OnTravel, Lda., trading under the OnTravel DMC brand, is responsible for processing the personal data collected through this website and while providing its services.
Protecting the privacy and personal data of our customers, passengers, users and partners is a commitment of OnTravel DMC.
Depending on the service requested, we may process the following personal data:
When a customer provides personal data about other passengers, the customer must make sure that they are authorised to do so and that those passengers are aware of this Privacy Policy.
The processing of data needed to make a booking is based on the performance of the contract requested by the customer and does not depend on consent. Consent is used only when it is the appropriate legal basis and may be withdrawn at any time.
The customer should provide only the information needed for OnTravel DMC to organise transport safely and appropriately. OnTravel DMC does not request medical diagnoses or clinical information that is not needed to organise the service.
When the information provided includes health data or another special category of personal data, it will be processed only to assess transport conditions, provide the requested assistance and protect passenger safety. Explicit consent will be requested when legally required.
Where necessary, personal data may be shared with:
Recipients receive only the data needed for their functions. Some providers may process certain data as independent data controllers under their own privacy policies and legal obligations.
With the user’s consent, the website uses Google Analytics, Google Ads and Meta Pixel to analyse website use, measure bookings and other conversions, assess campaigns, create advertising audiences and show relevant advertising on Google, Facebook, Instagram and related channels.
These tools may process IP addresses, online identifiers, device and browser information, pages visited, the source of the visit, user interactions, actions taken on the website and technical information related to bookings or conversions.
OnTravel DMC does not use information about children, health, mobility, accessibility, detailed invoicing or specific routes to create advertising audiences. Non-essential Google and Meta services must remain disabled until the user gives the relevant consent.
Some technology providers, including Google and Meta, may process data outside the European Economic Area. Where an international transfer takes place, legally recognised mechanisms will be used, including adequacy decisions, standard contractual clauses or other applicable safeguards.
Invoicing data is kept for 10 years, as required by the Portuguese Tax Authority. Booking operational data, incidents and communications are kept for 3 years after the service has been provided, so that OnTravel DMC can respond to possible complaints or disputes. Data collected only for marketing purposes is kept until the data subject withdraws consent. When the data is no longer needed, it will be deleted or anonymised, unless it must be kept by law or for the defence of legal rights.
OnTravel DMC uses appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, disclosure or unlawful use. If a personal data breach occurs, the procedures required by law will be followed.
Under applicable law, the data subject may request:
These rights may be subject to legal limits, especially where personal data must be kept to comply with tax, accounting, legal or contractual obligations. Requests must be sent by email. OnTravel DMC may ask for additional information to confirm the identity of the person making the request.
The data subject may lodge a complaint with the Portuguese Data Protection Authority:
More information: Portuguese Data Protection Authority
OnTravel DMC may update this policy because of legal, operational or technology changes, or changes to the services used. The updated version will be published on the website with the date of the latest update.
Cookies are small files or identifiers stored on or read from a user’s device when visiting a website. They may be used to operate the website, maintain a session, process forms and bookings, remember preferences, analyse website use, measure advertising campaigns and show relevant advertising.
Some cookies may involve the processing of personal data, including IP addresses, online identifiers, device information and website usage data.
These cookies are needed for the technical operation and security of the website, including navigation, forms, bookings, payments, privacy preferences and fraud prevention. They cannot be disabled when they are essential to provide the service requested by the user.
These cookies remember preferences such as language, region or navigation choices. When they are not strictly necessary, they are used only after consent.
These cookies help us understand how users move through the website, which pages they visit and whether there are technical problems. They are used only after consent.
These cookies help measure campaigns, assess conversions, create audiences and show relevant advertising. They are used only after consent.
With the user’s consent, the website uses Google Analytics to collect statistics about website use. The service may process IP addresses, device and browser information, pages visited, the source of the visit, session duration, interactions and technical website performance. This information is used to improve content, navigation and performance.
With the user’s consent, the website uses Google Ads to measure conversions, assess campaigns, connect actions on the website with advertisements, create advertising audiences where configured and show relevant advertising. OnTravel DMC does not send Google data about children, health, mobility or accessibility for advertising purposes.
With the user’s consent, the website uses Meta Pixel to measure actions taken after an interaction with advertisements on Facebook or Instagram, assess campaigns, measure conversions, create audiences and show relevant advertising.
The tool may process IP addresses, online identifiers, device and browser information, pages visited, the source of the visit and conversion events. OnTravel DMC does not send Meta data about children, health, mobility or accessibility for advertising purposes.
The website may use Google Tag Manager to manage tags and technical integrations. Google Tag Manager may load services such as Google Analytics, Google Ads or Meta Pixel. Non-essential tags must remain blocked until the user gives the relevant consent.
When visiting the website, users can accept cookies, refuse non-essential cookies, choose the categories they wish to authorise and change their preferences later. Simply using the website does not mean that the user consents to analytics or marketing cookies.
Consent can be changed or withdrawn at any time through the “Manage cookies” option available on the website. Refusing analytics or marketing cookies does not prevent users from browsing the website or making bookings.
Google, Meta and other providers may process certain data as independent data controllers under their own privacy policies. These providers may process data outside the European Economic Area. Where applicable, legally recognised transfer mechanisms will be used, including adequacy decisions, standard contractual clauses or other recognised safeguards.
An up-to-date list of the cookies and technologies used must be available in the website’s cookie preference manager. For each cookie, the list must show its name, provider, purpose, category, duration and whether it is a first-party or third-party cookie. The list must reflect the cookies actually installed on the website.
Last updated: 16 September 2026
