Avenida House respects your privacy. This policy explains what personal data we collect, why, on what legal basis and what your rights are, under Regulation (EU) 2016/679 (GDPR) and Portuguese Law 58/2019.
1. Data controller
Empresa · to be completed, VAT no. NIF · to be completed, registered at Avenida 19 de Agosto, 3963, 4740-575 Esposende, Portugal, operator of the local accommodation Avenida House, licence no. 145486/AL.
Privacy contact: Email · to be completed · Telefone · to be completed.
2. Data we collect
- Identification and contact: name, email, phone, country.
- Booking data: dates, number and ages of guests, pets, special requests, amounts and payments.
- Legally required identification of foreign guests (name, nationality, date and place of birth, ID document, issuing country, residence).
- Messages exchanged via form, email or WhatsApp.
- Technical and browsing data, as described in the Cookie Policy.
3. Purposes and legal bases
- Managing booking requests, bookings and your stay — performance of a contract (Art. 6(1)(b) GDPR).
- Mandatory reporting of foreign guests (SIBA) and tax obligations — legal obligation (Art. 6(1)(c)).
- Replying to enquiries — pre-contractual steps and legitimate interest.
- Promotional communications — only with your consent, which you may withdraw at any time.
- Website security and abuse prevention — legitimate interest.
4. Retention
- Booking and invoicing data: 10 years, for tax purposes.
- Guest registration forms: for the legally required period, then deleted.
- Enquiries without booking: up to 24 months after last contact.
- Marketing consent: until withdrawn.
5. Recipients
Data may be shared with public authorities where required by law (AIMA/SIBA, Tax Authority); payment providers; hosting, email and technology providers acting as processors under contract and confidentiality. We never sell personal data.
6. International transfers
Where a processor handles data outside the European Economic Area, we ensure appropriate safeguards such as the EU Standard Contractual Clauses.
7. Your rights
- Access, rectification and erasure.
- Restriction of and objection to processing.
- Data portability.
- Withdrawal of consent at any time.
- Lodging a complaint with the Portuguese Data Protection Authority (www.cnpd.pt).
8. Exercising your rights
Send a request to Email · to be completed. We reply within one month and may ask for proof of identity.
9. Security
We apply appropriate technical and organisational measures: encrypted connections (HTTPS), role-based access, two-factor authentication for management and private document storage.
10. Changes
This policy may be updated. The current version is always available on this page with its last-updated date.