Data Controller Information
travelfilters 360, Lda. | Rua da Constituição 243 4T | 4200-198 Porto | Portugal
NIPC (Tax/Registration Number): 519379373
Email: This email address is protected against spam bots. Please activate JavaScript to see the address.
Hosting
This website is hosted by:
netcup GmbH | Daimlerstraße 25 | 76185 Karlsruhe | Germany
https://netcup.com
Server Logging and Internal Analytics
The web server collects technical data automatically during your visit. This includes your IP address, time of access, browser type, operating system and the pages you view. This data maintains website security and functionality.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operational security and abuse prevention).
Retention period: Server logs are retained for 30 days, after which they are automatically deleted or anonymised, unless longer retention is required to investigate a specific security incident.
This data is not shared with third-party analytics services. Static assets on this site are delivered via a third-party CDN (see 'Content Delivery Network' below).
Content Delivery Network (bunny.net)
This website uses the content delivery network bunny.net to serve static assets (such as images and other files) faster and more reliably. When you visit a page, your browser connects to bunny.net's servers, which involves transmitting your IP address and browser information.
Provider: BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring fast, secure and reliable delivery of website content).
Data collection: bunny.net's servers process IP addresses and standard request data as part of delivering content. This processing is necessary for the technical delivery of the page and does not require consent via the cookie banner.
Data Processing Agreement: A Data Processing Agreement (DPA) is in place with bunny.net, ensuring personal data is processed only on our instructions and in accordance with GDPR requirements.
Privacy Policy: https://bunny.net/privacy/
Cookies and Consent
This website uses a cookie banner through which you can grant or decline consent before any non-essential cookies or third-party services are activated.
Strictly necessary cookies (no consent required)
- PHPSESSID (Session management and user login, first-party cookie, retention: browser session)
- security_hash (Supports the security and integrity of our website, first-party cookie, retention: 30 days)
- bunny_shield_id_x (Supports the security and integrity of our website, set by the Content Delivery Network, first-party cookie, retention: browser session)
Functional cookies – activated only after consent
Parts of our website uses the Google Maps Embed API inside an iframe to provide route calculations. If you consent to using this feature, Google places the following third-party cookies on your device to track preferences, maintain security and gather data for targeted advertising:
- NID (Stores user preferences and personalises ads on Google properties based on recent searches and routing activity, retention 6 months)
- CONSENT (Tracks user consent choices for cookies across Google services, retention 2 years)
- 1P_JAR (Collects web traffic analytics and delivers targeted ads based on user behaviour, retention 1 month)
- SID, HSID (Contains encrypted records of a user's Google account ID and sign-in times to prevent fraudulent activity, retention 2 years)
Marketing cookies – activated only after consent
Parts of our website uses a flight search provided by Travelpayouts and kiwi.com. If you consent to using this feature, kiwi.com places the following third-party cookies on your device:
- forterToken (This cookie is necessary for the usage of a fraud prevention tool which is used in kiwi.com services, retention 400 days)
Legal basis for consent-dependent cookies/services: Art. 6(1)(a) GDPR in conjunction with the consent given via the cookie banner.
You may withdraw your consent at any time with future effect by clicking the 'Cookie Settings' link in the footer.
MapTiler Interactive Maps
Provided you have given consent via the cookie banner, this website embeds interactive maps from MapTiler. When a page containing a map loads, your browser connects directly to MapTiler's servers, transmitting your IP address and browser information to MapTiler.
Provider: MapTiler AG, Höfnerstrasse 96, 6314 Unterägeri, Switzerland.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
Data collection
- IP Addresses: The user's browser sends their IP address to MapTiler to request the map assets.
- Server Logs: MapTiler's content delivery network (Cloudflare) stores visitor IP addresses in memory for up to 20 minutes to monitor for malicious activity and security threats. Purpose of processing The data processing happens solely to deliver the mapping service and maintain network security. MapTiler does not track user behaviour across maps or sell data to advertisers.
International data transfer: Switzerland is recognised by the European Commission as providing an adequate level of data protection, so an equivalent level of protection compared to the EU is acknowledged.
Privacy Policy: https://www.maptiler.com/privacy/
Google Maps Route Calculation
Provided you have given consent via the cookie banner, the Google Maps API is primarily used for calculating and showing travel routes for connections by car or public transport. When you request a route, the location data you enter and your IP address are transmitted to Google.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
International data transfer: Processing may also be carried out by companies affiliated with Google Ireland Limited outside the EU/EEA, including in the United States.
Privacy Policy: https://policies.google.com/privacy
Travelpayouts and kiwi.com flight search
Provided you have given consent via the cookie banner, this website embeds an interactive flight search from Travelpayouts and kiwi.com. When a page or overlay containing a flight search widget loads, your browser connects directly to Travelpayouts' and kiwi.com's servers, transmitting your IP address and browser information to them.
Provider Travelpayouts: Go Travel Un Limited, Suite 1504, 15/F, Chinachem Tower, 34–37 Connaught Rd Central, Hong Kong.
Provider kiwi.com: Kiwi.com s.r.o., Rohanské nábřeží 678/25, 186 00, Prague 8-Karlín, Czech Republic.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
International data transfer: Processing may also be carried out by companies affiliated with Go Travel Un Limited or Kiwi.com s.r.o. outside the EU/EEA.
Privacy Policy Travelpayouts: https://support.travelpayouts.com/hc/en-us/articles/4408491722898-Privacy-Policy
Privacy Policy kiwi.com: https://www.kiwi.com/en/pages/content/privacy/
Share function
Our website includes 'Share' buttons. Where supported, this uses your browser’s native sharing feature, which does not involve us or any third party processing your data. For browsers that do not support this feature, clicking the button opens a new tab to a sharing service (AddToAny), which may process data according to its own privacy policy. This service is only contacted if you actively click the button.
Privacy Policy: https://www.addtoany.com/privacy/
Your GDPR Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on legitimate interest (Art. 21 GDPR)
- Right to withdraw consent at any time with future effect (Art. 7(3) GDPR)
To exercise these rights, please contact the data controller at the email address above.
You also have the right to lodge a complaint with the competent supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134 - 1.º
1200-651 Lisboa
Website: https://www.cnpd.pt
