Legal
Privacy Policy
Updated: 2026-06-06
We collect the minimum, use it only for what we say, and never sell it.
1. Who we are
The controller of your data is Animation4Ever, Lda · NIPC 515604810 · Largo Areosa nº 28, Pedroso, 4415-296 V.N. Gaia. It is part of the aDayinDouro group (with Place and Spot, Lda and Gigantes & Titãs, Lda).
For any question about your data, write to info@adayindouro.com.
2. What data we collect
We currently use no analytics cookies. If we add them, they will be requested with prior consent (see the Cookie Policy).
| Category | Data | Legal basis | Retention |
|---|---|---|---|
| Bookings | Name, email, phone, experience date, number of guests | Contract performance (Art. 6(1)(b)) | 10 years (fiscal obligation) |
| Payment | Processed by FareHarbor — we do NOT store card data | — | — |
| Newsletter | Email and language | Consent (Art. 6(1)(a)) | Until you unsubscribe |
| Contact | Name, email, message | Legitimate / pre-contractual interest (Art. 6(1)(f), (b)) | As long as needed to reply |
3. How we use your data
- Manage your booking and deliver the experience you booked.
- Answer your messages and enquiries.
- Send the newsletter, only if you subscribe (unsubscribe anytime).
- Meet legal and tax obligations.
4. Who we share with
We don't sell your data. We share only with the processors needed to run the service:
| Processor | Purpose | Location |
|---|---|---|
| FareHarbor | Booking and payment engine | USA |
| Cloudflare | Website hosting and delivery (CDN) | USA / global network |
| Brevo | Newsletter delivery | EU (France) |
| Microsoft 365 | EU |
5. Transfers outside the EU
FareHarbor and Cloudflare are US companies. Where applicable, data is processed under appropriate safeguards (EU-US Data Privacy Framework or Standard Contractual Clauses).
[LEGAL REVIEW NEEDED — confirm each processor's transfer mechanism (DPF vs SCCs) and that a signed DPA is in place.]
6. Your rights
Under the GDPR (Art. 15–22) you have the right to: access, rectify, erase, restrict, object to processing, data portability, and withdraw consent at any time.
- To exercise any of these: info@adayindouro.com.
- You also have the right to complain to the Portuguese DPA (CNPD, www.cnpd.pt).
7. How long we keep it
Booking data tied to invoices is kept for 10 years (Portuguese fiscal obligation). Marketing data is deleted when you unsubscribe. Everything else is deleted when no longer needed.
8. Cookies
Our use of cookies is described in our Cookie Policy.
9. Changes
We may update this policy. The date at the top shows the last revision.