Privacy Policy

Effective Date: January 1, 2026 • Last Revised: March 2026

This Privacy Policy explains how Vaultscapsulefn Unipessoal Lda. ("Vaultscapsulefn", "we", "us", or "our"), operating the website vaultscapsulefn.casa, collects, processes, stores, and protects personal data obtained from visitors, subscribers, and clients navigating our digital editorial travel resources.

1. Legal Entity & Data Controller Identification

For the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679 — "GDPR") and applicable Portuguese legislation (Lei n.º 58/2019), the data controller is:

• Company: Vaultscapsulefn Unipessoal Lda.
• Company Tax/Registration (NIF): PT 518 942 301
• Registered Address: Avenida do Atlântico, Edifício Farol, Lote 14, 2520-204 Peniche, Portugal
• Data Protection Officer (DPO) Contact: [email protected]

2. Categories of Personal Data Collected

We restrict data collection to what is necessary for providing editorial guidance, responding to travel planning inquiries, and maintaining technical infrastructure stability:

• Information Provided Voluntarily: When completing our inquiry form, you provide your full name, email address, topic of interest, and the text of your communication.
• Technical & Telemetry Data: When browsing our site, technical server logs automatically record your IP address, browser type and version, language settings, referring URL, time stamp, and requested pages.
• Cookie & Local Storage Data: We store user consent status locally using browser storage technologies in accordance with our Cookie Policy.

3. Legal Bases for Data Processing

We process personal data solely in compliance with Article 6 of the GDPR:

• Legitimate Interests (Art. 6(1)(f)): To secure our web infrastructure, monitor server performance, protect against fraudulent inquiries, and optimize content structure.
• Performance of a Contract or Pre-contractual Inquiries (Art. 6(1)(b)): To review, process, and respond to your direct inquiries submitted through our contact form.
• Consent (Art. 6(1)(a)): For non-essential analytic cookies or tracking technologies, which are deployed only after your affirmative choice via our cookie banner.

4. Third-Party Processors & International Transfers

Vaultscapsulefn does not sell, lease, or monetize your personal data. We engage vetted technical service providers under binding Data Processing Agreements (DPAs) compliant with Article 28 of the GDPR:

• Hosting & Content Delivery: Cloud infrastructure servers located within the European Economic Area (EEA) providing content delivery and server hosting.
• Email Services: Secure transactional email systems operating standard Transport Layer Security (TLS 1.3) protocols.

In instances where technical support requires processing outside the EEA, standard contractual clauses (SCCs) approved by the European Commission are implemented to maintain equivalent data protection safeguards.

5. Retention Periods

Personal data is retained only for the duration required to satisfy the operational objectives for which it was gathered:

• General Inquiry Communications: Retained for a maximum of 24 months following the resolution of your query, after which records are permanently deleted or anonymized.
• Server Security Logs: Automatically purged within 90 days, unless required for ongoing security forensic investigations.
• Cookie Preferences: Maintained in your local browser storage for up to 12 months or until you clear your browser data.

6. Your Rights Under GDPR & CCPA

As a data subject, you hold fundamental rights regarding your personal records:

• Right of Access (Art. 15): Request verification and copies of personal data held about you.
• Right to Rectification (Art. 16): Require correction of incomplete or outdated data.
• Right to Erasure (Art. 17): Request deletion of your personal records ("Right to be Forgotten").
• Right to Restriction of Processing (Art. 18): Restrict the processing of your information under specific statutory circumstances.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.

To exercise any of these entitlements, email our Data Protection team at [email protected]. We respond to verified requests within 30 days without fee.

7. Supervisory Authority

If you believe our data handling infringes your rights, you have the statutory right to file a formal complaint with Portugal's national supervisory body:

Comissão Nacional de Protecção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal
Website: www.cnpd.pt