Atlantic Safaris

Privacy Policy

Last updated: 3 September 2026

1. Who we are

Atlantic Safaris is a trading name operated by Atlantic Nautic Ocean Unipessoal Lda., a maritime-tourism company based in Nazaré, Portugal, registered under R.N.A.A.T. 80/2010.

For the purposes of the General Data Protection Regulation (GDPR), Atlantic Nautic Ocean Unipessoal Lda. is the controller for the personal data processed through this website, atlanticsafaris.com, and in the course of providing Atlantic Safaris' services.

Atlantic Nautic Ocean Unipessoal Lda. · Porto de Abrigo da Nazaré, 2450-075 Nazaré, Portugal · info@atlanticsafaris.com · (+351) 965 025 966

2. What this policy covers

This policy explains how we handle your personal data when you use atlanticsafaris.com, contact us, or book one of our activities.

Bookings are processed through FareHarbor, a third-party platform Atlantic Safaris uses to manage bookings and customers. How that platform is used is explained in more detail under "Bookings" below.

3. Cookies

This website uses only cookies that are strictly necessary for it to function and stay secure, including the session cookie set automatically by our server. These cookies may, for example, be used to maintain your session and protect forms against attacks.

These cookies aren't used for advertising, profiling, or tracking your activity for marketing purposes. Because they're strictly necessary for the site to function, they don't require your consent.

We don't use Google Analytics, advertising cookies, or any other tracking technology for marketing purposes on this website.

4. Server logs

As with most websites, our server and hosting provider may keep technical logs of visits, which may include IP address, date and time of access, browser type, pages requested, and related technical connection information.

This data is processed to ensure the security and stability of the website, prevent abuse, investigate technical issues, and protect our systems. The legal basis for this processing is our legitimate interest in the security and functioning of our services, under Article 6(1)(f) GDPR.

These logs aren't used for advertising or profiling, and are kept only for as long as necessary for these purposes, in line with the technical and security policies of our hosting service.

5. Bookings

When you book a trip, you may be directed to the FareHarbor booking system, used by Atlantic Safaris to manage bookings, customers, and payments associated with our activities.

For GDPR purposes, Atlantic Nautic Ocean Unipessoal Lda. is responsible for the personal data needed to manage and fulfil your booking. FareHarbor acts as our service provider and processes personal data on our behalf as part of providing the booking platform.

The booking process may involve data such as name, email address, phone number, activity booked, booking date, number of participants, and other information needed to deliver and manage the service.

Processing this data is necessary to manage your booking and provide the service you've requested, on the legal basis of performing a contract or taking pre-contractual steps at your request, under Article 6(1)(b) GDPR.

Certain data related to payments, invoicing, and transactions may also be processed and retained where necessary to comply with our legal, accounting, and tax obligations, under Article 6(1)(c) GDPR.

FareHarbor and some of its service providers may process data outside the European Economic Area. Where applicable, these transfers are carried out using the safeguards provided for under GDPR.

Booking-related data is retained for as long as necessary to provide the service and, afterwards, for the periods required by applicable law or needed to comply with legal obligations and defend our rights.

For more information about the data processing carried out through the FareHarbor platform, we recommend reviewing FareHarbor's own privacy policy and data protection documentation.

6. Getting in touch

If you contact us by email, WhatsApp, or phone, we process the details you give us — such as your name, contact information, and the content of your message — to respond to your request, provide information about our services, or manage an existing booking.

Depending on the reason for contact, this processing is based on taking pre-contractual or contractual steps, or on our legitimate interest in responding to communications addressed to us.

We don't use these contacts to automatically add you to marketing lists or newsletters, and we don't sell your personal data to third parties.

7. Service providers and data sharing

We may use service providers necessary to run our business, including website hosting, email, communications, booking, payment processing, and technical services.

These providers only receive the data necessary to deliver their respective services and, where they act as our processors, are subject to applicable data protection obligations.

We may also disclose data where required by law, by a competent authority, or where necessary to exercise or defend legal rights.

We don't sell or make personal data available to third parties for advertising purposes.

8. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected. Where there is a legal retention obligation — for example, for accounting or tax purposes — the relevant data is kept for the period required by applicable law.

Where no specific legal period applies, we determine the retention period based on the purpose of processing, the operational need for the data, and any need to exercise or defend legal rights.

9. Your rights

Under GDPR, and subject to the conditions set out in applicable law, you can request access to your personal data, its rectification or erasure, restriction of processing, object to processing, and request data portability.

Where processing is based on your consent, you can withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact us at info@atlanticsafaris.com. We may ask for information needed to confirm your identity before responding to your request.

If you believe our processing of your personal data breaches applicable law, you also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), Portugal's supervisory authority.

Comissão Nacional de Proteção de Dados — cnpd.pt

10. Automated decision-making

We don't use the personal data collected through this website to make decisions based solely on automated processing that produce legal effects or significantly affect users, nor to build profiles for advertising purposes.

11. Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or improper destruction. Despite these measures, no system connected to the Internet can guarantee absolute security.

12. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our services, providers, or legal obligations. The date at the top of this page shows the most recent revision.