This policy explains what personal data Tigre Feliz - Anima Park collects, what we use it for, who we share it with, how long we keep it and what rights you have over it. It applies to the website, to our customer service, to bookings and to payments, under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Portuguese Law 58/2019.
1. Data controller
The controller of your data is:
- Company: MBG Eventos e Produções Unipessoal, Lda., which operates Tigre Feliz - Anima Park
- Tax number: 515089621
- Address: Rua Hermenegildo Pulquério, 246, 2645-089 Alcabideche, Portugal
- Park: Praça Banco Português do Atlântico, 8125-432 Vilamoura
- Email for personal data matters: geral@animapark.pt
Any request about your data, including exercising the rights described in section 6, should be sent to that address.
2. What data we collect
We collect only the data we need to provide the service you asked for:
When you browse the site and do nothing, we collect no personal data at all. No tracking cookies run until you allow them. The language you chose and your cookie choice are stored only in your own browser.
When you book a party or ask for information, by WhatsApp, phone, email or through the booking system: from the parent or responsible adult, the name, email, phone number and, where an invoice with a tax number is issued, that tax number; from the child, the name and age.
When you use the contact form, the details you fill in (name, email and, optionally, phone) and the content of your message. The message is delivered by email by the site’s own server, which sends it and keeps no copy.
When you write to us on WhatsApp, your name, phone number and the messages exchanged. Your network operator’s and WhatsApp’s own terms also apply.
When you pay, the details on the transfer receipt or, for online payments, the mobile number linked to MB WAY. We have no access to bank or card data: payment is processed by the payment provider named in section 4.
If you allow statistics or marketing cookies, the providers listed in the cookie policy may collect usage data. None of that happens without your prior permission.
The child’s data is supplied by the adult making the booking and used only to organise it.
3. What we use the data for, and on what basis
| Purpose | Legal basis |
|---|---|
| Managing the booking and the visit | Performance of the contract (art. 6(1)(b) GDPR) |
| Processing the payment | Performance of the contract (art. 6(1)(b)) |
| Sending messages about the booking: confirmation, changes, reminders | Performance of the contract (art. 6(1)(b)) |
| Issuing the invoice | Legal tax obligation (art. 6(1)(c)) |
| Answering requests sent by form, phone or WhatsApp | Pre-contractual steps at your request (art. 6(1)(b)) |
| Essential cookies: language, consent | Legitimate interest in making the site work |
| Usage statistics | Your consent (art. 6(1)(a)) |
| Marketing, advertising measurement and news | Your consent (art. 6(1)(a)) |
| Publishing photographs or videos of children | Written consent of whoever holds parental responsibility |
We only send promotions if you have given express consent, which you can withdraw at any time through the link in each message or by writing to the address in section 1. Withdrawing consent does not affect your bookings. We do not sell personal data and we do not use it for third-party advertising.
4. Who processes data on our behalf
To operate, we use service providers (processors) that handle data only on our instructions and with appropriate security safeguards:
- Hostinger: website hosting and delivery of contact-form messages. Handles whatever you write in the form.
- Google (Gmail): the park’s email and messages about bookings. Handles the name, email and content of messages.
- WhatsApp (Meta): communication about your visit or booking, when you choose that channel. Handles the name, phone number and messages exchanged.
- Moloni: invoicing software. Handles the name, tax number and invoice details.
- Google (Analytics): website usage statistics, only if you allow them. See the cookie policy.
Once the booking system and online payment go live, these are added:
- ifthenpay: payment processing (MB WAY, Multibanco). Handles the MB WAY mobile number, the amount and the payment reference.
- Supabase: hosting of the booking system’s database, in the European Union (Ireland). Handles the booking data.
- Google (Firebase): hosting of the booking system. Handles the booking data.
The booking system’s database is hosted in the European Union (Ireland). Other providers, such as Google and Meta, may process data outside the European Economic Area, in particular in the United States. In those cases the transfer is covered by a European Commission adequacy decision (such as the EU-US Data Privacy Framework) or by standard contractual clauses approved by the Commission.
Beyond these cases, we only share data with third parties where the law requires it, for example with the Portuguese tax authority.
5. How long we keep data
- Invoicing data: 10 years, as a legal tax obligation.
- Booking data: for as long as it is needed to manage the booking and resolve any questions or complaints relating to it.
- Requests sent by form, phone or WhatsApp: for as long as needed to answer and follow up, and at most 24 months after your last contact.
- Data used for promotions: until you withdraw consent.
- Cookie consent: 6 months, after which we ask again.
Once those periods are over, the data is deleted or anonymised.
6. Your rights
As a data subject, you have the right to:
- Access: know what data we hold about you and obtain a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data, except where the law requires us to keep it, for example invoicing records.
- Restriction or objection regarding certain processing, including marketing messages.
- Portability: receive the data you gave us in a structured, commonly used format, or ask us to send it to another organisation.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, send a request to geral@animapark.pt saying which right you want to exercise. We may ask for extra information to confirm your identity. We reply within one month, extendable in the cases allowed by the GDPR.
Complaints
If you believe your data is not being handled lawfully, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.
7. Cookies
This site uses essential cookies, which need no consent, plus statistics and marketing cookies, which are only loaded after you allow them. On a first visit, the site makes no request at all to external services.
The categories, the providers that may be used and how to change your mind are in the cookie policy.
8. Children and images
The site is aimed at parents and guardians, not at children. We do not knowingly collect data from children on their own initiative. If you become aware that a child has sent us personal data, contact us and we will delete it.
Photographs and videos in which children are identifiable are only published on the website, on social media or in promotional material with written permission from whoever holds parental responsibility, given separately for each purpose and revocable at any time. To ask for an image to be taken down, write to geral@animapark.pt: we remove posts under our control as quickly as we can.
The rules on photography inside the park are in the Terms and Conditions.
9. Security
The site is served exclusively over an encrypted connection (HTTPS). Access to data is limited to those who need it for their work. Payment details never pass through our systems: they are handled directly by the payment provider.
10. Changes to this policy
We may update this policy to reflect changes in our services or in the law. The version in force is always available on this page, with the date at the top. Where a change affects your cookie choices, we ask for consent again.
