Data Controller: CISTRIS EVENTOS LDA, trading as SPORTS VENTURES TOURS AND EVENTS

Registered Office: Rua Alfredo Lopes Vilaverde, 17, Piso Cave 02 – Sala F, 2770-008 – Paço de Arcos – Lisbon – Portugal

Company Tax Number: PT510456073

Contact Email: info@sports-ventures.com

1. Introduction

CISTRIS EVENTOS LDA (“we”, “us”, “our”), trading as Sports Ventures Tours and Events, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make a booking, or interact with us in any way.

We comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable Portuguese data protection law. Our lead supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

2. Information We Collect

We may collect and process the following categories of personal information:

2.1 Information You Provide to Us

Identity Data: Full name, title, date of birth, gender

Contact Data: Email address, telephone numbers, postal address

Booking Data: Tour preferences, dietary requirements, medical conditions relevant to travel, passport details, emergency contact information

Financial Data: Payment card details, billing address (processed securely through our payment providers)

Group Data: Information about other travellers in your group, including children and young people

Communication Data: Your correspondence with us via email, phone, or our website

2.2 Information We Collect Automatically

Technical Data: IP address, browser type and version, time zone setting, operating system

Usage Data: Information about how you use our website, including pages visited and links clicked

Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

2.3 Information from Third Parties

Information from schools, clubs, or organisations booking on behalf of groups

Information from accommodation providers, transport companies, and other service suppliers

Information from social media platforms if you interact with us through these channels

2.4 Mobile Application Data (confirm applicability — see note below)

If you use our mobile app, we additionally collect:

Account data: Your name and email address, collected at login or account creation, stored securely via [infrastructure provider], and used solely for authentication and displaying your account.

User ID: A unique identifier assigned to your account to manage your session and app access.

Device permissions requested by the app:

Camera: Used to scan QR codes for event or venue check-in.

Photos: Used to capture or upload images for features within the app.

Location (foreground and background): Used to automatically check you out when you leave a venue. Background access is used exclusively for this purpose and location data is not stored permanently.

Push notifications: Used to send booking updates, tour reminders, and relevant alerts. You can manage notification preferences in your device settings at any time.

What we do not do:

We do not use your data for advertising or track you across third-party apps or websites.

We do not sell your data to third parties.

We do not use your data for profiling or personalisation beyond displaying your own account information.

3. How We Use Your Information

3.1 To Provide Our Services

Processing and managing your tour or event booking

Arranging accommodation, transport, activities, and other tour/event services

Communicating with you about your booking (confirmations, updates, changes)

Providing on-tour or on-event support and assistance

Processing payments and refunds

3.2 To Meet Legal and Regulatory Requirements

Complying with the EU Package Travel Directive (EU) 2015/2302, as transposed into Portuguese law by Decree-Law No. 17/2018

Meeting safeguarding requirements for tours involving children

Complying with financial regulations and anti-money laundering requirements

Responding to legal requests from authorities

3.3 For Business Purposes

Improving our services and developing new tour and event offerings

Sending you marketing communications (with your consent)

Conducting customer satisfaction surveys

Analysing website usage to improve user experience

Protecting against fraud and ensuring the security of our systems

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

Contract: Processing necessary to fulfil our contract with you (your booking)

Legal Obligation: Processing necessary to comply with legal requirements

Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and marketing (where this doesn’t override your rights)

Consent: Where you have given specific consent for marketing communications or other optional processing

Vital Interests: In emergency situations to protect someone’s life or health

5. Sharing Your Information

5.1 Service Providers

Accommodation providers (hotels, hostels, etc.)

Transport companies (coaches, airlines, ferries)

Activity and excursion providers

Catering services

Local tour guides and representatives

5.2 Business Partners

Payment processors for secure transaction handling

Insurance providers

IT service providers who help us operate our systems

Marketing platforms (with your consent)

5.3 Regulatory and Legal Bodies

Turismo de Portugal, under our Travel and Tourism Agency Licence No. 6739

Government authorities when required by law

Courts and legal advisors in case of disputes

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

6. International Transfers

As we organise tours and events to destinations outside Portugal and the European Economic Area (EEA), your personal data may be transferred to and processed in countries outside the EEA.

When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

Transferring to countries benefiting from an adequacy decision by the European Commission

Using Standard Contractual Clauses approved by the European Commission

Ensuring transfers are necessary for the performance of your tour or event contract

Please contact us if you would like more information about the specific safeguards applied to your data.

7. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction; accidental loss or damage; and unlawful processing. These measures include:

Encryption of data in transit and at rest

Secure payment processing through PCI-DSS compliant providers

Regular security assessments and updates

Staff training on data protection

Access controls limiting who can view personal data

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Booking records: 7 years after tour/event completion (for legal and accounting purposes)

Marketing data: Until you withdraw consent or 3 years of inactivity

Website analytics: 26 months

Enquiry data (no booking): 2 years

After the retention period, your data will be securely deleted or anonymised.

9. Your Rights

Under GDPR, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you

Right to Rectification: Request correction of inaccurate or incomplete data

Right to Erasure: Request deletion of your data in certain circumstances

Right to Restrict Processing: Request limitation of how we use your data

Right to Data Portability: Request transfer of your data to another organisation

Right to Object: Object to processing based on legitimate interests or for marketing

Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@sports-ventures.com. We will respond to your request within one month.

You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD) if you believe we have not handled your data correctly. Visit www.cnpd.pt for more information.

10. Children’s Privacy

Many of our tours and events involve children and young people travelling with schools or clubs. We take extra care to protect the privacy of minors:

We only collect children’s data that is necessary for the booking and their safety

We require consent from a parent, guardian, or responsible adult (such as a teacher or group leader)

We do not use children’s data for marketing purposes

We have enhanced safeguarding procedures in place

For more information about our safeguarding practices, please see our Safeguarding Policy.

11. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us remember your preferences, understand how you use our website, improve website functionality, and provide relevant content. You can control cookies through your browser settings. However, disabling certain cookies may affect your experience on our website.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by:

Posting the updated policy on our website

Updating the “Last Updated” date at the bottom of this page

Sending you an email if you are an existing customer (for material changes)

We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

SPORTS VENTURES TOURS AND EVENTS Registered Office: Rua Alfredo Lopes Vilaverde, 17, Piso Cave 02 – Sala F, 2770-008 – Paço de Arcos – Lisbon – Portugal T. +351 214 430 809 Contact Email: info@sports-ventures.com

Your privacy matters to us. If you have any concerns about how we handle your data, please don’t hesitate to get in touch.

Last updated: September 2026