“Experience Oporto” is a website operated by “A Mascotinha Lda”, which complies with Regulation (EU) 2016/679 of April 27, 2016, known as the General Data Protection Regulation (GDPR), and Law No. 58 of August 8, 2019. “A Mascotinha Lda” is supervised by the Portuguese authority CNPD (Comissão Nacional de Proteção de Dados).

The Privacy and Data Protection Policy of Experience Oporto provides detailed information on how we process users’ personal data. The domain of Experience Oporto is experienceoporto.pt, and the URL is www.experienceoporto.pt. Our Privacy and Data Protection Policy establishes the purposes of personal data processing and how we share this data with third parties or subcontracted entities.

If you have any questions about our Privacy and Data Protection Policy, including requests to exercise your legal data protection rights, please contact our Data Protection Officer at info@experienceoporto.pt.

Experience Oporto Data

This website operates under the name “A Mascotinha Lda” (hereinafter referred to as Experience Oporto), a limited liability company headquartered at 31 de Janeiro Street, 31st, 4000-543 Porto, Portugal, registered with the Commercial Registry Office of Porto under the number PT516 948 890, which is also the corporate identification number.

Your Data and Your Visits to the Experience Oporto Website

The information or data provided by the customer will be processed in accordance with the provisions of the Privacy Policy. By using the Experience Oporto website, the customer consents to the processing of such information and data and declares that all information or data provided to us are true and correspond to reality.

Experience Oporto Commitment

Protecting personal data is a priority for Experience Oporto, which is why we are committed to only processing your personal data that is strictly necessary to provide you with the best service, ensuring transparency in information, and applying the best practices in the field of security and personal data protection.

Whenever personal data is processed by contracted entities, we will require them to provide the same level of security and privacy assurance regarding personal data protection. We aim to earn the trust of our customers and ensure that they feel their personal data are secure with us, as we are always committed to protecting the privacy of data subjects, taking our responsibilities regarding personal data protection seriously and diligently. If you have any doubts about the processing of personal data, we are available to provide clarification.

What personal data does Experience Oporto use and what is the purpose of its processing?

Experience Oporto commits to only processing personal data that is strictly necessary to provide our services with the highest quality. Examples of personal data processed include: name, email, address, and phone number.

Creation of Experience Oporto online account

When creating an online account at www.experienceoporto.pt, your personal identification data (name) and contact data (email and phone) will be processed. The processing of this personal data is necessary for you to enjoy the functionalities of the Experience Oporto online account, such as tracking services, making online purchases, and accessing your purchase history. Your personal data will be anonymized 5 years after your last login.

Direct Marketing

We may send you informative communications via email about news, campaigns, offers, discounts, or benefits, generic or targeted from Experience Oporto. To do so, we will use identification data (name) and contact data (email and phone). At any time, you may opt out of receiving this type of communication through each communication we send you. Your personal data will only be retained as long as you consent to receive these communications. If you revoke your consent for this processing, your personal data will be deleted. Your personal data will be anonymized 5 years after your last login.

Transaction Management

Your taxpayer identification number will be requested in your purchases in order to register it and subsequently transmit it to the Tax and Customs Authority. Regarding payment methods and transactions, these will be executed by the company Ifthenpay, Lda, an institution supervised and registered with the Bank of Portugal under number 8707 with tax identification number 510 450 024.

Customer Support

To provide you with the best assistance and support service, it will be necessary for you to provide identification data (name) and contact data (email and phone). This way, we will be able to identify you, analyze your orders, and respond to you in a timely manner. You can contact us via email at info@experienceoporto.pt.

Suggestions and Complaints

At any time, you may make suggestions or complaints regarding the Experience Oporto service by providing identification data (name) and contact data (email and phone).

How long does Experience Oporto keep your personal data?

Experience Oporto only retains personal data for the period strictly necessary to fulfill the aforementioned objectives, within legal limits. Once the defined retention period has expired, Experience Oporto undertakes to delete, destroy, or anonymize your personal data. With the exception of transaction data, which must be retained by legal requirement for a period of 12 years, personal data will generally be deleted as soon as orders have been fulfilled and any pending issues have been clarified and resolved. If you have any doubts or need additional information regarding the retention periods of your personal data, you can contact Experience Oporto via email at info@experienceoporto.pt.

With whom are personal data shared?

In certain cases, personal data may be disclosed, strictly as necessary, to entities providing services to Experience Oporto, such as home delivery services, support services, and marketing actions. If personal data needs to be shared with entities located outside the European Economic Area, we ensure that they are required to comply with European legislation regarding the protection of personal data. Experience Oporto transmits your personal data to the Tax and Customs Authority as required by law. Under no circumstances will your personal data be shared with other companies or brands for commercial purposes.

What are the rights of a data subject and how can they exercise them?

As a rule, the data subject has the following rights regarding data protection:

               – The right to request access to personal data concerning them;

               – The right to demand rectification or erasure and to be forgotten if permitted by legislation;

               – The right to limit processing if they believe the data is incomplete, inaccurate, or if  they consider the processing to be unlawful;

               – The right to object, at any time and for reasons related to their particular situation,  to the processing of personal data, except in cases where the data controller  presents compelling and legitimate reasons;

               – The right not to be subject to automated decisions; and,

               – The right to data portability.

If consent has been requested from a data subject for a particular processing of their personal data, they may withdraw it at any time. To exercise this right, they should do so via the following email: info@experienceoporto.pt. Your request will be carefully analyzed, evaluating its legitimacy and relevance, and we commit to providing a timely response. If necessary, you may also file a complaint with the National Data Protection Commission (CNPD).

Cookies

Experience Oporto uses cookies to improve performance and browsing experience, enhancing response speed and efficiency, and eliminating the need to repeatedly enter the same information. The use of cookies helps recognize devices used during visits to the Experience Oporto Website and is essential for smooth navigation. The cookies used do not collect personal information that can identify you; they only store generic information, such as the form and/or location of access to the Experience Oporto Website and how it is used. Cookies retain only information related to your preferences as a user.

Navigation Cookies: These are temporary cookies that remain in the browser’s cookie file until the user leaves the web page, without any record being left on the user’s hard drive. The information collected by these cookies is used to analyze website traffic patterns, ultimately improving the content and usability of the site.

Analytics Cookies: These cookies quantify the number of users, volume of traffic, and statistically analyze the quality of service provided by Experience Oporto. Navigation on the Experience Oporto Website will be evaluated to improve the provision of Experience Oporto products and services available to you. If you wish, you can disable this setting in your browser, but this may limit access to certain areas of the Website or receiving personalized information.

Cookies Used on Experience Oporto:

Necessary Cookies:

Cookie: wpEmojiSettingsSupports

Purpose: WordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user’s browser can display emojis correctly.

Duration: Session

Cookie: cookieyes-consent

Purpose: CookieYes sets this cookie to remember user consent preferences, ensuring their preferences are respected on subsequent visits to this website. It does not collect or store any personal information about site visitors.

Duration: 1 year

Cookies Analytics:

Cookie: ga_

Purpose of the Cookie:

Google Analytics sets this cookie to store and count page views.

Duration: 1 year, 1 month, and 4 days

Cookie: ga

Purpose of the Cookie:

Google Analytics sets this cookie to calculate visitor, session, and campaign data and to track website usage for site analytics reporting. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.

Duration: 1 year, 1 month, and 4 days

Cookie: bjs_migrations

Purpose of the Cookie:

Sourcebuster sets this cookie to identify the origin of a visit and store user action information in cookies. This analytical and behavioral cookie is used to improve the visitor’s experience on the site.

Duration: session

Cookie: sbjs_current_add

Purpose of the Cookie:

Sourcebuster sets this cookie to identify the origin of a visit and store user action information in cookies. This analytical and behavioral cookie is used to enhance the visitor’s experience on the site.

Duration: session

Cookie: sbjs_first_add

Purpose of the Cookie:

Sourcebuster sets this cookie to identify the origin of a visit and store user action information in cookies. This analytical and behavioral cookie is used to improve the visitor’s experience on the site.

Duration: session

Cookie: sbjs_current

Purpose of the Cookie:

Sourcebuster sets this cookie to identify the origin of a visit and store user action information in cookies. This analytical and behavioral cookie is used to enhance the visitor’s experience on the site.

Duration: session

Cookie: sbjs_first

Purpose of the Cookie:

Sourcebuster sets this cookie to identify the origin of a visit and store user action information in cookies. This analytical and behavioral cookie is used to improve the visitor’s experience on the site.

Duration: session

Cookie: sbjs_udata

Purpose of the Cookie:

Sourcebuster sets this cookie to identify the origin of a visit and store user action information in cookies. This analytical and behavioral cookie is used to enhance the visitor’s experience on the site.

Duration: session

Cookie: sbjs_session

Purpose of the Cookie:

Sourcebuster sets this cookie to identify the origin of a visit and store user action information in cookies. This analytical and behavioral cookie is used to improve the visitor’s experience on the site.

Duration: session

Advertising Cookies:

Cookie: YSC

Purpose: YouTube sets this cookie to track views of embedded videos on YouTube pages.

Duration: session

Cookie: VISITOR_INFO1_LIVE

Purpose: YouTube sets this cookie to measure bandwidth by determining whether the user gets the new or old player interface.

Duration: 6 months

Cookie: VISITOR_PRIVACY_METADATA

Purpose: YouTube sets this cookie to store the user’s cookie consent status for the current domain.

Duration: 6 months

Partner Cookies:

Cookie: bokunSessionId_8b9c3461-965c-4cca-ab26-6e5be68039c7

Purpose: Ciclo Urban Bikes sets this cookie to handle its reservations.

Duration: 20 minutes

Cookie: bokun_widgets_bc283576

Purpose: Ciclo Urban Bikes sets this cookie to handle its reservations.

Duration: session

Cookie: bokun_widgets_sign283576

Purpose: Ciclo Urban Bikes sets this cookie to handle its reservations.

Duration: session

To remove cookies from your browser

You can typically find the option in the browser’s Help menu. However, please note that accessing the Experience Oporto online store requires the use of cookies. Disabling them may impact your browsing experience on the site.

For more detailed instructions on managing cookies, it’s recommended to consult the information provided in each browser’s settings or refer to articles with specific information on the topic (e.g., https://www.allaboutcookies.org/).

Regarding the protection of personal data

Experience Oporto implements a variety of information security measures aligned with national and international best practices. These measures include technological controls, administrative, technical, and physical measures, as well as procedures to safeguard personal data. These efforts aim to prevent unauthorized use, access, disclosure, loss, unauthorized alteration or inadvertent alteration, or unauthorized destruction of personal data.

Is committed to continuous improvement in information security, maintaining this commitment as a cornerstone of its daily operations.

Among other measures, Experience Oporto highlights the following privacy and security measures:

               – Restricted access to personal data.

               – Secure storage and transmission of personal data.

               – Protection of information systems through devices that prevent unauthorized  access to personal data.

               – Implementation of mechanisms to ensure the integrity and quality of personal data.

               – Continuous monitoring of information systems to prevent, detect, and prevent misuse of personal data.

               – Redundancy of storage, processing, and communication equipment for personal  data to prevent loss of availability.

Updates to this privacy policy:

This Privacy Policy may be reviewed and updated, with the necessary information always being provided.

Last updated: 25/03/2024