Privacy Policy

Who processes your data

madeira.su belongs to Uliana, a licensed tourist guide in Madeira, RNAAT nº 1186/2025, Funchal, Madeira, Portugal.

For any question about how your data is handled, write on WhatsApp or Telegram to +351 919 009 500.

What data is collected

Through the form on the site: the name you provide and a way to reach you — phone number, WhatsApp, Telegram or email address. The site language and the page you sent the request from are stored alongside it.

Automatically while you browse: the page address, where you arrived from, device and browser type, approximate location from your IP address, and your activity on the page. This is collected by the analytics tools described below.

The site never asks for or collects identity documents, payment details or any special categories of data such as health, beliefs or origin.

Why, and on what legal basis

A form submission is processed so that we can reply and discuss your tour. The legal basis is steps taken at your request before entering into a contract, Article 6(1)(b) GDPR, together with the consent you give by ticking the box when you submit.

Analytics and advertising run on the basis of your consent, Article 6(1)(a) GDPR. Before you consent, these tools are not loaded at all.

Correspondence about a tour that took place may be kept on the basis of legitimate interest — to confirm what was agreed and to answer any complaint, Article 6(1)(f) GDPR.

Who the data is shared with

The website server is located in Amsterdam, the Netherlands, with the hosting provider HOSTKEY B.V. — within the European Union.

Notifications about new requests are delivered by email through an email provider.

Visit analytics is provided by Yandex Metrica. Advertising and its measurement by Google Ads.

Data is never sold, and never shared with third parties for their own purposes.

Transfers outside the EU

Yandex Metrica processes data on servers in Russia; Google processes data in the United States among other places. Both are transfers outside the European Economic Area.

For Google, the transfer relies on the European Commission's standard contractual clauses. For Russia, the European Commission has issued no adequacy decision.

If you would rather this did not happen, decline analytics in the consent banner — those tools will then not load on the site at all.

How long data is kept

Form submissions: up to three years from our last contact, then deleted.

Analytics data: for the periods set by Yandex and Google, typically up to 25 months.

Web server technical logs: up to 90 days.

Your rights

You may request a copy of your data, have it corrected or deleted, restrict how it is processed, receive it in a machine-readable form, or object to the processing.

You may withdraw consent at any time. Withdrawal does not affect processing that took place before it. Analytics consent can be withdrawn in the settings link at the bottom of the page.

To exercise any of these rights, write on WhatsApp or Telegram to +351 919 009 500. You will receive an answer within one month.

Complaints

If you believe your data is being handled improperly, you have the right to complain to a supervisory authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD), Lisbon.

You may also complain to the authority in the country where you live.

Cookies and analytics

Essential files keep the site working: they remember the language you chose and your answer in the consent banner. The site cannot work without them, and they do not require consent.

Analytics and advertising files come from Yandex Metrica and Google Ads. Metrica uses Webvisor, which records mouse movement, scrolling and clicks so that it is visible where visitors struggle. Webvisor does not record what you type into form fields.

These tools load only after you consent. Declining changes nothing else on the site — everything keeps working.

Changes

This policy may change. The date of the last change is shown at the top of the page. Significant changes will be announced on the home page.