Book now

Privacy Policy – GoToo Trips & Transfers

Last updated: 17/11/2025

This Privacy Policy explains how GoToo Trips & Transfers (“GoToo”, “we”, “us”, “our”) collects, uses, shares and protects your personal data when you visit our website https://gotoo.pt or book our services.

GoToo Trips & Transfers is a brand of:

Trilhos Voadores Unipessoal Lda
NIPC/VAT: 517009382
Licensed travel agency: RNAVT 10586
Registered office: Av Combatentes do Ultramar N105 2715-776 Terrugem
Email: geral@gotoo.pt

For the purposes of the General Data Protection Regulation (GDPR), Trilhos Voadores Unipessoal Lda is the Data Controller for the processing of your personal data on gotoo.pt.

1. Scope of this Policy

This policy applies to:

  • Visits to https://gotoo.pt and its subpages
  • Enquiries and booking requests sent via our contact forms, email, phone or WhatsApp
  • Reservations for transfers, tours and related travel services made directly with GoToo or via our online booking tools integrated on gotoo.pt

It does not cover independent third-party websites, even if we link to them (for example partner operators, external booking engines or travel content websites). Those sites have their own privacy policies.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

2.1. Identification and contact data

  • Name and surname
  • Email address
  • Phone number (including WhatsApp)
  • Country of residence and preferred language

2.2. Booking and travel data

  • Service requested (transfer, tour, hourly driver, etc.)
  • Dates, pickup and drop-off locations, flight numbers
  • Number of passengers and luggage details
  • Special requests (baby seats, accessible vehicle, extra stops, etc.)
  • Accommodation details (hotel or address) when required for pickup/drop-off

2.3. Payment data

Payments are typically processed via secure third-party providers (e.g. payment gateways, banks). Depending on the solution in use, we may have access to:

  • Partial payment information (last digits of card, transaction ID, status)
    We do not store complete credit card numbers on our servers.

2.4. Website usage and technical data

  • IP address, browser type and version, device type
  • Pages visited, time and date of visit, referral source
  • Cookies and similar technologies (see “Cookies and tracking technologies” below)

2.5. Communication data

  • Messages sent to us via contact forms, email, phone, WhatsApp or social media
  • Feedback, reviews and testimonials you choose to provide

2.6. Sensitive or special category data

We do not actively request sensitive data (e.g. health data). However, to ensure a safe and suitable service, you may voluntarily share information such as:

  • Reduced mobility and need for wheelchair-accessible vehicle
  • Other relevant health or assistance needs during transport

We will only use this information to provide the requested service and will handle it with additional care and confidentiality.

3. Legal Bases for Processing

We process your personal data only when we have a valid legal basis under GDPR, including:

  • Contract performance – when processing is necessary to manage your enquiry, create a quote, confirm a booking and deliver the requested service.
  • Legal obligation – to comply with accounting, tax, tourism and transport regulations in Portugal.
  • Legitimate interests – to improve our services, manage our website, prevent fraud and ensure security, as long as these interests do not override your rights.
  • Consent – for specific activities such as marketing communications, certain cookies or when you voluntarily provide additional information (e.g. about mobility needs).

You may withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

4. How We Use Your Data

We use your personal data for the following purposes:

  1. Handling enquiries and quotes
    • Responding to your questions, requests for information or custom itineraries.
  2. Booking and service management
    • Creating and managing reservations for transfers, tours and related services.
    • Coordinating schedules with drivers and partners.
    • Sending confirmations, updates and practical information (e.g. meeting point, vehicle details).
  3. Customer support and after-sales
    • Handling changes, cancellations, complaints or service issues.
    • Requesting feedback to improve our services.
  4. Marketing and communication (optional)
    • Sending newsletters, travel tips or special offers when you have given consent.
    • Segmenting communications by type of service, destination or language to keep them relevant.
  5. Website management and analytics
    • Operating and securing our website.
    • Measuring traffic, understanding how visitors use the site and improving user experience.
  6. Legal, tax and compliance purposes
    • Issuing invoices and maintaining accounting records.
    • Complying with applicable tourism and transport regulations and cooperating with authorities when legally required.

5. Cookies and Tracking Technologies

We use cookies and similar technologies on gotoo.pt for:

  • Essential website functions (e.g. security, booking functionality)
  • Performance and analytics (e.g. aggregated statistics on page views, traffic sources)
  • Marketing and remarketing (e.g. measuring effectiveness of campaigns)

When you visit our site for the first time, a cookie banner may ask for your consent for non-essential cookies. You can manage or withdraw your consent at any time through your browser settings or cookie preferences tool (if available on the site).

For more details, please refer to our Cookie Policy (if published separately) or contact us directly.

6. Data Sharing and Recipients

We do not sell your personal data.

We may share your data with the following categories of recipients, only when necessary and subject to appropriate safeguards:

  1. Drivers and local partners
    • Independent drivers or transport companies performing the transfer or tour.
    • Local guides and tourism partners when a service involves guided visits or additional experiences.
      We only share the information strictly needed to perform the service (e.g. name, pickup location, phone contact, accessibility needs).
  2. Payment service providers and banks
    • To process payments and refunds securely.
  3. Technology and hosting providers
    • Website hosting, CRM tools, booking systems, email services and IT support.
  4. Professional advisers and authorities
    • Accountants, legal advisers and public authorities where required by law or in connection with legal claims.

Whenever we use external service providers acting as processors, they are bound by a contract to process personal data only according to our instructions and in line with applicable data protection law.

7. International Data Transfers

Our main operations are based in Portugal (European Union). However, some of our service providers or tools may be located outside the European Economic Area (EEA).

In such cases, we ensure that appropriate safeguards are in place, such as:

  • Adequacy decisions by the European Commission; or
  • Standard Contractual Clauses (SCCs) or equivalent contractual protections.

You can request more information about these safeguards using the contact details below.

8. Data Retention

We keep your personal data only for as long as necessary for the purposes for which it was collected, including:

  • Bookings and invoices: retention periods required by tax and accounting law in Portugal (typically at least 10 years).
  • Enquiries without booking: usually up to 12–24 months after the last contact.
  • Marketing communications: until you unsubscribe or withdraw consent, or for a reasonable period after last interaction.
  • Technical logs and analytics data: for the period necessary to ensure website security and performance, usually in aggregated or anonymised form when possible.

When data is no longer required, it will be securely deleted or anonymised.

9. Your Rights under GDPR

As a data subject, you have the following rights (subject to certain conditions):

  • Right of access – to know whether we process your data and to obtain a copy.
  • Right to rectification – to request correction of inaccurate or incomplete data.
  • Right to erasure – to request deletion of your data when it is no longer necessary or when processing is unlawful.
  • Right to restriction – to request that we limit processing in certain cases.
  • Right to data portability – to receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Right to object – to object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent – when processing is based on your consent.

To exercise any of these rights, please contact us using the details in Section 12.

You also have the right to lodge a complaint with the competent supervisory authority, in particular in the EU Member State of your habitual residence or where the alleged infringement took place. In Portugal, this is:

Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

  • Secure server and hosting environment
  • Access controls and authentication
  • Encryption in transit (HTTPS)
  • Regular updates and security monitoring

However, no system is completely secure. If we become aware of a personal data breach that may pose a high risk to your rights and freedoms, we will notify you and the relevant authorities as required by law.

11. Children’s Privacy

Our services and website are not directed at children under 16 years of age. We do not knowingly collect personal data from children without the consent of a parent or legal guardian.

If you believe that a child has provided us with personal data without appropriate consent, please contact us so we can take appropriate action.

12. Contact Us

If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise your rights, you can contact us at:

Trilhos Voadores Unipessoal Lda – GoToo Trips & Transfers
Email: geral@gotoo.pt
Phone: +351 932 275 689
Website: https://gotoo.pt

Please specify “Data Protection” or “Privacy” in the subject line to help us direct your request.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our services, legal requirements or technology.

When we make significant changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or through our website.

We encourage you to review this page regularly to stay informed about how we protect your personal data.

For more information about GDPR, visit the official website of the European Commission.
https://commission.europa.eu/law/law-topic/data-protection_en