Pickrostertonictrailis Travel Media Unipessoal Lda ("we", "our", or "us") operates the website pickrostertonictrailis.makeup. We are committed to safeguarding personal data in accordance with the European General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), the Portuguese Data Protection Law (Lei n.º 58/2019), and applicable international standards including the California Consumer Privacy Act ("CCPA").

1. Data Collection and Processing Grounds

We operate under principles of strict data minimisation. We collect personal information only when strictly necessary to fulfill requested services, ensure the operational resilience of our static web infrastructure, or respond to specific inquiries. Data collection categories include:

  • Direct Inquiry Data: When you complete our contact form, we collect your full name, email address, topic of inquiry, and message content. The legal basis for this processing is Article 6(1)(b) of the GDPR (performance of pre-contractual steps or direct correspondence).
  • Technical and Server Log Data: When you request web resources, our servers automatically log non-identifiable technical headers, including your IP address in masked form, operating system family, browser type, referring URL, and timestamp. The legal basis is Article 6(1)(f) of the GDPR (legitimate interests in safeguarding network integrity and preventing distributed denial of service attacks).

2. Use of Cookies and Local Storage

Our website utilizes minimal local storage keys and technical cookies necessary to record your consent preference and manage user interface states. We do not engage in cross-site behavioral tracking or behavioral ad profiling. Detailed disclosures concerning cookie categories, expiration periods, and technical names are detailed in our dedicated Cookie Policy.

3. Third-Party Processors and International Transfers

To maintain reliable static file delivery and email communication, we partner with vetted infrastructure providers. All service providers acting as data processors are bound by Article 28 GDPR Data Processing Agreements (DPAs):

  • Hosting Infrastructure: Static content delivery networks located within the European Economic Area (EEA) providing hardened server storage and SSL/TLS encryption.
  • Transactional Mail Relays: Certified email transport gateways handling contact form dispatches under standard contractual clauses (SCCs) approved by the European Commission.

We do not sell, rent, monetize, or trade user data to data brokers or commercial marketing networks under any circumstances.

4. Data Retention Schedules

Correspondence received through our contact desk is retained for a maximum duration of twenty-four (24) months from the date of the last active communication to resolve follow-up inquiries or verify travel route feedback. Technical connection server logs are rotated and deleted automatically within thirty (30) days. Cookie consent choices saved to your browser’s local storage remain valid for twelve (12) months unless cleared manually.

5. Your Rights Under GDPR and CCPA

Under Articles 15 to 22 of the GDPR and provisions of the CCPA, you hold the following enforceable rights concerning your personal information:

  • Right of Access: Request clear confirmation and a structured copy of any personal data we hold regarding you.
  • Right to Rectification: Request correction of inaccurate or incomplete records.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your contact communications where no overriding legal obligation exists.
  • Right to Restrict Processing: Request a temporary freeze on data processing during factual dispute resolution.
  • Right to Data Portability: Obtain your submitted communication records in a structured, machine-readable JSON or CSV format.
  • Right to Object: Object at any time to processing predicated on legitimate interest grounds.
  • Non-Discrimination (CCPA): We will never deny services, alter pricing, or degrade reading experiences if you exercise statutory privacy rights.

6. Supervisory Authority Complaints

If you believe our data handling practices breach applicable European data protection directives, you have the statutory right to file a formal complaint with the Portuguese supervisory authority:

Comissão Nacional de Protecção de Dados (CNPD)
Av. D. Carlos I, 134 - 1.º, 1200-651 Lisboa, Portugal
Website: www.cnpd.pt

7. Data Protection Officer (DPO) Contact Desk

To exercise your privacy rights, request data deletion, or submit questions regarding our technical compliance, contact our appointed Data Protection Officer directly:

DPO Office — Pickrostertonictrailis Travel Media Unipessoal Lda
Avenida da Liberdade 245, 4º Dto
1250-143 Lisboa, Portugal
Email: [email protected] (Subject: Data Protection Inquiry)