Data Processing Agreement (DPA) & Service Integration Agreement

Last updated: March 9, 2026

Este acordo regula a forma como os dados pessoais podem ser tratados no contexto da utilização do serviço NautiBot AI, disponibilizado através do website nautibot.pt.

This document supplements the Terms and Conditions and the Privacy Policy of the service.

 

 

1. Nature of the Service

O NautiBot AI é um serviço de integração tecnológica que permite aos operadores turísticos instalar um assistente virtual (chatbot) nos seus websites.

The service includes:

  • technical configuration of the chatbot

  • initial training based on the client's website content

  • connection to external automation tools

  • configuration of contact or pre-booking request submission flows

NautiBot acts exclusively as a technical provider of software integration and configuration.

 

 

2. Responsibility Structure

2.1 Data Controller (Website nautibot.pt)

NautiBot is responsible for processing personal data collected directly on the website:

 
www.nautibot.pt
 

This data includes, for example:

  • name

  • business email

  • company website

  • mobile phone

  • messages submitted through forms

This data is used exclusively for:

  • commercial contact

  • service trial activation

  • technical support

  • administrative and fiscal management.

 

2.2 Data Controller (Client's Website)

The Client (Boat Tour Operator) is solely responsible for processing the personal data collected through the chatbot installed on their website.

This includes data collected from:

  • tourists

  • website visitors

  • potential clients

  • booking or pre-booking requests.

The Client determines:

  • what data is collected

  • for what purpose

  • how they are stored

  • how long they are retained.

 

 

3. NautiBot's Role

NautiBot does not act as a data controller or data processor in relation to tourist data collected through the chatbot installed on the Client's website.

NautiBot acts exclusively as:

 
a technical provider of software configuration and integration.
 

Upon completion of the installation and configuration:

  • NautiBot does not access the collected data

  • NautiBot does not store that data

  • NautiBot does not control that data

  • NautiBot does not use it for any purpose.

 

 

4. Technical Data Flow

The system may use external technological tools to function.

Depending on each client's configuration, data may flow directly between:

  • the website visitor

  • the chatbot installed on the website

  • automation systems

  • storage services configured by the Client.

Typically, data is sent directly to:

  • the tourist operator's email

  • a database or spreadsheet controlled by the operator.

NautiBot does not maintain a centralised database of these contacts.

 

 

5. Third-Party Technology Services

The operation of the system may involve external technology platforms, including:

  • chatbot services

  • automation services

  • cloud services

  • data storage services.

These services may act as independent data processors, in accordance with their own legal terms and privacy policies.

The Client is responsible for ensuring that the use of these platforms complies with applicable legislation.

 

6. Individual Client Configuration

Each NautiBot implementation is created individually for each tourist operator.

Each client has:

  • their own technical configuration

  • their own data storage destinations

  • their own control over the data collected.

NautiBot does not maintain a centralised infrastructure for storing tourist data.

 

7. Security

NautiBot applies good security practices in the technical configuration of the service, including:

  • use of secure connections (HTTPS)

  • proper configuration of the tools used

  • security recommendations to the Client.

Upon delivery of the system, the Client assumes responsibility for the security of their accounts and systems.

 

8. GDPR Compliance Responsibility

The Client agrees to:

  • ensure a legal basis for data processing

  • inform website users about the use of the chatbot

  • comply with all GDPR obligations and applicable legislation.

NautiBot is not responsible for any infringements committed by the Client in the use of the collected data.

 

9. Limitation of Liability

NautiBot's liability is limited to the provision of the technical service of chatbot configuration and integration.

NautiBot is not responsible for:

  • the use of data collected by the Client

  • commercial decisions made by the Client

  • the Client's failure to comply with data protection legislation

 

10. Contact

For any questions related to data protection:

NautiBot AI
Email: info@nautibot.pt

 

11. Other Documents

Also read:

 

NautiBot AI
Intelligent sales assistant for boat tour operators.

Scroll to Top