SPR Tours is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit our website or use our services, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Portuguese data protection laws.

1. Data Controller

C. Nery Unipessoal Lda

Rua Arco da Graça, nº 28, 6º F

1150-051 Lisbon – Portugal

Email: info@sprtours.pt

Phone: (+351) 925 340 094

C. Nery Unipessoal Lda is the entity responsible for processing your personal data.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Data provided directly by you

1. Full name
2. Email address
3. Phone number
4. Nationality
5. Age or age range
6. Information required for bookings and invoicing
7. Special requests, dietary restrictions, or information relevant to the provision of the service
8. Information related to your booking or tour experience

b) Automatically collected data

When you visit our website, we may automatically collect certain technical information, including:

1. IP address
2. Device and browser type
3. Pages visited and duration of visit
4. Approximate location data
5. Cookies and similar technologies

c) Payment information

Payments are processed through secure third-party providers. SPR Tours does not store complete credit or debit card details.

3. Purpose of Data Processing

Your personal data may be used for the following purposes:

1. Managing and confirming bookings
2. Providing the contracted services
3. Communicating with you before, during, and after the experience
4. Customer support
5. Compliance with legal, accounting, and tax obligations
6. Improving our services and website
7. Sending marketing communications, where prior consent has been obtained

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

1. Performance of a contract: to provide the booked services
2. Legal obligation: including compliance with tax and accounting obligations
3. Legitimate interest: improving services, website security, and business-related communications
4. Consent: for newsletters, promotional campaigns, or optional data processing

5. Sharing of Personal Data

SPR Tours does not sell or rent your personal data to third parties.

Your data may only be shared when necessary with:

1. Tour guides, drivers, and operational partners
2. Payment service providers
3. Technology, hosting, and website maintenance providers
4. Public authorities or regulatory entities when legally required

All third parties are subject to confidentiality and data protection obligations in accordance with the GDPR.

6. International Data Transfers

Whenever your personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are implemented, including Standard Contractual Clauses approved by the European Commission or other legally recognized mechanisms.

7. Data Retention

Your personal data will only be retained for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal, tax, and regulatory obligations.

As a general rule, data may be retained for up to 5 years after the last commercial interaction, unless a longer retention period is required by law.

8. Your Rights

Under applicable legislation, you have the following rights:

1. Right of access to your personal data
2. Right to rectification of inaccurate or incomplete data
3. Right to erasure (“right to be forgotten”)
4. Right to restriction of processing
5. Right to data portability
6. Right to object to processing
7. Right to withdraw consent at any time
8. Right to lodge a complaint with the Portuguese Data Protection Authority (CNPD)

To exercise any of these rights, please contact us at: info@sprtours.pt

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

1. Improve the browsing experience
2. Analyze website usage patterns
3. Measure performance and marketing campaigns
4. Personalize content and functionalities

Users may manage or disable cookies through their browser settings. Some website functionalities may be limited if cookies are disabled.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, or destruction.

These measures include:

1. Secure servers
2. Encrypted connections (SSL)
3. Restricted access controls
4. Internal security and confidentiality procedures

11. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from minors without authorization from their legal guardians.

12. Changes to This Privacy Policy

SPR Tours may update this Privacy Policy from time to time. Any changes will be published on this page together with the updated effective date.

We recommend reviewing this policy regularly to stay informed about how we protect your personal data.

Last updated: May 2026