Privacy Policy

Updated on 2026-04-03

1. Data controller

The RAM TOURS / Madeira Island Tours website is operated to manage information requests, bookings, transfers, and customer contact.

If you have questions about privacy or data protection, you may contact us through the website contact page or the official operational email displayed on the site.

2. Personal data we may collect

We may collect identification and contact data such as name, email, phone number, or WhatsApp number, as well as information you provide in booking, contact, or quotation requests.

This may include requested dates, preferred tour or transfer, number of guests, pickup location, travel preferences, and any other information you voluntarily send us.

We may also process limited technical data necessary for security, abuse prevention, and proper website operation.

3. How we collect your data

We collect data when you fill in forms on the website, contact us by email, phone, or WhatsApp, or request information, a quotation, or a booking.

We may also collect strictly necessary technical data during browsing for security and operational purposes.

4. Purposes and legal bases

We use your data to respond to requests, prepare quotations, confirm availability, manage bookings, and deliver tours, transfers, or related services requested by you.

We may also process data to comply with legal, administrative, accounting, or tax obligations, and to protect the website, prevent spam, abuse, and unauthorized access.

The legal bases may include steps taken at your request before entering into a contract, performance of a contract, compliance with a legal obligation, and legitimate interest in maintaining website security and operations.

5. Data retention

We keep personal data only for as long as necessary to respond to the request, manage the booking, provide customer support, and comply with applicable legal obligations.

Invoicing, accounting, or legally required records may be retained for the periods imposed by law. Technical and security logs are kept only for as long as reasonably necessary for operational and protection purposes.

6. Data sharing

We do not sell your personal data.

Data may only be shared where necessary with service providers related to website hosting, communications, security, operational support, accounting, legal support, or compliance with legal obligations.

Those recipients should only receive the data necessary for the relevant purpose and must handle it appropriately and securely.

7. International data transfers

Whenever possible, we aim to rely on services and infrastructure appropriate for processing data within the European Economic Area.

If any provider involves processing outside the EEA, we will seek to ensure appropriate safeguards, such as Standard Contractual Clauses or another applicable legal mechanism.

8. Your rights

Under the GDPR, you may request access, rectification, erasure, restriction of processing, objection to processing where applicable, and data portability where legally allowed.

You may also withdraw consent whenever processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, use the contact page and clearly describe your request. We may need to verify your identity before responding.

9. Contact

If you want to exercise a right, ask a question, or raise a privacy concern, please use the website contact page.