100 Montanhas Privacy Policy

Last updated: 19 October 2026

1. Data Controller

100 Montanhas
Address: Serra da Estrela, Portugal
Email: geral@100montanhas.pt
Phone: +351 922 011 911
RNAAT: 681/2022

2. Personal Data Collected

Through our booking and contact forms, we collect:

  • Full name
  • Email address
  • Phone number
  • Message/notes (optional)
  • Preferred date and time (optional)
  • Number of participants (optional)

When you pay online (deposit or full amount), payment takes place on Stripe's secure page. Card, MB WAY or Multibanco details are handled directly by Stripe and never reach our website; we only receive the confirmation and the amount paid.

3. Purpose of Processing

  • Managing and confirming experience bookings
  • Communicating with customers about their bookings
  • Responding to enquiries

4. Legal Basis

Data processing is based on your consent (Article 6(1)(a) GDPR) and the performance of pre-contractual measures (Article 6(1)(b) GDPR).

5. Data Retention

Personal data is retained for the period necessary to fulfil its purpose, not exceeding 24 months after the last contact, unless a legal obligation requires otherwise.

6. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, contact us at geral@100montanhas.pt.

7. Cookies

On your first visit a cookie notice is shown with the option to accept or reject. You can change your choice at any time using the «Cookies» link in the site footer.

  • Necessary (always on): store your cookie choice and make the site and the booking form work.
  • Measurement and advertising (only if you accept): Google Analytics, Google Ads and Meta (Facebook and Instagram), so we know how many people visit us, where they come from and whether our ads lead to bookings. If you reject, these services do not store cookies on your device.

In addition, we keep our own visit count without cookies and without storing your IP address: we only record anonymous data such as the page viewed, the approximate country and city, the type of device and the website you came from.

8. Security

100 Montanhas implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. To provide our service we use the following processors, who handle data only according to our instructions:

  • Cloudflare (hosting of the website and booking system)
  • Stripe (online payments)
  • Resend (sending booking confirmation emails)
  • Google and Meta (measurement and advertising, only with your consent)

9. Complaints

If you believe your data has been processed in violation of GDPR, you may file a complaint with the Portuguese Data Protection Authority (CNPD).

See experiencesWhatsApp
Talk to us!