1. Introduction and Scope
Pickorabuzzpocket Portugal Media Lda. ("Pickorabuzzpocket", "we", "our", or "us"), registered under Portuguese entity registration PT514982701 with offices at Rua do Alecrim 72, Chiado, 1200-018 Lisboa, Portugal, is committed to safeguarding the privacy of visitors to our website (Pickorabuzzpocket.com). This Privacy Policy details our procedures regarding the collection, processing, protection, and transfer of personal data in strict compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 - "GDPR"), Portuguese Law No. 58/2019, and relevant consumer privacy regulations such as the California Consumer Privacy Act (CCPA/CPRA).
2. Data Controller & Data Protection Officer (DPO)
Pickorabuzzpocket Portugal Media Lda. operates as the primary Data Controller. If you have any inquiries regarding data protection practices or wish to exercise statutory data rights, contact our Data Protection Officer at:
Data Protection Officer
Pickorabuzzpocket Portugal Media Lda.
Rua do Alecrim 72, Chiado, 1200-018 Lisboa, Portugal
Direct Email: [email protected]
3. Categories of Information We Collect
We process information under three primary operational classifications:
- Information You Voluntarily Provide: When completing itinerary inquiry forms or contact queries, we collect full names, email addresses, phone coordinates, destination travel preferences, and specific travel inquiries.
- Automatically Collected Technical Data: When navigating Pickorabuzzpocket.com, server logs record IP addresses (anonymized at subnet level where appropriate), browser user-agent tokens, referring URLs, access timestamps, and geographic location at country or regional level.
- Cookies and Behavioral Tracking: As detailed in our Cookie Policy, we utilize session-based and persistent cookies to record interface preferences (such as interactive trip engine chip states) and statistical navigation metrics.
4. Legal Grounds for Data Processing
In adherence to Article 6 of the GDPR, Pickorabuzzpocket processes personal information under the following legal frameworks:
- Consent (Art. 6(1)(a)): For non-essential analytical cookies, promotional communications, and custom itinerary follow-ups requested by users.
- Contractual Necessity (Art. 6(1)(b)): To deliver travel consulting, custom itinerary generation, or requested quote responses.
- Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent fraud, troubleshoot technical server operations, and optimize editorial travel content performance.
- Legal Obligation (Art. 6(1)(c)): To preserve tax and statutory billing records in accordance with Portuguese corporate tax governance.
5. Third-Party Service Processors & Cross-Border Transfers
We partner exclusively with verified data sub-processors that guarantee high standards of security and EU adequacy compliance (including standard contractual clauses where cloud operations reside outside the European Economic Area):
- Cloud Infrastructure: High-performance server hosting provided within ISO 27001-certified European data centers.
- Analytics Providers: Privacy-focused aggregate metrics systems operating with IP truncation to prevent individual traveler profiling.
- Communication Systems: Secure SMTP transactional email relays for transmitting itinerary requests and user responses.
6. User Statutory Rights (GDPR / CCPA)
Under applicable European and international privacy statutes, users hold enforceable rights:
- Right to Access (Art. 15 GDPR): Request a complete export of personal data records maintained by our systems.
- Right to Rectification (Art. 16 GDPR): Request immediate correction of inaccurate or incomplete personal contact details.
- Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Request permanent deletion of personal records where statutory retention obligations do not apply.
- Right to Restriction of Processing (Art. 18 GDPR): Limit how your information is utilized during active dispute reviews.
- Right to Data Portability (Art. 20 GDPR): Obtain structured, machine-readable exports of provided contact data.
- Right to Object (Art. 21 GDPR): Opt-out at any time from direct communications or processing grounded in legitimate interest.
To exercise any of these protections, submit a formal signed request to [email protected]. We acknowledge and process verified requests within thirty (30) calendar days free of charge.
7. Data Retention Guidelines
Contact and travel inquiry data is preserved for a maximum of twenty-four (24) months from the final point of active communication, after which records are purged or permanently aggregated for historical demographic trend analysis. Web server access logs are purged every ninety (90) days.
8. Supervisory Authority Recourse
If you reside within the European Union and believe our processing infringes upon statutory privacy rights, you retain the legal right to lodge a formal complaint with the Portuguese National Data Protection Commission:
Comissão Nacional de Protecção de Dados (CNPD)
Av. D. Carlos I, 134 - 1.º, 1200-651 Lisboa, Portugal
Website: www.cnpd.pt