COOKIE POLICY

This Cookie Policy complements our Privacy Policy.

1) What are cookies?

Cookies are small files saved on your device (computer, mobile phone, tablet) via your browser. They are used to ensure the website works and improve the user experience. They may also support statistics and personalisation, with your consent.

2) Who takes responsability?

Orbitur – Intercâmbio de Turismo, S.A. (Corporate taxpayer No 500 207 739), Av. da Boavista, 1681, 3.º, Salas 5 a 8, 4100-132 Porto, Portugal.
DPO contact: This email address is being protected from spambots. You need JavaScript enabled to view it..

3) What types of cookies do we use and for what purposes?

1. Essential (necessary) – They ensure basic website functions (e.g., navigation, login, security, reservation management, load balancing).
   Legal basis: legitimate interest / need to perform requested features.
   Examples: session cookies, CSRF, balancing, consent_mode.
2. Functional – They save preferences (language, region, remember shopping cart) and improve usability.
   Legal basis: consent.
   Cookies associated with online chat and communication tools may also be used, including integrated messaging channels (such as the website chat and messaging platforms), which allow us to respond to user requests and to follow up on contacts made within the scope of the user’s interaction with ORBITUR.
3. Analytics/Statistics – They measure audience and performance (page views, duration, sources). Data is processed in an aggregated/anonymous manner whenever possible.
   Legal basis: consent.
   Examples of providers: Google Analytics 4, Tag Manager (non-proprietary collection).
4. Advertising/CRM & Marketing Automation – They personalise contents and advertisements, measure campaign effectiveness and integrate with CRM (e.g., record campaign interactions and booking events).
   Legal basis: consent.
   Examples of providers: Google Ads/Remarketing, Meta Pixel, HubSpot (CRM/automation), E-goi (email marketing, forms and campaign automation platform).

Note: Some cookies belong to third parties (placed by partners). In these cases, the information is handled in accordance with the policies of these third parties. We never use non-essential cookies without your prior consent.

4) List of common third parties

• Google Analytics 4 / Google Ads / Tag Manager (Google Ireland Ltd.)
• Meta Pixel (Meta Platforms Ireland Ltd.)
• HubSpot (HubSpot Ireland Limited)
• Hotjar (for heatmaps/feedback, if used)
• E-goi (E-goi – Email Marketing and Campaign Automation Platform)
• Callbell (Callbell – Omnichannel chat and communication platform)

The privacy policies of these providers can be found on their pages. Whenever international bank transfers occur (e.g., to the US), we implement appropriate safeguards under the GDPR (e.g., EU standard contractual clauses).

5) Retention periods

• Session: deleted when you close your browser.
• Persistent: remain for a fixed period (e.g,1 to 13 months, depending on the purpose/provider).
• We retain cookies for the minimum period required; the specific retention periods can be found in the cookie table below.

6) Consent management

• On the home banner, you can accept all cookies, decline non-essential cookies, or set preferences by category.
• You can change/withdraw your consent at any time through the Cookie Preferences Panel available in the footer ('Manage Cookies').
• We maintain a consent record (date/time, policy version and consent ID) for proof of compliance. Your consent ID will be displayed in the panel and sent upon request.

7) Do Not Track and browser controls

We respect the choices you make in our panel. You can still block/delete cookies in your browser settings. Doing so may limit some features (especially if you block essential cookies).

8) Children's cookies

Our services are not specifically intended for children. We do not profile minors or use behavioral advertising for them.

9) Changes

This policy may be updated. The new version will be published with reference to the update date.

10) Contacts

For questions or requests about cookies, please email This email address is being protected from spambots. You need JavaScript enabled to view it..
Control authority: CNPD (www.cnpd.pt).

Cookie table

*Duration may vary depending on provider settings and user consent.