Last updated: October 2026
AAA Bahia (AC Constelação Operadora Turística Ltda., Brazilian company registration CNPJ 13.699.323/0001-67) is committed to protecting the privacy of its clients and to complying with the Brazilian General Data Protection Law (Law 13.709/2018, "LGPD") and, where applicable, the European Union General Data Protection Regulation ("GDPR"). This Policy explains what personal data we collect, how we use it, who we share it with and what your rights are.
We collect personal data through our registration forms, our website and direct communications (email, phone, WhatsApp). This data may include: name, email address, phone number, travel document details when required for bookings, trip details and personal travel preferences (for example, dietary restrictions or accessibility needs).
Health information, such as dietary restrictions, allergies or accessibility needs, is sensitive personal data: we only collect it when the client provides it, with their specific consent, and only to organize the trip safely (LGPD art. 11). Data of children and teenagers traveling with their families is processed with the consent of at least one parent or legal guardian and in the child's best interest (LGPD art. 14).
We only use clients' photos, reviews and testimonials with specific permission, given in a dedicated field of the registration form, separately for each use (social media, website and sharing with suppliers). Clients may refuse without any effect on the services booked and may withdraw their permission at any time using the contact details below. After withdrawal, we will stop using the material in new publications.
We do not sell or rent personal data. We only share what is necessary to provide the travel services booked, with: hotels and guesthouses, airlines, transport companies, guides, insurers and partner agencies, in Brazil and abroad. We may also share data when required by law or by a competent authority.
Because we work with clients and partners from other countries, some data may be transferred outside Brazil, always to the extent necessary to deliver the trip booked or with the client's consent, in accordance with the LGPD (art. 33) and the GDPR.
We keep data for as long as necessary to provide our services and, after that, for the period required by legal and tax obligations, generally up to 5 (five) years after the end of the trip. After that period, the data is deleted or anonymized. Data used to send offers is kept until the client asks to stop receiving them.
We apply physical, technical and administrative security measures to protect personal data against unauthorized access, disclosure, alteration or destruction.
Clients may, at any time and free of charge, request:
Requests should be sent to the contact details below and will be answered within 15 (fifteen) days, as required by the LGPD. To protect our clients, we may ask for confirmation of identity before fulfilling a request. Clients may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD) or, if they are in the European Union, with the data protection authority of their country.
Our website may use cookies to function properly and to measure visits. Non-essential cookies, such as analytics and advertising cookies, are only used with the visitor's consent, which can be managed through the website's cookie notice or the browser settings.
We may update this Policy. The date of the last update is shown at the top. Significant changes, especially regarding the purpose or sharing of data, will be clearly communicated to clients.
If you have questions about this Policy or wish to exercise your rights:
AC Constelação Operadora Turística Ltda. (AAA Bahia)
Data protection officer: AAA Bahia Privacy Service
Email: info@aaabahia.com (subject: "Privacy")
Phone: +55 71 99938 7611
Address: Av. Tancredo Neves, 1033, Ed. Condomínio Ferreira Ferraz, Sala 1406, Caminho das Árvores, CEP 41.820-021, Salvador, Bahia, Brazil