Terms and Conditions of CP App

The App has tickets with the following discounts:

• Return journeys - Discount valid for return journeys: 10% off in Alfa Pendular, Intercidades, Regional and InterRegional trains, every day.

• Children - Discount valid for children between 4 and 12 years old (inclusive): 50% off in Alfa Pendular, Intercidades, Regional, InterRegional, Coimbra Urban Trains and an add-on on the Oporto Urban Trains, every day.

• Youth (13 to 17) - Discount valid for customers between 13 and 17 years old (inclusive): 25% off in Alfa Pendular, Intercidades, Regional and InterRegional trains, every day.

• Youth (18 to 25) - Discount valid for customers between 18 and 25 years old (inclusive): 25% off in Alfa Pendular, Intercidades, Regional and InterRegional trains, every day.

  Youth card - Discount valid for Youth Card customers: 25% off in Intercidades, Regional and InterRegional trains, every day.

• CP/INR Client – Discount for disabled passengers with a disability of 80% or more. On the train, they must show their Multiuse Medical Disability certificate or Armed Forces Disability card.
• CP/INR Companion – Discount for passengers accompanying passengers with a disability of 80% or more.

• Senior - Discount valid for seniors, aged 65 and over: 50% off in Alfa Pendular, Intercidades, Regional, InterRegional, Coimbra Urban Trains and an add-on on Oporto Urban Trains, every day.

• CP/Empresas – Discount for companies with an agreement with CP.
  
  
• Trainsharing – Discount for return journeys on Tuesdays, Wednesdays and Thursdays to all destinations in any class. The discount does not apply to Tuesdays if the Monday was a public holiday or the Thursdays if the Friday is a public holiday. The discount applies to groups of 3 or 4 passengers making the return journey together on the same day in the same train, class origin and destination Discount of 40% or 50% depending on the number of people. TrainSharing tickets purchased at the ticket office can be exchanged, but those purchased at the Online Ticket Office, CP App and Helpline cannot be, and cannot be used in conjunction with other discounts or special offers.
  
  
• Special offer tickets ( Promo Tickets) - Promo tickets are valid in Alfa Pendular and Intercidades trains  for all destinations if bought 5, 8 or more days in advance (including the purchase day and up to 60 days in advance), of the journey date. The discount is limited to the number of seats covered by the offer - available on each train - and cannot be used together with other special offers in force.
  Special offer tickets purchase or exchange can only be guaranteed at the end of the process. The price is shown at every step of the sale or reissue process so if you do not want to continue because the special offer price is no longer available, you can cancel the process.
  When exchanging special offer tickets and to once again use the discount (limited to the number of seats covered by the special offer fare that are available on each train), the new journey date must be at least 5 or more days in advance (including the purchase day and up to 60 days), in relation to the moment after its exchages.
  Special offer tickets can be exchanged but cannot be refunded.
  Return tickets - where one of the journeys includes a special offer - are not refundable.

• Rail&Fly - Azores Airlines – CP Customers benefit from a 5% off on journeys with Sata | Azores Airlines. Sata | Azores Airlines passengers, who have tickets purchased and confirmed on Sata | Azores Airlines, whose origin and/or destination is Lisbon, Oporto or Faro airport, benefit from a 20% off on Alfa Pendular and Intercidades journeys.

• MSC Cruises – Passengers who have a voucher for an MSC Cruise departing and/or arriving at Lisbon Santa Apolónia can get 15% off Alfa Pendular and Intercidades journeys - in Conforto or 1^st class – respectively, in journeys to be taken on the day before the cruise or on the same day, in case of departures, and on journeys taken on the day itself or on the day after the cruise homeward journey, from and/or to Lisbon Santa Apolónia.

• ACP – ACP members get 5% off Alfa Pendular and Intercidades trains single and return tickets and off Douro and Vouga Historical Trains single tickets. They also get 30% discount off Lusitânia Comboio Hotel, Sud Expresso and Celta single tickets in international routes. The discounts are applicable in any class.

You can book a Priority Seat, available in the Tourist/2^nd class of the Alfa Pendular and Intercidades trains. These seats are specifically designed for reduced mobility passengers.

If you need a Priority seat, buy it in a separate operation. If you buy it together with tickets for other passengers, priority seating will be given to all of them. As there is a limit to the number of Priority seats per carriage, the system may give you seats in different carriages.

Configure the seats you have been attributed during the purchase process.

If you want to change your seat in the App, see the carriage diagram for the seats you have been attributed. If you want to change seats you must select the seat you have been given and then choose the one you want from among the available seats in any carriage. Once the confirmation is made, is not possible to make further changes.

You can use any of the following payment methods: PayPal (using your account or paying with your card, without needing to register), credit card, debit card (Visa or MasterCard that has a security code on the back) and MB WAY. 

Paying by PayPal lets you activate the option that authorises CP to process future purchases without needing to be redirected to PayPal for authentication, saving you time in the checkout process. Once activated, you can cancel this option at any time, by removing the tick mark on the option or eliminating it when it is active. The activation or cancellation process is done during the purchase process at the payment phase. 

3-D Secure – what changes in online purchases

When you buy a ticket from the CP Online Ticket Office, in the CP site or the App, using Visa or Mastercard, you are making a transaction with 3-D Secure.

The 3-D Secure protocol provides the highest level of security for online shopping since it ensures at the moment of the transaction that you are responsible for the payment and the legitimate holder of the card that is being used in the online purchase.

A bank form appears at the purchase phase where you have to introduce the bank card details and the authentication credentials that only the card holder knows.

Most Portuguese banks send their clients SMS codes so they can authenticate the transaction they are making.

If your bank card is not associated with 3-D Secure, you may find your Visa and Mastercard cards are rejected.

If you want to join and know more about what authentication to use in your online shopping, contact your bank.

If you want to get a refund, exchange or alter the name of the ticket holder of tickets bought using the CP App, please check the Terms and Conditions of the Online Ticket Office in the “Buy Tickets” area in cp.pt, since the same rules apply for these operations. If you want to access any of these options you have to access the journey details in “Your Tickets” area, on cp.pt

Bicycles can be carried on all Intercidades:

• Northern line (Lisbon – Porto / Braga / Guimarães), Beira Alta, Beira Baixa line, Alentejo (Lisbon Oriente / Évora) and Sul > Only 1 bike per passenger in the 2nd class carriages. Each carriage has space for 2 bikes.

The app includes some areas which are only accessible through the user registration in myCP. The data collected through the registration is exclusively for the use of CP, and the privacy and protection of the data registered by the users are guaranteed.

Purpose 

CP - Comboios de Portugal, E.P.E. (hereinafter referred to as CP), as an entity responsible for the processing of the personal data provided to it, in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council of 27th of April 2016, commonly referred to as General Data Protection Regulation (GDPR) and other applicable national and community legislation, has adopted the Personal Data Privacy Protection Policy disclosed in this document, establishing the way it collects, stores and processes the Personal Data, ensuring its confidentiality and safety. 

This Personal Data Privacy Policy applies to all personal information collected, processed and stored by CP through the several existing forms and channels.

When accessing areas which require personal data, referred to as “Personal Data”, the service user (hereinafter referred to as data subject) shall be aware of this Personal Data Privacy Policy and the Terms and Conditions of use and service provision of CP. The access to the Online Ticket Office is only possible through the user registration (myCP).  

For the purpose of item 1 of article 8 of the GDPR, i.e., with regard to the direct service offering of the so-called information society, CP ensures that no personal data is requested from persons under 16, except if the prior express consent of the corresponding representatives – whether they are parents, tutors or guardians - had been obtained. Such representatives shall be aware of this Personal Data Privacy Policy.

Data protection and privacy principles
The processing operations carried out by CP comply with the fundamental principles of data protection and privacy, which ensure the proper functioning of the processes, the trust with customers and partners, as well as the public image:  lawfulness, impartiality and transparency, purpose limitation, data minimisation, accuracy, retention limitation, integrity, confidentiality and transmission. 

Lawfulness foundations
CP assures that all personal data are legally processed, i.e., subject to a strict compliance with the lawfulness foundations imposed by the GDPR.  This lawfulness foundation exists when at least one of the following situations occur:  The data subject gives his/her consent to one or more required purposes; if an agreement is concluded, of which the data subject is part of, or to pre-contractual steps requested by the data subject; to the compliance with a legal obligation to which the person responsible for the processing is subject; for the defence of the data object’s vital interesses; for the performance of tasks carried out in the public interest or public authority; for the purpose of the legitimate interests of the person responsible for the processing.

Purpose of the processing 
The Personal Data transmitted by the data subject through the different means of interaction with CP is intended to one or several of the following purposes:

1. Conclude a transport agreement and manage the contractual relationship established, including the validation, supervision and gathering of official reports;
2. Handle and respond to information requests, suggestions and complaints; 
3. Delivery of lost objects;Provide the SIM service (Integrated Mobility Service, made available to disabled persons); 
4. Receive spontaneous applications and recruitment procedures;
5. Enhance the browsing experience in the website cp.pt and App CP (cookies);
6. Provide information related to changes or occurrences with the provided services (e.g.: traffic changes);
7. Make available information regarding the products and special offers of CP and its partners, sending of newsletters and implementation of contests;
8. Conduct customer satisfaction surveys;
9. Respond to service assessment questionnaires;
10. Manage the relationship with the customer (e.g.: personalised services);
11. Customer segmentation to improve the service offering or fees and loyalty programmes, in accordance with tastes and preferences of use of the provided services;

(for the purposes mentioned in items 1 to 5, the consent of the Data Subject is not required, in accordance with paragraph b) of item 1 of article 6 of the GDPR)

Cookies Policy
In order to provide a more personalized service, the website cp.pt uses cookies to collect and store information. A cookie is a small information file that is stored on the user’s device (e.g.: Computer, cell phone) and allows to remember previous choices, dates and visits. That is, they save the user’s preferences regarding the use of the website, personalising his/her experience so that it is not necessary to reconfigure the website in each visit.

Type of cookies used

Essential cookies
Some cookies are needed to access specific areas of the website.  They allow you to browse the website and use its applications, such as accessing safe areas of the website through login.  Without such cookies, the services that require them cannot be provided.

Analytical cookies
These cookies gather information regarding your use of the website, such as the pages you visit the most.  Such data can be used to help optimise our Internet pages and make browsing easier.  These cookies do not collect information related to your identity. All information collected by these cookies is aggregated and, therefore, anonymous.

Functional cookies
These cookies allow the website pages to save the options made by the user while browsing. That is, they save the user’s preferences regarding the use of the website, so that it is not necessary to reconfigure the website in each visit.

Advertising cookies
These cookies help measuring advertising effectiveness.  However, they do not identify the user.

In most cases, the cookies are deleted when you close your browser (session cookies).  Some cookies are more persistent and remain in your browser until they expire or until you delete them.

You can change the definitions of your browser to block or delete cookies, or to warn you every time a new cookie is stored on your computer, enabling you to decide if you accept it or not.  If you decide to block or delete our cookies, you may not be able to access all our services and it may have some impact on the performance of our website in your system.

You can find more information regarding the setting of each type of browser (e.g.:  Firefox, Chrome, Explorer, Opera) in the corresponding institutional websites.

Consent 
The Personal Data transmitted by the Data Subject may require his/her express consent, in accordance with the intended purpose. In such cases, the data subject freely gives his/her consent in a specific, informed and explicit way, in each of the means of interaction with CP.  

The data subject may always require the withdrawal of any of his/her consents for the corresponding processing. The withdrawal can be carried out through the website, in the personal area myCP, or through the filling of a specific form to be delivered in our sales points upon unambiguous identification of the data subject.  The consent withdrawal, regarding a certain personal data processing, does not compromise the lawfulness of the processing already carried out based on such consent.

Protection and safety
CP undertakes to adopt administrative, technical, physical and organisational measures which ensure the safety, integrity and privacy of the data subject’s personal data, appropriate to the risk of each processing and consistent with the practices established in the European Union.  Such measures are applied to protect the personal data against its dissemination, improper use, non-authorised access or the loss, change or destruction, as well as any other form of unlawful processing. 

Partners and subcontractors who have access to personal data shall be obliged to adopt the safety, organisational and technical protocols and measures required to the protection of such data.

The data used to make payments, particularly regarding credit/debit cards, are provided directly in the platforms of the corresponding service providers.  CP does not have access to such data.

The data subject ensures that the personal data he/she provides is true and accurate and undertakes to notify any change thereof.  Any damage caused to CP or to any third party due to the provision of incorrect, inaccurate or incomplete information in the registration forms, is the sole responsibility of the person who introduced or provided such information.

The data subject undertakes to not disclose his/her username and password.  If he/she decides to share such data with someone, he/she shall be responsible for all activities performed in his/her personal area of myCP.

Transmission to third parties 
The provision of information or services by CP may, eventually, lead to the transmission or access to the personal data by partners or subcontractors.  CP ensures that it will only resort to entities that offer adequate guarantees for the implementation of appropriate technical and organisational measures, so that the data processing ensures the compliance with the applicable legislation.  The categories of partners and subcontractors include:

• Other railway operators;
• Transport operators complementing the railway service;
• Car rental companies;
• Housing units;
• Customer services and ticket sales (Travel agencies, Helpline);
• E-mail services;
• IT services, particularly application management and administration and infrastructure provision;
• Audit services and similar;
• Payment services and fraud control.

The provided data may also be transferred to official entities, in compliance with legal obligations.

CP only transfers personal data to entities located in countries outside EU, in compliance with legal obligations, or if the compliance with national and community legal standards is ensured.

CP does not sell, buy or markets personal data, in any way.

Links
In its website, CP includes links to other Internet pages or to resources managed by third parties, including its partners.  

CP assumes no responsibility for the content, accuracy, availability and privacy practices of such Internet pages or external resources.  CP does not accept, nor is liable, directly or indirectly, for damages, losses or violations caused by, or perceived to be caused by, or related to the use of such Internet pages or external resources.

Data subject rights 
The legislation of data protection grants to the data subjects the right to information regarding the purposes and processing of their data, the right to access, correct, delete and restrict the processing, and the right to transfer their data and contest automated individual decisions.  

To exercise the abovementioned rights, the data subject shall contact the Data Protection Officer of CP (protecaodado@cp.pt).

If the customer only provided his/her personal data through myCP, the deletion of his/her registration implies the deletion of the corresponding data. However, the deletion of myCP registration means that it is not possible to access the corresponding personal data and the purchases made. In this case, all after-sales operations (e.g.: revalidation/refund) shall be carried out in person in a ticket office or in the customer service office. 

The data subject may also submit a complaint to the competent national supervisory authority.

Personal data storage period
When there is no specific legal requirement, the Personal Data shall be stored for no longer than is absolutely necessary, in order to comply with their purposes.  The period during which the data is stored depends on the purpose for which the information is processed.

Contacts
The data subject may contact us for any questions regarding the application of the General Data Protection Regulation by CP, through the website page of Customer Information/Contacts, the e-mail protecaodado@cp.pt or by mail sent the Data Protection Officer, CP- Comboios de Portugal, Calçada do Duque, nº 20, 1249-109, Lisbon, Portugal.

Privacy policy changes
In order to ensure the adequacy of the document, CP may change at any time this Privacy Policy, without prior notice and with immediate effect.   Such changes shall be properly advertised on the website and ticket offices and, if needed, requested the renewal of the knowledge and consent.

This Privacy Policy was updated on 15th of May 2018.