PRIVACY POLICY

Trading name: Volcanic Beings

Legal name / company name: [[TO BE COMPLETED: legal name or company name]]

Tax ID (NIF/NIPC): [[TO BE COMPLETED: NIF or NIPC]]

Address: [[TO BE COMPLETED: professional address or registered office]]

Email: volcanicbeings@gmail.com

Data Protection Officer (if applicable): [[TO BE COMPLETED: DPO name and contact, if applicable]]

Volcanic Beings is the entity responsible for determining the purposes and means of processing personal data collected through this website, in accordance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.

Personal data collected through this website is processed for the following purposes:

to respond to contact and booking requests submitted through the website; to communicate with visitors about their requested experience; to remember the visitor's selected language; and to maintain the technical functioning and security of the website.

The legal bases relied upon include: performance of pre-contractual steps taken at the visitor's request (Article 6(1)(b) GDPR); Volcanic Beings' legitimate interest in responding to enquiries and operating the website securely (Article 6(1)(f) GDPR); and, where applicable, consent (Article 6(1)(a) GDPR).

[[TO BE COMPLETED: confirm legal basis once the booking and payment process is finalised]]

The contact and booking form on this website requests the visitor's full name, email address, and phone number.

This information is used solely to identify the visitor and to respond to their contact or booking request.

[[TO BE COMPLETED: confirm how form submissions are transmitted, received, and stored once the booking system is finalised]]

[[TO BE COMPLETED: confirm whether any additional data is collected during the booking or payment process]]

Providing this information is voluntary, but it is necessary for Volcanic Beings to be able to respond to the request.

This website uses the browser's local storage to remember the language selected by the visitor.

The information is stored under the key vb-lang and may contain the value en or pt.

This information does not identify the visitor personally and is not transmitted to Volcanic Beings or to any third party — it remains stored only on the visitor's own device.

For more information, please consult our Cookie Policy.

This website uses cookies and similar technologies as described in our Cookie Policy, which forms part of this Privacy Policy.

At present, this website does not use analytics, advertising, or tracking cookies.

This website loads certain resources from external service providers in order to function correctly:

Google Fonts, to display the website's typography; Font Awesome, loaded through the cdnjs content delivery network, to display icons; and links to Instagram and Google Maps, which are only accessed when the visitor chooses to click them.

When these resources are loaded, the respective providers may receive technical information such as the visitor's IP address, browser information, and the date and time of the request, in accordance with their own privacy policies.

Volcanic Beings does not control how these third parties process this technical information.

Volcanic Beings does not sell, rent, or trade personal data.

Personal data may be shared with: [[TO BE COMPLETED: booking/payment platform, if applicable]]; [[TO BE COMPLETED: email or communication service provider used to receive contact requests]]; and public authorities, when required by law.

[[TO BE COMPLETED: confirm any additional recipients once the booking system is finalised]]

Some of the external service providers referenced in this Policy, such as Google Fonts, Font Awesome (cdnjs), Instagram, and Google Maps, may process data outside of the European Economic Area.

Where this occurs, these providers are expected to rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, as described in their respective privacy policies.

[[TO BE COMPLETED: confirm details of any additional international transfers once the booking and payment process is finalised]]

The language preference stored in local storage remains on the visitor's device until it is deleted through the browser settings or replaced by a new language selection.

[[TO BE COMPLETED: retention period for data submitted through the contact/booking form]]

[[TO BE COMPLETED: retention period for booking and payment records, once the booking system is finalised]]

Personal data is not kept for longer than necessary for the purposes described in this Policy, or as required by applicable law.

Volcanic Beings adopts reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

[[TO BE COMPLETED: description of specific security measures once the booking and data storage system is finalised]]

No method of transmission or storage over the internet is entirely secure, and Volcanic Beings cannot guarantee absolute security.

Volcanic Beings does not use automated decision-making or profiling that produces legal effects or similarly significantly affects visitors.

This website is not directed at children, and Volcanic Beings does not knowingly collect personal data directly from children through the contact or booking form.

[[TO BE COMPLETED: confirm minimum age policy for submitting a booking request, consistent with the Terms & Conditions]]

Information about a minor's participation in an experience may be provided by the accompanying adult, in accordance with our Terms & Conditions.

Under the GDPR, visitors have the right to: access their personal data; request rectification of inaccurate data; request erasure of their data; request restriction of processing; object to processing carried out on the basis of legitimate interest; request data portability; and withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at volcanicbeings@gmail.com.

We may need to verify your identity before responding to your request.

[[TO BE COMPLETED: confirm maximum response time applicable under GDPR (typically one month)]]

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Portuguese data protection authority:

Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt

This Privacy Policy may be updated from time to time to reflect changes to this website, the data we process, or applicable legal requirements.

Any changes will be published on this page, together with an updated revision date.

This Privacy Policy was last updated on 4 August 2026.

Volcanic Beings

Email: volcanicbeings@gmail.com

Phone: +351 916 405 799

Address: [[TO BE COMPLETED: professional address or registered office]]

For questions about cookies or similar technologies, please see our Cookie Policy. For questions about bookings, please see our Terms & Conditions.