Privacy Policy

    Last updated: April 2026

    1. Data Controller

    vZn Tailored Experience, based in Lisbon, Portugal, is the controller of personal data collected through this website and our services, in accordance with Regulation (EU) 2016/679 ("GDPR").

    2. Personal Data We Collect

    • Identification data: full name, nationality (when relevant for bookings).
    • Contact data: email address, phone number, messaging app identifiers.
    • Booking data: dates of stay, accommodation, travel preferences, dietary requirements, special requests.
    • Communication data: messages exchanged with our team via the contact form, email or messaging apps.
    • Technical data: IP address, browser type, device, pages visited (collected automatically through cookies and analytics).

    3. Why We Collect Your Data

    • To respond to your requests and prepare personalised proposals.
    • To organise, coordinate and deliver the services you have booked.
    • To communicate with you before, during and after your stay.
    • To comply with legal, accounting and tax obligations.
    • To improve our website, services and customer experience.

    4. Legal Basis

    We process your personal data based on (i) the performance of the contract between you and vZn, (ii) your consent (e.g. for marketing communications and non-essential cookies), (iii) our legitimate interests (e.g. service improvement, security), and (iv) legal obligations.

    5. Storage Duration

    • Booking and contractual data: kept for the duration of the relationship and up to 10 years after the last service for legal and accounting purposes.
    • Contact form messages: kept up to 24 months after the last interaction.
    • Technical and analytics data: kept up to 14 months.

    6. Third-Party Tools & Sharing

    Your data may be shared with carefully selected third parties strictly to the extent required to deliver our services, including:

    • Hosting and infrastructure providers used to operate this website.
    • Email and messaging providers used to communicate with you.
    • Analytics tools (e.g. Google Analytics) to understand site usage.
    • Payment processors (e.g. Stripe) when applicable, to securely handle transactions.
    • Trusted partners such as hotels, restaurants, transport and rental companies, only when necessary to fulfil your booking.
    • Authorities, when required by law.

    7. International Transfers

    Some of our service providers may process data outside the European Economic Area. In such cases, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

    8. Your Rights

    Under the GDPR, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, as well as the right to data portability and to withdraw consent at any time.

    • Request access to a copy of your personal data.
    • Ask us to correct inaccurate data.
    • Ask us to delete your data, subject to legal retention obligations.
    • Lodge a complaint with the Portuguese Data Protection Authority (CNPD).

    9. Security

    We implement technical and organisational measures to protect your personal data against unauthorised access, loss or alteration.

    10. Contact

    To exercise your rights or for any question regarding this Privacy Policy, please contact us via the Contact page on this website.