Privacy Policy

This Privacy Policy describes how https://lisbonforcompanies.pt/ collects, uses, stores, and protects your personal data when you visit our website https://lisbonforcompanies.pt/ or use our services, such as corporate suite bookings, gastronomic experiences, or team events. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and other applicable laws in Portugal.

1. Types of Data Collected

We collect the following personal data, depending on your interactions with us:

• Identification Data: Name, surname, job title, company.
• Contact Data: Email, phone number, billing address.
• Booking and Preferences Data: Stay dates, number of participants, dietary preferences (e.g., vegan options), event details (e.g., tours or workshops).
• Technical Data: IP address, browser type, cookie data (see Cookie Policy), site access information.
• Payment Data: Credit card or other payment details (processed by secure third parties, not stored directly by us).
• Others: Information provided in contact forms, newsletters, or feedback.

We do not collect sensitive data (e.g., health, ethnic origin) unless explicitly needed for personalized services (e.g., food allergies), with your consent.

2. Purposes of Data Processing

We use your data to:

• Manage bookings and provide services (e.g., suite confirmations, gastronomic experiences like Fado Night or Wine Taste).
• Send commercial communications, newsletters, or promotions about our services (with consent).
• Improve the site and services through usage analysis (e.g., visit statistics).
• Comply with legal obligations (e.g., tax invoicing).
• Prevent fraud and ensure security.

3. Legal Basis for Processing

• Contract: To process bookings and deliver requested services.
• Consent: For marketing, newsletters, or non-essential cookies (revocable at any time).
• Legitimate Interest: To improve the site or respond to inquiries.
• Legal Obligation: For tax or regulatory compliance.

4. Data Sharing

We share data only when necessary:

• With partners (e.g., hotels, experience providers like boat tours or cooking workshops) to fulfill bookings.
• With payment processors (e.g., Stripe or PayPal) for secure transactions.
• With competent authorities if required by law (e.g., CNPD or courts).
• We do not sell data to third parties. International transfers (e.g., to tools like Google Analytics) are protected by EU standard contractual clauses.

5. Data Subject Rights

Under GDPR, you have the following rights:

• Access: Request a copy of your data.
• Rectification: Correct inaccurate data.
• Erasure ("Right to Be Forgotten"): Request deletion when no longer needed.
• Objection: Object to processing for marketing or legitimate interests.
• Restriction: Restrict processing in certain situations.
• Portability: Receive data in a structured format.
• Withdrawal of Consent: At any time, without affecting prior processing.

To exercise rights, email [[email protected]]. We will respond within 1 month (extendable to 2 months for complex cases). You can complain to the CNPD (www.cnpd.pt) if we are non-compliant.

6. Storage Period

We store data for as long as necessary:

• Booking data: Up to 5 years for tax purposes.
• Marketing data: Until consent withdrawal.
• Technical data: Up to 2 years for analysis. After that, we anonymize or delete.

7. Security Measures

We implement technical and organizational measures to protect data:

• Encryption (e.g., HTTPS on the site).
• Restricted access to data.
• Regular backups and firewalls.
• Periodic audits. In case of a data breach, we notify the CNPD within 72 hours and affected individuals if high risk.

9. Changes to This Policy

We may update this policy periodically. The latest version will always be available on the site, with the update date. Significant changes will be notified by email or on the site.

Last Updated: November 08, 2025.