PRIVACY AND DATA PROTECTION POLICY

The privacy and protection of our customers' personal data are a top priority for us. This Privacy Policy explains how we collect, use, process, and protect your data, in strict compliance with the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 – and Law no. 58/2019, of 8 August.

1. Data Controller

The entity responsible for the collection and processing of your personal data is:

  • Trading Name: XBUGGY

  • Registered Company Name: Impulso100mapa Lda

  • NIF (Tax Number): [INSERT NIF]

  • Registered Office: Rua Parque Industrial da Galharda, Lote 19 - 2º Piso - Fração F, Irivo - Penafiel - Porto, 4560 173 Irivo, Penafiel

  • Contact Email: impulso100mapa@gmail.com

2. Data Collected and Purposes

We collect only the data strictly necessary for the provision of our buggy hire services and guided tours:

  • Identification and Contact Data (Name, email, phone number): To process bookings, respond to information requests, and manage operational communications.

  • Driving Data (Driving licence number and validity): For the mandatory legal verification of driving requirements for the hired vehicle.

  • Billing Data (NIF/Tax number, billing address): For the mandatory issuance of invoices and compliance with fiscal obligations.

3. Legal Basis for Processing

The processing of your data is based on the following legal pillars:

  • Performance of a Contract: Necessary to validate the booking and enter into the buggy hire agreement.

  • Compliance with Legal Obligations: Necessary for invoicing purposes and reporting to judicial or law enforcement authorities, if formally required.

  • Consent: For sending clarifications or commercial communications (when explicitly authorised by the user).

4. Data Sharing

Your personal data is confidential. Impulso100mapa does not sell or trade your data. It may only be shared with:

  • Portuguese tax and customs authorities for invoicing purposes.

  • Insurance companies involved in a claim, strictly in the event of a road accident.

  • Police or judicial authorities, pursuant to a legal obligation.

5. Data Retention Period

Personal data will be stored only for the period necessary to fulfil the purposes for which it was collected. Billing data will be archived for the mandatory legal period in Portugal (currently 10 years).

6. Data Subject Rights

In accordance with the GDPR, you have the right to exercise the following rights at any time and free of charge:

  • Right of Access: To know what data we have stored about you.

  • Right to Rectification: To correct data that is inaccurate or outdated.

  • Right to Erasure ("Right to be Forgotten"): To request the deletion of your data (provided it does not conflict with legal retention obligations).

  • Right to Restriction and Objection: To restrict or object to the processing of certain data.

To exercise any of these rights, simply send a written request to the email: impulso100mapa@gmail.com

7. Supervisory Authority

If you consider that the processing of your data violates the GDPR, you have the right to lodge a formal complaint with the national supervisory authority:

  • CNPD – Comissão Nacional de Proteção de Dados

  • Av. D. Carlos I, 134 - 1.º, 1200-651 Lisboa | www.cnpd.pt

8. Updates to this Policy

Impulso100mapa Lda reserves the right to update this Privacy Policy whenever justified by legislative or operational changes. Regular review is recommended.