Home Privacy Policy

Privacy Policy

by Hannah

Privacy Policy

Effective date: 01.01.2026

Introduction – Short / Quick Overview

Welcome to Travel com (c)alma. Your privacy is important to us. This Privacy Policy explains what personal data we collect, how we use it, and your rights. We collect only the information necessary to provide our travel consulting services and to improve your experience on our website.

At Hannah Schäfer, Unipessoal LDA (“we”, “our”, “Travel com (c)alma”), we are committed to protecting your personal data and ensuring transparency in how it is handled. This Privacy Policy describes:

  • The types of personal information we collect through our website, contact forms, and voice messages (WhatsApp/Signal)

  • How we process and store your data securely

  • The legal basis for processing your information under EU General Data Protection Regulation (GDPR)

  • Your rights regarding your personal data, including access, correction, deletion, and withdrawal of consent

  • How we manage cookies and other tracking tools

  • Information about newsletters and marketing communications

Please read this Privacy Policy carefully to understand our practices and your rights. By using our website or services, you agree to the terms described here.

Data we collect

We only collect the information necessary to provide our travel consulting services:

Personal Contact Data

  • Name, Email address, Phone number (optional)

  • Purpose: Responding to inquiries and providing personalized travel advice

Travel Preferences & Requests

  • Information submitted via contact forms, WhatsApp or Signal voice messages

  • Purpose: Creating customized travel plans for your chosen destinations

Billing / Invoice Data

  • Full name, Billing address (Street, ZIP, City, Country), Email, optionally Phone number

  • Purpose: Payment processing via Stripe, issuing invoices, and complying with legal and tax obligations

  • Retention: Stored securely on EU-based servers, retained only as long as legally required

Website Interaction Data

  • IP address, Browser type, Cookies (WordPress login, comment, editor cookies)

  • Purpose: Spam detection, login functionality, basic website performance, and security and abuse prevention

Newsletter Subscription Data (only if opted-in)

  • Email, optional Name

  • Purpose: Sending newsletters and marketing communications

  • Processed via: Secure, EU-compliant providers

Purpose & Legal Basis

We process your personal data only for specific, legitimate purposes. This section explains why we collect your data and under which legal basis we process it.

Respond to Inquiries

  • Purpose: To answer questions, provide guidance, or offer consultation services

  • Legal Basis: Contractual necessity or pre-contractual measures

Provide Personalized Travel Services

  • Purpose: To create custom travel plans and recommendations tailored to your preferences

  • Legal Basis: Contractual necessity

Process Payments & Issue Invoices

  • Purpose: To complete transactions and comply with tax and legal obligations

  • Legal Basis: Legal obligation

Send Newsletters and Marketing Communications (only if opted-in)

  • Purpose: To inform subscribers about services, updates, or offers

  • Legal Basis: Consent (can be withdrawn at any time)

Website & System Optimization

  • Purpose: To improve website functionality, detect errors, and enhance user experience

  • Legal Basis: Legitimate interests

Data Storage & Sharing

We take the security and confidentiality of your personal data seriously. This section explains how we store your information and under which circumstances it may be shared.

Secure Storage

  • All personal data is stored on EU-based servers or with GDPR-compliant service providers using secure systems and encryption where appropriate.

  • Purpose: To protect your information from unauthorized access or loss

Provide Personalized Travel Services

  • Purpose: To create custom travel plans and recommendations tailored to your preferences

  • Legal Basis: Contractual necessity

Retention Period

  • Data is retained only as long as necessary to provide services, fulfill legal obligations, or enforce contracts

  • Examples: Billing data retained for tax purposes, contact data retained while you are an active client

Sharing with Third Parties

  • We do not sell or share your personal data for commercial purposes

  • Data may be shared only when necessary:

    • With Stripe or other payment providers to process payments

    • With tax authorities or legal bodies as required by law

Internal Access

  • Only authorized personnel have access to your data for operational purposes

  • Purpose: To manage your travel plans, respond to inquiries, or issue invoices

Cookies & Tracking

We use cookies and similar technologies to enhance website functionality, improve user experience, and analyze how our website is used. This section explains the types of cookies we use and the purposes for which data may be collected.

Functional / WordPress Cookies

  • Examples: Login cookies, comment form cookies, editor session cookies

  • Purpose: Ensure website functionality, prevent spam, maintain session integrity, and provide basic security

  • Legal basis: Necessary for website operation

Analytics / Performance (Matomo, cookieless)

  • Examples: Visitor statistics, page views, referrer information, browser/device type

  • Purpose: Understand how the website is used, improve performance, and optimize content and structure

  • Notes: Analytics are implemented using Matomo Analytics in a privacy-friendly configuration.
    Matomo does not set cookies, IP addresses are anonymized, and no personal data is stored or shared with third parties.

    You can object to analytics tracking at any time:

     

    You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

     

Marketing / Newsletter Cookies (optional, requires user consent)

  • Examples: Email campaign tracking, open rates, click tracking

  • Purpose: Provide marketing communications and personalized content

  • Consent: Only collected if the user opts-in to newsletters

Newsletter & Marketing

We may send newsletters or marketing communications to users who have opted in. This section explains how we handle such communications and your choices regarding them.

Opt-in Required

  • Users must actively subscribe to receive newsletters or marketing emails

  • Purpose: Ensure consent is freely given and voluntary

Email & Name Only

  • Data collected: Email address and, optionally, name

  • Purpose: Sending relevant updates, offers, and information about our services

Third-Party Providers

  • Marketing emails are processed via secure, EU-compliant providers

  • No personal data is sold or shared for commercial purposes

Unsubscribe Anytime

  • Users can opt out at any time using the unsubscribe link in each newsletter

  • Legal basis: Consent (can be withdrawn at any time)

Your rights

Under the EU General Data Protection Regulation (GDPR), you have certain rights regarding the personal data we hold about you. This section explains what rights you have and how you can exercise them.

  • You can request a copy of the personal data we hold about you

  • Purpose: Transparency and verification

  • You can request corrections to inaccurate or incomplete data

  • Purpose: Ensure the information we hold is accurate

  • You can request that your personal data be deleted, subject to legal or contractual obligations

  • Purpose: Respect your right to be forgotten

  • You can withdraw consent for processing data, such as newsletter subscriptions, at any time

  • Legal basis: Consent withdrawal under GDPR

  • You can request an export of your personal data in a commonly used format

  • Purpose: Use your data elsewhere if desired

  • You can object to the processing of your data for legitimate interests, marketing, or analytics

  • Purpose: Protect your privacy preferences

Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us using the details below.

Contact Details

Company: Hannah Schäfer, Unipessoal LDA

Email: hello@travelcomcalma.com
(Please use this contact for all data protection-related requests.)

Address: Praça do Poder Local, Lote 4, Apt. 7 esq., 8600-524 Lagos, Portugal

We will respond to your inquiries regarding personal data or privacy rights as soon as possible, in accordance with applicable EU data protection laws.

For legal reference, please see our Legal Notice.

WP-Basics / Media / Comments

This section explains how WordPress features, media uploads, and comments are handled, and how your own content is protected.

  • Login, user roles, and editor access are required for website operation

  • Purpose: Ensure smooth operation and secure access

  • Images uploaded to the site may contain metadata (e.g., EXIF GPS)

  • Visitors should avoid uploading images with sensitive location data

  • Purpose: Maintain privacy and security

  • If you leave a comment, we may collect:

    • Name, email, website

    • IP address and browser info (for spam detection)

  • Gravatar: Optional profile image linked to email via Gravatar service

  • Purpose: Comment moderation, spam prevention, user interaction

  • All text, images, and other media on this site are © Hannah Schäfer / Travel com (c)alma

  • Purpose: Protect intellectual property; content may not be reused without permission