This website is operated by Olena (SVOYA Madeira), a licensed private tour guide in Madeira, Portugal (RNAAT 1199/2024). We respect your privacy and are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR).
1. Who we are
Controller: Olena Svoya Madeira
Website: svoyamadeira.com
Email: ogninata@gmail.com
Location: Madeira, Portugal
2. What data we collect
We collect the following types of data:
- Analytics data — via Google Analytics 4 (GA4): pages visited, time on site, country, device type. IP addresses are anonymised automatically by Google. We only collect this data with your consent (via the cookie banner).
- Review form data — if you leave a review on our site: your name and review text. Stored by Netlify Forms.
- Contact data — if you write to us via WhatsApp: your phone number and messages. Stored by WhatsApp (Meta).
- Language preference — stored in your browser's localStorage to remember your chosen language. This data never leaves your device.
3. Why we collect your data
- Analytics — to understand how visitors use the site and improve our content (legal basis: consent).
- Reviews — to display guest experiences on our website (legal basis: legitimate interest).
- Contact — to respond to enquiries about tours (legal basis: pre-contractual measures).
4. Cookies
We use cookies only with your explicit consent. You can manage your cookie preferences at any time via the cookie banner at the bottom of our website.
- Strictly necessary cookies — no consent required. Used for basic site functionality.
- Analytics cookies (Google Analytics 4) — only with your consent. You can withdraw consent at any time.
Cookie consent is managed by CookieYes, a GDPR-compliant consent platform.
5. Third-party services
We use the following third-party services that may process your data:
6. Data retention
- Analytics data — retained for 14 months in Google Analytics, then automatically deleted.
- Review form submissions — retained in Netlify Forms until manually deleted.
- Language preference — stored locally in your browser, never sent to our servers.
7. Your rights under GDPR
As an EU resident, you have the following rights:
- Right of access — request a copy of your personal data.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — request deletion of your data ("right to be forgotten").
- Right to withdraw consent — withdraw analytics consent at any time via the cookie banner.
- Right to lodge a complaint — with the Portuguese data protection authority CNPD at cnpd.pt.
To exercise any of these rights, please contact us by email.
8. Data security
Our website is hosted on Netlify with HTTPS encryption. We use industry-standard security measures including HTTP security headers (Content Security Policy, HSTS, X-Frame-Options) to protect the site and its visitors.
9. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.