(Johnny´s Tours reviewed and updated its Privacy Policy on 01/05/2020)

João Manuel Barreto de Freitas, owner of www.johnnystours.com, understands and respects the importance of your privacy and considers the safety of your customers' personal information vital. This Privacy Policy establishes the basis upon which any personal data we acquire from customers through this website, or from the assignment by customer, will be processed and stored by us. We are committed to protecting your personal information and to being transparent about what information we collect and what we do with it. So, read the following information carefully.

According to the new General Data Protection Regulation Act, approved by the European Commission (GDPR, EU Regulation 2016/679), we trading as Johnny´s Tours, are the Data Controller for this website www.johnnystours.com. As our customer, you are aware of the rules contained in our Privacy Policy, as well as ensuring that the other members of your part are aware of the same content and that they agree to provide their personal data, in order to proceed with the booking or another purchase on their behalf.

By making a booking/request or sending your personal data through this website, you agree to the transfer, storage or processing as established. We will take all steps legally necessary to ensure that your data is handled safely and in accordance with this privacy policy.

Personal Data Collected and Reasons

Johnny´s Tours maintains a database with the registration of its customers/visitors after the first contact. The data presented in this database are entirely the data provided by the customers themselves at the time of their booking or later requests for booking purposes and it is collected under the terms approved by the National Data Protection Commission by Johnny´s Tours, the entity responsible for the file, with headquarters at Cerro da Águia, Orada Cx Postal 113, 8200-371 Albufeira.

When the customer makes a reservation or a booking on this website, Johnny´s Tours automatically registers certain personal data that the customer consented. The type of data saved will be information such as "name", "contact" and/or "email address". All information about personal data requested serve exclusively to organize the requested tours or tourist services. All personal data provided will be treated as being of a "sensitive" nature and, therefore, deserve the utmost respect and care from Johnny´s Tours.

In no circumstances we can ask about philosophical or political beliefs, party or trade union affiliation, religious belief, private life and racial or ethnic origin, as well as data on the health or sexual life (including genetic data) of customers. When you are organizing the requested trip, the customer can provide us other important information, such as dietary requirements and food intolerances, medical conditions, disabilities or other special information similar to previous ones, in order to ensure that specific needs are met.

Thus, Johnny´s Tours guarantees that it has implemented and will continue to develop the mandatory measures of technical and organizational nature to ensure the security of the data that is provided, in order to prevent its alteration, loss, unauthorized treatment and/or access, being aware of the sensitive nature of the data stored and the risks to which they are exposed.
If the customer wishes to exercise the rights of access, rectification, cancellation or opposition that the GDPR grants them, it can do it through the website or send an email to info@johnnystours.com.

Other Ways to Obtain Personal Data

Personal data obtained by outsourced sources

In addition to this data provided by the user/customer, we may receive information from other suppliers and certified partners, to whom we point the responsibility to ensure the full compliance with the privacy policies required by the GDPR:

• if you book one of our programs through a travel agent or third-party tour operator, certain personal data (as applicable to your booking) will be shared with Johnny´s Tours in order to provide the services that the customer has requested (even if this commercial relationship doesn’t come to an end);
  
  
• If you contact us through any of the phones/mobile phones available in the company, your number may be associated with your booking/request (if there is no business relationship, the number will be forgotten);

Rights of Individual Relative to Personal Data Provided

Any user or customer that provided your personal data has several rights with respect to the information that you have granted, in accordance with the RGDP law, such as:- right to access your personal information: at any time, you have the right to request access to your personal data maintained by Johnny´s Tours , free of charge. We may require proof of identity and sufficient information about your interactions with us, in order to find your information. If someone makes the request on your behalf, that person will have to provide written and signed confirmation that you have been given authority. We reserve the right of not providing you with a copy, if it includes personal information of other people or if we have a legitimate reason to retain it;

• right to correct and update your personal information: the accuracy of your information is important to us. Thus, at any time, you may change your name or email address (or other relevant personal information) by sending us an email to info@johnnystours.com or by contacting us (+351 650 70 51);
• right to delete your personal information or restrict its processing: you may request us to remove your personal information from our systems by email or in writing. Since we have no legitimate reason (legal and commercial basis) to continue processing or maintaining your personal information, we will make reasonable efforts to fulfil your request as quickly as possible. While we may not permanently remove your information as quick as you wish (for software delays or other similar issues), you may request to restrict the processing of your data. If the processing is restricted, we can only use your personal information if we have your prior consent or if we are legally authorized to do so. In order to simplify the removal of your personal data, we are developing a tool that allows the automatic removal of it;
• right to transfer your personal information to a structured data file: at any time, you can ask us to send your personal data directly to another service provider. And we will do so if this is technically possible for us. We reserve the right of not providing a copy of your personal information if it contains personal data of other people or if we have another licit reason to withhold such information;
• right to make a complaint: at any time, and if you wish, you can make a complaint with the data protection regulator if you believe that your legal rights have been violated or when you have reasons to believe that your personal information is being used in a way that does not comply with the law. If you wish to contact us about this Privacy Policy, you can send an email to info@johnnystours.com. We will analyse carefully your complaint and we will answer you as quickly as possible.

Our Approach to Personal Data Security

While we do our best to protect your personal data, and always acting according with strict GDPR standards, the transmission of information over the Internet is not entirely secure. Therefore, we cannot totally guarantee the security of your data transmitted to our website. When we receive your information, we take all reasonable and legal steps to maintain your personal information protected and to try to prevent any unauthorized access, use or loss of your data, implementing appropriate security measures and limiting access, including internal access. All information that you provide is stored on our secure servers and any payment transaction will be encrypted using TLS technology. We do not store customer card data, and when we give a password (personal and non-transferable) to a customer to access a reserved area of our website, he must save it and he will be responsible for keeping this password confidential.

In addition, if we detect any breach or suspicion about violation of personal data, we will notify the competent authorities immediately, as required by law.

Cookies

Due to the way Internet communication standards work, access to websites may involve the use of cookies. A cookie is a small file sent to the user computer that is stored on the user's disk. Some of these cookies are essential for the correctly work of this website, to allow a user to make a booking or request through it, to verify your requests and to improve the user experience on our platform.

The cookies that we use do not extract information from the user's hard drive, do not steal personal information, or do not read cookie files created by suppliers/competitors.
If you do not accept the use of cookies, you will not be able to use the website www.johnny´stours.com. Alternatively, you may delete all cookies at any time after using our website by accessing your browser preferences.

Changes to the Privacy Policy

Johnny´s Tours reserves the right to update or change this Privacy Policy. However, you may request a copy of an earlier version of this page.