Privacy Policy
This Privacy Policy describes how Gestavia processes the personal data of users of its website, in accordance with the General Data Protection Regulation (GDPR) and Lawn.º 58/2019.
1. Data Controller
Gestavia, Unipessoal Lda., with registered office at Rua Dr. Luís Bettencourt, 85, 9580-529 Vila do Porto, is the entity responsible for processing personal data collected through this website, including contact forms, quotation requests, and recruitment processes.
2. Personal Data Collected and Processing Purposes
We only collect data strictly necessary for each purpose.
| Purpose | Data Processed | Legal Basis |
|---|---|---|
| Response to quotation requests and contacts | Name, email, phone, company, operation details | Legitimate interest / pre-contractual measures |
| Job applications and HR management | Identification data, CV, professional history | Pre-contractual measures |
| Improvement of browsing experience | Technical, statistical, and analytics cookies | Consent |
| Compliance with legal obligations (e.g., airport security) | Identification data, mandatory verifications | Legal obligation |
Gestavia does not use personal data for purposes incompatible with those described above.
3. Data Sharing and Communication
Personal data may only be shared when necessary and always with adequate security guarantees:
- Operational partners involved in providing requested services;
- Regulatory entities and airport authorities, when required by law;
- Technology service providers (web hosting, email, security, analytics), subject to contractual obligations of confidentiality and GDPR compliance;
- Group companies (if applicable).
International Transfers
If any service provider is located outside the European Economic Area, Gestavia will ensure that the transfer occurs based on adequate legal mechanisms, such as the European Commission’s Standard Contractual Clauses.
4. Data Retention Period
Personal data is retained only for the period necessary to fulfill the purposes for which it was collected:
- Commercial contacts: up to 3 years after the last relevant contact;
- Unsuccessful applications: up to 2 years (with candidate’s consent, when applicable);
- Contractual data: during the term of the contractual relationship and subsequent legal periods;
- Data collected by legal obligation: for the period required by applicable legislation.
After the defined period, data will be deleted or irreversibly anonymized.
5. Data Subject Rights
Under the GDPR, users have the right to:
- Access their personal data;
- Request correction of incorrect or outdated data;
- Request deletion of their data (“right to be forgotten”);
- Limit the processing of their data;
- Object to processing when based on legitimate interest;
- Request data portability to another entity;
- Withdraw consent at any time, when processing is based on this ground.
To exercise your rights, contact: privacidade@gestavia.com
Right to Complain
Data subjects may also file a complaint with the Portuguese Data Protection Authority (CNPD) if they consider that the processing of their data violates applicable legislation.
6. Data Security
Gestavia implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data, including:
- Encryption and pseudonymization of data whenever applicable;
- Access control and internal security policies;
- System monitoring and intrusion prevention;
- Secure hosting on servers with appropriate certifications;
- Ongoing employee training on data protection.
Despite the measures adopted, no system is completely immune to risks, but Gestavia commits to acting diligently and immediately in case of a security incident.
7. Cookies
The website uses cookies to improve the browsing experience and collect statistical data. Users can manage their preferences through the cookie banner or their browser.
Types of cookies used:
- Essential: necessary for website functionality;
- Analytics: collect statistical data (e.g., Google Analytics), subject to consent;
- Functional: improve functionalities and personalization.
The Cookie Policy can be provided separately if desired.
8. Changes to the Privacy Policy
Gestavia may update this Privacy Policy whenever necessary. The most recent version will always be available on the website, indicating the update date
Terms and Conditions of Use
1. Scope and Acceptance
These Terms and Conditions govern the access and use of the website gestavia.com, including all its contents, functionalities, forms, and services made available online by Gestavia – GESTAVIA Unipessoal Lda. By browsing the website, users declare that they have read, understood, and accepted these Terms. If you do not agree, you should immediately cease using the website.
2. Website Information
Gestavia seeks to ensure that all information provided is accurate, current, and clear. However, content relating to services, operational capabilities, airports, fleet, or other information may be updated, changed, or removed at any time and without prior notice.
Gestavia does not guarantee that:
- Contents are permanently up to date;
- The website is free from errors, interruptions, or technical failures.
3. Permitted Use
Users agree to use the website responsibly and not to engage in acts that may:
- Compromise the security, integrity, or availability of the website;
- Interfere with its normal operation;
- Introduce viruses, malware, or other malicious files;
- Collect data or content in an automated manner without authorization.
Any abusive use may result in restricted access to the website and, if applicable, civil or criminal liability.
4. Liability
Gestavia cannot be held responsible for:
- Access interruptions, technical failures, slowness, or website unavailability due to reasons beyond its control;
- Damages resulting from browsing, downloads, or use of external content;
- Contents, policies, or practices of third-party websites to which links exist on the website;
- Occasional errors or omissions in published content.
Users assume full responsibility for their use of the website and its contents.
5. Intellectual Property
All texts, images, logos, trademarks, graphics, videos, documents, and other content present on the website are the property of Gestavia or used under license.
Without prior written authorization from Gestavia, it is strictly prohibited to:
- Reproduce, copy, distribute, modify, or publish any content;
- Use trademarks, logos, or distinctive elements of the company.
Violation of these rights may result in civil and criminal liability.
6. Use of Forms
When using contact, quotation, or recruitment forms, users agree to:
- Provide true, complete, and up-to-date information;
- Not submit false, incorrect, or third-party data without authorization.
Submission of false information may prevent the follow-up of requests and, in serious cases, result in legal liability.
7. Protection of Personal Data
The processing of personal data collected through the website is carried out in accordance with the Privacy Policy and the General Data Protection Regulation (GDPR).
Users should consult the Privacy Policy to understand:
- What data is collected;
- For what purposes;
- What their rights are as data subjects.
8. External Links
The website may contain links to third-party websites. Gestavia does not control, approve, or take responsibility for the contents, privacy policies, or practices of these websites.
Access to external websites is the sole responsibility of the user.
9. Changes to the Terms and Conditions
Gestavia may change these Terms and the Privacy Policy whenever necessary. The version published on the website is the one in force. Regular consultation of this page is recommended.
10. Applicable Law and Dispute Resolution
These Terms are governed by Portuguese law. Any dispute arising from the use of the website will be submitted to Portuguese courts, unless there is a mandatory legal provision to the contrary.
Cookie Policy
This Cookie Policy explains what cookies are, what types we use on the Gestavia – GESTAVIA Unipessoal Lda. website, for what purposes, and how users can manage their preferences.
1. What are Cookies
Cookies are small text files stored on the user’s device (computer, tablet, smartphone) when visiting a website. These files help improve the browsing experience, remember preferences, and collect statistical information.
Cookies do not allow individual identification of users but may collect information about their device, browser, and usage patterns.
2. Types of Cookies Used
The Gestavia website uses the following types of cookies:
2.1. Essential Cookies (Mandatory)
- Necessary for the website to function.
- Enable basic functionalities such as navigation, access to secure areas, and page loading.
- Cannot be disabled.
2.2. Performance and Analytics Cookies
- Collect statistical data about website usage (e.g., pages visited, browsing time).
- Used to improve performance and optimize content.
- Only activated with user consent.
- Examples: Google Analytics, Matomo, etc.
2.3. Functional Cookies
- Allow remembering user preferences (e.g., language, region).
- Improve the browsing experience.
- Require user consent.
2.4. Marketing Cookies (if applicable)
- Used to display relevant advertisements or measure campaign effectiveness.
- Only used if Gestavia engages in digital advertising.
- Always require explicit consent.
3. Cookie Purposes
Cookies used on the website have the following purposes:
- Ensure the technical functioning of the website;
- Improve the browsing experience;
- Analyze website performance and usage;
- Personalize content (when applicable);
- Comply with legal obligations related to security and auditing.
4. Cookie Management
Users can manage or disable cookies at any time through:
4.1. Consent Banner
When accessing the website for the first time, users can:
- Accept all cookies;
- Reject non-essential cookies;
- Customize their preferences.
Users can change these options at any time through the “Manage Cookies” link available on the website.
4.2. Browser Settings
Users can also block or delete cookies directly in their browser. Instructions vary depending on the browser (Chrome, Firefox, Safari, Edge, etc.).
Note: Disabling essential cookies may compromise website functionality.
5. Third-Party Cookies
Some cookies may be set by external services used on the website, such as:
- Analytics tools (e.g., Google Analytics);
- Map services, videos, or external integrations.
These third parties may collect data outside Gestavia’s direct control. We recommend consulting their respective privacy policies.
6. International Data Transfers
If any cookie is operated by providers outside the European Economic Area, Gestavia ensures that:
- Adequate legal mechanisms exist (e.g., Standard Contractual Clauses);
- Appropriate security measures are applied.
7. Updates to the Cookie Policy
Gestavia may update this Cookie Policy whenever necessary, particularly due to legal or technological changes. The most recent version will always be available on the website.