Privacy Policy

Introduction

AV Tourism LDA ("we", "us", "our", or "AltiVista") is committed to protecting your privacy and ensuring you have a positive experience on our website. We comply with the General Data Protection Regulation (GDPR), applicable Portuguese data protection laws, and international privacy standards. This Privacy Policy explains how we collect, use, store, and protect your personal data.

What Personal Data We Collect

We collect personal data only when necessary to provide our services. This includes:

  • Email address — provided when you contact us or make a payment for premium content access
  • Payment information — transaction-related data such as payment method, amount, and status (handled securely by Stripe)
  • Usage data — how you interact with our website (collected via Google Analytics)
  • Location data — only when you explicitly enable GPS on VistaWalks tours (stored locally on your device, not sent to us)

Important: We do not collect payment card details directly. Your card information is encrypted and processed securely by Stripe.

Payment Processing with Stripe

All payments for premium VistaWalks content are processed securely through Stripe. We do not store, have access to, or retain your full payment card details. Stripe may process your payment data according to its own privacy policy and terms of service. By making a payment, you agree to Stripe's data processing practices.

Card Security: Your card details are encrypted and never shared with us. We only receive transaction confirmation and payment status from Stripe.

Purpose of Data Processing

Your personal data is processed only for these purposes:

  • Payment processing and order fulfillment
  • Granting access to premium content and features
  • Responding to your inquiries and providing customer support
  • Understanding website usage and improving our services (via aggregated analytics)
  • Complying with legal obligations

We do not use your data for unsolicited marketing, profiling, automated decision-making, or selling to third parties.

Legal Basis for Processing

Contract Performance (GDPR Art. 6(1)(b)): We process data necessary to fulfill your purchase of premium content.

Consent (GDPR Art. 6(1)(a)): Analytics and non-essential cookies are processed only with your explicit consent, which you can withdraw at any time.

Legal Obligation (GDPR Art. 6(1)(c)): We may process data to comply with tax, payment, and data protection regulations.

Data Storage & Retention

We store only the minimal data necessary to operate our services:

  • Payment data is retained by Stripe according to their retention policy and applicable law
  • Email addresses are retained for account access and support purposes
  • Usage analytics are automatically deleted or anonymized after 14 months (Google Analytics default)
  • Location data from GPS walks is stored only on your device and is never transmitted to our servers

Upon request, we will delete your personal data within 30 days, except where legally required to retain it.

Cookies & Essential Technologies

Essential Cookies: Our website uses essential cookies for authentication, language preferences, and day-pass access control. These are necessary for the site to function and are not subject to consent.

Analytics Cookies: We use Google Analytics cookies to understand how visitors interact with our website (page visits, click patterns, device types, etc.). These cookies are only set after you explicitly consent to analytics.

You can manage cookie preferences through your browser settings or by modifying your consent choice at any time.

Google Analytics

Our website uses Google Analytics to collect aggregated, non-identifying information about visitor behavior. This includes:

  • Page views and user flow
  • Device types and browsers
  • Geographic location (at country/region level)
  • Session duration

Google Analytics is configured with IP anonymization enabled. Data is not linked to your individual identity and is used solely to improve our website.

Your Consent Matters: Google Analytics only loads after you accept analytics cookies. You can refuse or withdraw consent at any time through the cookie banner or your browser settings.

Data Sharing

We do not sell, rent, or trade your personal data. Data may only be shared with:

  • Stripe — for secure payment processing (covered by their privacy policy)
  • Google Analytics — for aggregated website analytics (covered by Google's privacy policy)
  • Legal authorities — only when required by law (e.g., court orders, tax investigations)

We do not use advertising networks, affiliate trackers, or third-party profiling tools.

Your Data Rights (GDPR)

Under GDPR and Portuguese law, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data (right to be forgotten)
  • Restriction: Limit how your data is processed
  • Portability: Receive your data in a portable format
  • Withdraw Consent: Decline analytics or marketing cookies at any time

To exercise any of these rights, contact us using the details below.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

Email: support@altivista.pt

WhatsApp: +351 91 050 0466

Company: AV Tourism LDA (Portugal)

We aim to respond to all data requests within 30 days.

Last updated: March 2026 | This policy may be updated periodically to reflect changes in our practices or applicable law.