Data controller
The data controller is Margem Amena, Lda., registered at Estrada do Aeroporto 65, Moradia 76, 9060-382 Funchal, Madeira, VAT PT519267184, operating under the Madeira Charter brand. For privacy-related questions, contact madeiraprivatecharter@gmail.com or +351 915 000 659.
Data collected and purposes
Name, email, phone, participant count, preferred experience, date and special requests are collected only when needed to respond to an enquiry or fulfil a booking. Data is used to check availability, communicate with you, process payment, comply with legal obligations and provide experience-related support.
Legal bases, recipients and transfers
Processing is based on your consent and on the performance of a contract. Data may be shared with Stripe (payment processing), hosting and email providers, and legally competent authorities when required by law. Data is not transferred to third countries without adequate safeguards.
Payments and Stripe
Card data is processed exclusively by Stripe, Inc. Madeira Charter does not store full card numbers, security codes or banking authentication data. Stripe's privacy policy is available at stripe.com/privacy.
Retention
Data is retained only for the period strictly necessary for the stated purposes and applicable legal obligations, including tax and accounting requirements. After that period, data is deleted or anonymised.
Your GDPR rights
You have the right to access, rectify, erase, port, restrict and object to the processing of your data, and to withdraw consent at any time. To exercise these rights, contact madeiraprivatecharter@gmail.com. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at www.cnpd.pt.
Cookies and analytics
The site uses technically necessary cookies and, with your consent, traffic analytics tools. You can manage your cookie preferences through your browser settings. Analytics tools such as Google Analytics are only activated after explicit consent.
Minors and security
The site is not directed at persons under 16 years of age. Appropriate technical and organisational measures are applied to protect data against unauthorised access, loss or disclosure.