Privacy Policy
Last updated: 22 August 2026. This page tells you what happens to your personal data when you use allportugalmedia.com, why we need it, how long we keep it, and what you can ask us to do about it. It takes a few minutes to read, and we wrote it to be read rather than skimmed past.
Who is responsible for your data
allportugalmedia.com (All Portugal Media) is owned and operated by DESCOBRILANÇA UNIPESSOAL LDA, a sociedade por quotas, unipessoal (a single-member limited liability company), NIPC 516940503. Registered office: Rua 2 da Matinha, Urbanização da Matinha, Lote A, 5D, Armazém J, 1950-073 Lisboa, Portugal. Commercial registration: Conservatória do Registo Comercial de Lisboa, under the same NIPC. That company is the data controller (responsável pelo tratamento) under the General Data Protection Regulation (GDPR). Questions about your data, withdrawal of consent, and any of the requests listed below: info@allportugalmedia.com. Every message gets read and answered.
What we collect, and where it comes from
We buy no contact lists and gather nothing about you elsewhere. Everything we hold, you gave us, in one of these situations.
Forms on the site: your name, email address, phone number if you added one, and whatever you wrote to us. Bookings: the service you chose, the date and time, your contact details, and any notes you left with the booking. Purchases: what you bought, when, for how much, and the details needed to issue an invoice, covering services, tickets, memberships, gift cards and goods. Event registration: name, contact details, number of places, ticket type. Your member account: your login and email address, anything you chose to add to your profile, and the history of your orders and bookings. Chat on the site: your messages and ours, with the time they were sent. Payments: amount, currency, date, transaction reference, payment status. Your card number never reaches us and is never stored by us; the payment provider handles it on its own systems. Files you upload: documents and images you attach to a form or share with us. Technical data: IP address, browser type, pages visited, covered separately in the Cookie Policy.
Why we process your data, and on what legal ground
Each purpose has its own legal ground. We set them out one by one, because the ground decides what you are entitled to ask of us. To do what you asked us to do: take a booking, sell a ticket or a membership, deliver a service, complete a purchase, run your account. This also covers the steps you asked us to take before any contract exists, such as quoting a price, checking a date, or answering a request for a proposal. Ground: article 6(1)(b) GDPR, performance of a contract and pre-contractual steps taken at your request. To keep our books and pay our taxes: invoices, receipts, payment records. We have no discretion here, the law requires us to issue these documents and to keep them. Ground: article 6(1)(c) GDPR, compliance with a legal obligation. To reply to you: when you write through a form or the chat, we answer and keep the exchange, so we can follow your case and not ask you the same thing twice. Ground: article 6(1)(f) GDPR, our legitimate interest in answering messages addressed to us. To protect the site and the people using it: blocking spam, intrusion attempts, and fraudulent orders. Ground: article 6(1)(f) GDPR, our legitimate interest in keeping the service secure. To send you our newsletter and to load non-essential cookies: only with your consent, and only until you take it back. Ground: article 6(1)(a) GDPR. We ask for consent where consent is genuinely the ground. Bookings, purchases, and invoices do not run on consent, and we do not pretend otherwise.Why we process your data, and on what legal ground
Cookies Our website may use cookies to enhance your experience
Cookies are small files that are placed on your computer or device when you visit our website. You can disable cookies in your browser settings if you prefer.
How long we keep it
Data you send us through forms on this website, including your contact details and the content of your message, is kept for three years from your last contact with us. Accounting and tax records, including invoices, payment records, and client contracts, must be kept for longer, for the period set by Portuguese tax law: article 123(4) of the Corporate Income Tax Code (Código do IRC, CIRC) and article 52 of the VAT Code (Código do IVA, CIVA). Once the applicable period ends, the data is deleted or anonymised. Your member account stays for as long as you keep it. The section below on your member account explains how to close it. The address you gave us for the newsletter stays until you unsubscribe.
Who receives your data
We do not sell your data and we do not rent it out. The list of people who see it is short and explainable. Wix.com Ltd., the platform this site runs on, processes data on our instructions. Usercentrics GmbH (Germany) collects and keeps the record of your cookie consent. Google (Google Tag Manager, Google Tag Services, Google Maps, YouTube) and Meta Platforms, Inc. (Facebook Pixel) receive data where you have allowed the relevant cookie category, as set out in our Cookie Policy. Our payment provider, shown at checkout, handles payments; your card details go there, not to us. Our certified accountant (contabilista certificado) receives invoices and payment records, not your correspondence with us. The Autoridade Tributária e Aduaneira (the Portuguese tax and customs authority) receives data as part of mandatory reporting, only to the extent that reporting requires. Beyond that, data may be disclosed where a court or another competent authority makes a binding request. We check such a request rather than act on it automatically.
Transfers outside the European Union
Some of the companies above, in particular Google and Meta, may process data outside the European Union. Those transfers rely on European Commission adequacy decisions and on standard contractual clauses under Chapter V GDPR.
Cookies
Essential cookies load immediately, because the site would not open without them. Everything else is supposed to wait for your consent. Which files actually appear on your device, what each one does, and how to change your mind are set out in full in our Cookie Policy. We deliberately do not repeat it here: one subject, one page.
Newsletter
We send news and invitations only to people who asked for them. Consent to the newsletter is given separately from everything else: the box is never pre-ticked and never buried inside checkout terms. That is what article 22 of Decreto-Lei n.º 7/2004 (the Portuguese e-commerce law) requires, setting the prior consent rule for commercial communications.
Every message carries an unsubscribe link at the bottom. One click, no explanation needed. After you unsubscribe, your address stays on a suppression list so that we do not write to you again by mistake.
Messages about your order, booking, or invoice are not marketing and reach you whether or not you subscribed. Without them we could not deliver what you asked for.
Your member account
If you created an account on this site, it holds your email address and login, whatever you added to your profile, the history of your orders, bookings, and registrations, and any correspondence with us tied to that account.
You can edit your profile at any time once logged in.
To delete the account, write to info@allportugalmedia.com from the address it is registered to. We will remove it along with the data attached to it. What stays is only what tax law obliges us to keep, meaning invoices and payment records, and we detach those from your profile.
Your rights
You have the right to know what data of yours we hold and receive a copy of it, to have inaccurate data corrected, to ask for deletion, to ask us to restrict processing, to receive your data in a portable format, to object to processing based on our legitimate interest, and to withdraw consent where processing rests on it. Withdrawal applies going forward and does not undo what was done while the consent was valid.
These are articles 15 to 22 GDPR. Write to info@allportugalmedia.com and we will reply within the one month set by article 12(3) GDPR.
If you believe we handled your data wrongly, you can lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados (National Data Protection Commission), www.cnpd.pt.
Changes to this page
We update this page when what it describes changes: a new service, a new form, a new purpose. The date at the top tells you when that last happened. If a change is significant, we will tell you directly rather than hope you come back to reread.
