1. Personal Information
The personal data correspond to any information of any nature and regardless of its support, relating to an identified or identifiable natural person.
We clarify that a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, identifiers by electronic means or one or more elements specific physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Through this website and depending on the purpose as stated below, the following personal data may be collected: (i) name and contact details (telephone and email), (v) company represented and (vi) information necessary and relevant to the evaluation and elaboration of travel package proposals.
2. Responsible for the Processing of Personal Data
The entity responsible for collecting and processing Personal Data for the purposes set out below is Galaxipotential lda, whose registered office is at Rua Engenheiro Ferreira Dias 161, 4100-247 Porto, Portugal.
3. Purpose of the Processing of Personal Data
The collection and treatment of Personal Data on the website is intended for (i) sending, upon request by the user, service proposals and / or quotes (as well as information regarding Galaxipotential lda products and / or services “Purposes”), so completing the form corresponding to each of the Purposes corresponds to the express and prior consent to the processing of the Personal Data provided.
In the event that the user consents expressly and in advance in the treatment of their Personal Data (which consent may at any time be withdrawn – see number 5 below), Galaxipotential undertakes to process Personal Data in the measure and time necessary for the pursuit of the Purposes.
Without prejudice to other forms of contact with Galaxipotential, failure to provide Personal Data by you prevents Galaxipotential from considering it for the purpose of sending proposals and / or quotes or other information, depending on the applicable situation.
4. Preservation of Personal Data
The period of time during which Personal Data is stored and stored varies according to the Purposes.
Personal Data processed for the purpose of sending proposals for services and insurance and / or quotes or information related to Galaxipotential products and / or services will be stored for a period of one (1 year) after the last contact with the Data owner Without prejudice to the fact that longer periods may be applied when the situation warrants (and proportionate to such situation), in particular to safeguard Galaxipotentia’s rights.
5. Right of access, rectification, deletion, limitation of treatment and portability right of Personal Data
The user is guaranteed, at any time, the right of access to his Personal Data, as well as the respective rectification, erasure, portability, limitation and / or opposition to the treatment – in this sense, he can exercise any of these rights by directing, in writing to Galaxipotential, using the address of the registered office or via the following electronic mail: firstname.lastname@example.org
Notwithstanding the foregoing, the user shall always have the right to submit complaints to the competent authority for the purpose.
6. Security in the Treatment of Personal Data
Personal Data will be processed and stored in a computerized and paper format.
Galaxipotential is committed to ensuring the security and protection of Personal Data that it sends through the website and has adopted the appropriate technical and organizational measures, namely: (i) password protection, (ii) use of digital certificates, ( iii) restrictions of physical entry to the places where the servers that store Personal Data meet; (iv) firewalls, (v) secure communication via https protocol. Galaxipotential Ldda informs that these security measures are reviewed and updated according to the needs and the state of art in these matters.
If, for any reason, there is a breach of security that causes, accidentally or unlawfully, the unauthorized destruction, loss, alteration, disclosure or access to Personal Data, Galaxipotential shall promptly and without delay , where possible, within 72 hours of becoming aware of it and in accordance with the applicable legislation, to the competent authorities. In the same way, Galaxipotential communicates the violation of the Personal Data to the respective holder of the Personal Data, in accordance with the applicable legislation.
Notwithstanding the security measures adopted by Galaxipotential, we caution users that they should take additional security measures in particular, ensure an active firewall, and updated anti-spyware and anti-spyware.
7. Communication of Personal Data to Third Parties
Galaxipotential, in the scope of its activity, may resort to third parties for the provision of certain services. Such third parties may be located inside or outside the European Union. Sometimes the provision of these services implies access by these entities to users’ personal data.
When this happens, Galaxipotential takes the appropriate measures, in order to ensure that the entities that have access to Personal Data, are reputed and offer high guarantees at this level, which will be duly enshrined and cautioned in writing to conclude, between Galaxipotential and the third party (ies).
Accordingly, any entity sub-contracted by Galaxipotential will treat the Personal Data of users in the name and on behalf of Galaxipotential in the obligation to take the necessary technical and organizational measures in order to protect Personal Data against accidental, unlawful destruction, accidental loss, alteration, dissemination or unauthorized access and against any other form of illicit treatment.
In any case, Galaxipotential remains responsible for the processing of Personal Data.
When necessary in connection with the contracting of third parties by Galaxipotential, Personal Data may be transferred outside the European Union, under the terms and conditions permitted by applicable law.
8. Access to third party websites