Mountain Interval acts as the Data Controller. We are responsible for managing the website mountaininterval.com and the products and services offered under the Mountain Interval brand (collectively, the "Site and Services").

We are committed to protecting your privacy and securing your personal data in compliance with applicable data protection laws. This Policy outlines how we handle the personal information collected or transmitted when you use the Site and Services.

We collect personal data when you interact with the Site and Services, such as when you create an account, make a purchase, submit contact forms, or subscribe to our newsletters. We process the following categories of information:

• Contact and Identity Data: Your name, email address, phone number, VAT ID, and company/entity name.
• Technical and Usage Data: Your IP address, browser type, domain name, access times, pages viewed, and referring website addresses.

We process your data only when necessary to provide the Site and Services securely. Specifically, we use your information for:

• Service Delivery: To verify identity, manage user accounts and profiles, process transactions, issue invoices, and provide support.
• Site Improvement and Security: To monitor usage, optimize content presentation, and maintain advanced security measures. We may use automated processing to analyze user preferences.
• Communication and Marketing: To respond to inquiries, send essential service notifications, and — only with your explicit consent — send newsletters and promotional offers.

Our Commitment: We will never sell, rent, or trade your personal data. We only share data with trusted third-party processors or when strictly required by law.

Your Rights: You may update your personal information, adjust your communication preferences, or withdraw your marketing consent at any time by contacting us.

We only process your personal data when we have a valid legal foundation to do so under applicable law. All processing is justified by one or more of the following bases:

• Consent: You have given us explicit consent for a specific purpose (such as receiving newsletters).
• Contractual Necessity: Processing is necessary to fulfill a contract with you, or to take necessary steps at your request prior to entering into a contract.
• Legal Obligation: We must process your data to comply with statutory and regulatory obligations (such as Portuguese tax and accounting laws).
• Legitimate Interests: Processing is necessary to pursue our legitimate business interests (such as securing the Site and Services, preventing fraud, or improving our offerings), provided these interests do not override your fundamental privacy rights.

We retain your personal data only for as long as your account is active or as necessary to fulfill the purposes outlined in this Policy.

If you close your account or request data deletion by contacting us, we will securely delete your personal data without undue delay. However, we may retain specific, strictly necessary information even after account closure if we are legally required to do so (such as for tax and accounting purposes) or to resolve disputes.

Cookies are small text files stored on your device that help us improve your browsing experience. We use cookies for two main purposes:

• Essential Functions: To securely manage your login sessions and account and ensure the Site and Services operate properly.
• Analytics and Performance: To anonymously analyze traffic and estimate usage levels, allowing us to continuously optimize our platform.

You have full control over your data. You can manage your preferences, accept, or reject non-essential cookies at any time using our cookie consent prompt. You can also adjust your browser settings, though disabling essential cookies may impact functionality.

We use tools like Google Analytics for anonymous traffic analysis and advertising, but we will only activate these tracking cookies if you provide explicit consent through our cookie banner. We may share aggregated, anonymous data with advertising partners.

The Site and Services may also contain affiliate links that generate a small commission for us if you click them. However, our editorial content remains strictly independent and is never influenced by advertisers unless explicitly labeled as "Sponsored Content."

To operate the Site and Services, we may share your information with subcontracted third-party service providers. We only work with trusted partners who implement robust technical and organizational security measures. These relationships are governed by strict contracts to ensure your data is treated in full compliance with applicable privacy laws.

Some of our third-party service providers may be located outside the European Economic Area (EEA). We may occasionally need to transfer your personal data to countries that have not yet been recognized by the European Commission as providing an adequate level of data protection. Whenever such international transfers occur, Mountain Interval ensures they are conducted in strict compliance with the General Data Protection Regulation (GDPR), utilizing approved legal safeguards and contracts to guarantee your information remains secure.

If you purchase products or services from us, your transaction will be handled by secure, third-party payment gateways (such as Visa, Mastercard, or PayPal). We only provide these entities with the strictly necessary data required to validate and complete your payment safely.

The Site and Services may include links to external websites and integrated social media features. These third-party entities may collect your IP address, track the pages you visit, and set cookies to enable their functionalities. Your interactions with these external platforms are governed entirely by their respective privacy policies, not by Mountain Interval.

Mountain Interval implements robust technical and organizational measures to protect your personal data both online and offline. We continuously assess the risks associated with data processing to ensure our security practices meet modern industry standards and legal requirements.

Whenever sensitive personal information is collected or transmitted through the Site and Services, it is protected using industry-standard encryption, such as the Secure Sockets Layer (SSL) protocol. This ensures your privacy and significantly reduces the risk of unauthorized data interception over the Internet.

Data security is a shared effort. As a user, you are strictly responsible for keeping your login credentials and access codes confidential. Additionally, you must ensure that the devices you use to access the Site and Services are adequately protected according to best practices, including using updated operating systems and antivirus software.

We continuously monitor our systems using advanced threat detection technologies to identify and mitigate potential security risks. In the unfortunate event of a privacy incident or personal data breach, we will act immediately to secure your data and will fulfill all notification obligations required by the GDPR without undue delay.

Under the General Data Protection Regulation (GDPR) and applicable Portuguese data protection laws, you have the following rights regarding your personal data:

• Access and Portability: To request a copy of the personal data we hold about you, or to request that we transfer it to another service provider.
• Rectification: To correct or update any inaccurate or incomplete personal information.
• Erasure (Right to be Forgotten): To request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Restriction and Objection: To limit how we process your data, or to object to our processing entirely (including objection to automated decision-making or profiling).
• Withdrawal of Consent: To withdraw your consent for data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You may exercise any of these rights by contacting us directly. We will make every reasonable effort to comply with your request without undue delay. Please note that we may refuse to comply with requests that are manifestly unfounded or excessive, particularly if they are repetitive.

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Portuguese national supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Rua de São Bento, nº 148, 3º, 1200-821 Lisbon, Portugal

To exercise your data protection rights or to ask any questions regarding your privacy and information security, please contact our Data Controller at hello@mountaininterval.com

When contacting us, please provide your preferred method of response (email, telephone, or physical address).

We may review and update this Policy over time to reflect changes in our practices or legal requirements. We encourage you to consult this page whenever you provide personal data to Mountain Interval.

If we make significant changes — particularly regarding how we process your data — we will provide a clear notice through our standard communication channels, such as a website notification or email. Your continued use of the Site and Services after these changes are posted constitutes your acceptance of the updated Policy. If you do not agree with any revisions, please discontinue your use of the Site and Services and do not submit further personal data to us.

Last update: 15 Apr 2026