As "José Carlos Carvalho Pereira" (NIF: 196108365) is a personal entity providing services duly registered with the tax authorities and holding the necessary licenses for the activities carried out (RNAAT 908/2017), it is subject to the GDPR in force since May 25, 2018.

1 - Data Collection The collection of data occurs through the contact between this entity and clients who request information (or have shown interest in the activities carried out) and/or request services or participation in activities organized by this entity.

a) Personal Data: In the exercise of its activity, the following data is collected, processed, and stored: "name"; "address"; "e-mail"; "telephone contacts"; "tax identification number (NIF)"; "date of birth". This data is collected through website forms, email, telephone, or direct messages. Regarding the collection of data by third parties where this entity has and/or discloses information (social networks, search engines, etc.), please consult their respective privacy policies: Facebook, Instagram, Messenger, Twitter, Google, TikTok.

b) Processing of collected personal data: The collected personal data is organized, updated, and maintained according to the need for contact with the client and the specific requirements of the activity sector.

2 - Responsibility for personal data processing The processing of the collected data is the sole and entire responsibility of José Carlos Carvalho Pereira. The data controller can be contacted via email: travel@treesandtravel.com.

3 - Purpose and legal basis for processing The purpose of processing is the correct contact and participation of clients in the activities and services developed by this entity, a s well as the promotion of its activities and/or services. The legal basis for processing is the data subject's consent and the performance of a contract or pre-contractual measures (tour reservations).

4 - Period for data conservation Personal data provided by clients and maintained by this entity will be valid for the period necessary for the purpose of the inherent service provision, as well as the commercial relationship between this entity and the clients. Data related to billing will be kept for the legal period of 10 years, as required by Portuguese Tax Authority regulations.

5 - Rights of personal data subjects Personal data subjects may, at any time, request: "access to their data"; "rectification or correction of their data"; "deletion of their data"; "data portability" and "restriction of processing". You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

6 - Consent of personal data subjects The consent given for the collection, maintenance, and processing of data is free and specific.

7 - Transmission of personal data to third parties In the development of specific activities, it may be necessary to transmit personal data to third parties (such as insurance companies for the mandatory activation of personal accident and civil liability insurance, or tax authorities for the issuance of invoices). Whenever the transmission does not arise from a legal obligation, authorization will be requested from the personal data subjects, indicating which data will be transmitted and for what purpose.

8 - Right to Complain If the data subject considers that their data is not being processed in accordance with applicable legislation, they have the right to file a complaint with the Supervisory Authority: National Data Protection Commission (CNPD) – Av. D. Carlos I, 134 - 1.º 1200-651 Lisboa | e-mail: geral@cnpd.pt.

9 - Contacts For any questions or information, you may contact this entity using the contact details available on the website.