect
We may collect the following personal data when you make a booking, submit a contact form, or use our services:
- Identity data: Full name, title
- Contact data: Email address, phone number, hotel/address
- Booking data: Travel dates, destinations, number of passengers, flight details, special requests (child seats, dietary needs)
- Payment data: Card details (processed securely via third-party payment providers — we do not store card numbers)
- Technical data: IP address, browser type, device information, and cookies when you visit our website
4. How We Use Your Data
We use your personal data for the following purposes:
- To confirm and manage your bookings for tours, transfers, fleet services, and events
- To communicate with you about your reservation (confirmations, changes, follow-ups)
- To process payments and issue invoices
- To track flights in real-time for airport transfer services
- To improve our website and services based on usage patterns
- To comply with Portuguese legal and tax obligations
5. Legal Basis for Processing
We process your data under the following legal bases:
- Contractual necessity: To fulfil our service agreement with you (bookings, transfers, tours)
- Legitimate interest: To improve our services and communicate relevant offers
- Legal obligation: To meet tax, accounting, and regulatory requirements under Portuguese law
- Consent: For marketing communications — you can withdraw consent at any time
6. Data Sharing
We do not sell your personal data. We may share your data with:
- Our drivers and guides: Name, pickup location, and relevant trip details necessary to provide the service
- Payment processors: Secure processing of card payments (Stripe, PayPal)
- Hotel concierge teams: Only when coordinating hotel/resort transfers at your request
- Portuguese authorities: If required by law or regulation
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purpose for which it was collected:
- Booking data: 5 years (Portuguese tax/accounting requirements)
- Contact form submissions: 12 months
- Marketing consent records: Until you withdraw consent
- Technical/analytics data: 26 months
8. Your Rights
Under the GDPR, you have the right to:
- Access your personal data — request a copy of what we hold
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten") in certain circumstances
- Restrict or object to processing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time for marketing communications
To exercise any of these rights, email contact@curvanomada.com. We will respond within 30 days.
9. Cookies
Our website uses cookies to improve your browsing experience. These include:
- Essential cookies: Required for the website to function (session, language preference)
- Analytics cookies: Help us understand how visitors use our site (Google Analytics)
You can manage cookie preferences through your browser settings.
10. Security
We implement appropriate technical and organizational measures to protect your data, including encryption (SSL/TLS), secure server infrastructure, and access controls. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
12. Contact & Complaints
For privacy-related inquiries:
You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.