Azorean Way

Privacy policy

[[DATE_PUBLISHED]]

This page explains what happens to your details when you join the Azorean Way waitlist. It’s short because we collect very little.

Who is responsible

[[LEGAL_NAME]], [[ADDRESS]], NIF [[NIF]]. Contact: [[CONTACT_EMAIL]].

What we store

When you join the waitlist, we store:

  • your email address (in lower case, so we don’t hold duplicates)
  • the language you chose for our emails
  • the version of the consent text you agreed to
  • whether you ticked the optional box saying you’d be interested in walks with nights at a campsite
  • when you signed up and when you confirmed your address
  • a random code that lets you unsubscribe with one click

We don’t store your IP address with your sign-up, and we don’t build a profile of you.

Why

To email you when bookings open, in the language you chose. We do this because you asked us to (your consent, Article 6(1)(a) of the GDPR). If you ticked the campsite box, we only use it to count how many people would like that kind of walk. We won’t use your address for anything else and we won’t sell or share it.

How long we keep it

  • If you don’t confirm your address, it’s deleted automatically after seven days.
  • If you confirm, we keep it until you unsubscribe, or [[RETENTION: proposal: 24 months after you signed up]], whichever comes first.
  • If you unsubscribe, your row is deleted straight away, not just marked as inactive.

Who else handles it

  • Our emails are sent through [[SMTP_PROVIDER, its country, and whether data leaves the EEA]].
  • The website and waitlist run on a server we manage ourselves in [[HOSTING_COUNTRY]].

Our web server, like most, briefly records technical requests to keep the site working and secure. Its access log keeps the time, the address of the page without anything after the “?”, the page you came from (shortened the same way), the identification string your browser sends (browser, version, operating system) and a shortened IP address: the last of its four parts is removed (of an IPv6 address, at most the first three of its eight blocks are kept), so it can’t single out your device. That includes visits to the confirmation and unsubscribe pages: the code in your link comes after the “?”, so it isn’t recorded. Sign-ups, confirmations and unsubscribes sent to the waitlist service are not in that log; the service itself notes only the time, the kind of request and the result, never your IP address, email address or link code. A separate error log records rare server faults; such a line can contain your full IP address and the address of the page you asked for. Both logs are deleted after [[LOG_RETENTION_DAYS: 7 proposed (deploy/logrotate.conf); state what the operator actually set]] days. [[BTWAF: delete once aaPanel’s firewall logging and its server_session cookie are switched off for this site; otherwise disclose both here and under Cookies]]

Cookies

This website uses no cookies and no tracking of any kind. It loads nothing from other websites, so there’s no cookie banner.

Your rights

You can ask to see the data we hold about you, correct it, or have it deleted. You can withdraw your consent at any time. The quickest way is the unsubscribe link in any of our emails, which deletes your data at once. You can also write to [[CONTACT_EMAIL]].

If you think we’ve handled your data wrongly, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

Changes

If this policy changes, we’ll update the date at the top. If the change affects what you agreed to, we’ll ask for your consent again.