How we handle your information.
Last updated: 8 October 2026
This Privacy Policy applies to the website obsidian17.com and is issued by Eclipse Encantado Unipessoal Lda., trading as OBSIDIAN 17, located at Caminho João Fernandes Correia, 39, Seixal, Madeira, Portugal (NIF: 518139204). We are the data controller for personal data collected through this website. For any questions, contact us at contact@eclipseencantado.com.
We collect only the personal data necessary to provide our services and respond to your enquiries. This may include contact data (your name and email address when you contact us) and technical request data needed to operate and secure the website. We do not collect payment card data or any sensitive personal data as defined under GDPR Article 9.
If you claim a promotional voucher, we also collect your name, country, email address, voucher identifier, issue and expiry dates, and redemption status. A scan of the QR code may produce technical visit data such as time, device type and approximate country. Your voucher QR code contains an identifier, not your name or email address.
When you open the voucher form, we may use your approximate country from your IP address to suggest a country. You can change this suggestion before submitting.
If you choose to receive email updates, we also record your choice, when you gave it and the wording you accepted.
We process your personal data to respond to your enquiries (based on your consent or our legitimate interest), to improve our website and services (based on our legitimate interest), and to comply with legal obligations where required by applicable law. We do not use your data for automated decision-making or profiling.
Voucher details are used to issue, validate and prevent repeated use of the discount (performance of the promotional offer and our legitimate interest in preventing misuse). We email a copy of your issued voucher to the address you provide; this delivery does not subscribe you to marketing. We send occasional OBSIDIAN 17 offers and news by email only if you separately opt in. Declining this choice does not affect your voucher. Consent is the legal basis for these marketing emails.
We do not sell, rent, or trade your personal data to third parties. We may share data with trusted service providers who assist in operating our website (bound by GDPR-compliant data processing agreements), or when required by law, court order, or government authority. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V.
Voucher data is processed through Kalanteer Cloud to issue QR codes, record scans and validate redemption. Staff see only the voucher status needed to apply the offer.
Contact enquiry data is retained for up to 12 months after your last interaction with us. Technical request data is kept according to our hosting provider's operational and security retention settings. Legal and accounting records are retained for the period required by Portuguese and EU law (typically 10 years). After the applicable retention period, data is securely deleted or anonymised.
Voucher registration and redemption records are kept for up to 12 months after the voucher expires, unless a longer period is needed for a legal claim or legal obligation.
If you opt in to email updates, we keep your email and consent record while you remain subscribed. After you unsubscribe, we stop sending and keep only the minimum record needed to respect your choice and demonstrate compliance.
Under GDPR, you have the right to access, rectify, or erase your personal data; to restrict or object to its processing; to data portability; and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at contact@eclipseencantado.com. We will respond within 30 days. You also have the right to lodge a complaint with the Portuguese data protection authority, the CNPD (cnpd.pt).
You can unsubscribe from email updates using the link in any marketing email or by contacting us at the address above.
Our hosting provider may use necessary cookies for site security. These are always active. We do not currently use analytics or advertising cookies. Optional external content, currently Google Maps, stays off until you allow it. When loaded, Google may receive technical data and use its own cookies.
The site stores your optional-cookie choice in this browser's local storage. You can accept, reject or change optional cookies at any time through “Cookie settings” in the footer. Refusing optional cookies does not prevent you from using the rest of the site. You can also clear the saved choice in your browser settings.
Our website may contain links to Instagram, Facebook, and TripAdvisor. We are not responsible for the privacy practices of these platforms and encourage you to review their respective privacy policies before sharing any personal data with them.
We may update this Privacy Policy from time to time. The date at the top of this page will always reflect the most recent revision. Continued use of the website after any changes constitutes your acceptance of the updated policy.
Eclipse Encantado Unipessoal Lda., trading as OBSIDIAN 17
Caminho João Fernandes Correia, 39, Seixal, Madeira, Portugal
NIF: 518139204
contact@eclipseencantado.com