“Controler” is the natural or legal person who, individually or jointly with other entities, determines the purposes and means of processing personal data. Lisbeyond Group assumes itself, unless notified otherwise, as responsible for the processing of your personal data.
The ”Data Subjects” are the natural persons to whom the data relates.
I. Data Categories and Purpose of Respective Processing
We may collect and obtain your personal data, while providing services, for validation within the scope of our services, as well as, as a user of this website. The data will be processed for the following purposes: (a) to fulfil the provision of our services; (b) to comply with legal and regulatory obligations to which we are subject; (c) to defend legitimate interests in the effective and lawful exercise of our activity, provided that such interests are not outweighed by your interests.
To make it easier to understand the basis and conditions of the processing of your personal data, we have listed the necessary information in the following table:
1 – Name, email, telephone contact, etc.:
Purposes: Direct marketing, sending information about services provided, newsletters and communications via email and short messages (SMS)
Legal Basis: The processing of personal data is necessary for the creation and elaboration of performance reports and internal analytical evaluations.
2 – Name, email, telephone contact, etc.:
Purposes: Contact in response to requests for information/commercial monitoring…
Legal Basis: The processing of personal data is necessary for the performance of a contract to which the data subject is a party or for taking pre-contractual steps at the data subject’s request.
3. Name, email, telephone contact, etc.:
Purposes: Manage the booking, communication with the guest, payment
Once the maximum retention period has been reached, your personal data will be irreversibly anonymized, and the anonymized data may be preserved or destroyed securely.
In the event that we need any additional personal data for these or any other purposes, we will always take care to communicate this to you, requesting your consent, when applicable, and providing you with all the necessary information so that you can understand the reason and the treatment conditions.
A. Services without data processing
B. Services With Data Processing
In order to improve our services and provide an exceptional experience for our customers, we collect personal data through our property management system (PMS). The management of all reservations and the creation and elaboration of monthly, quarterly and annual reports used to evaluate the properties’ performance and property owners’ revenue imply the use and treatment of this data. This data includes personal information about our guests, such as first and last name, email, phone number, ID card or passport number, and details of their reservations, such as date of check-in and check-out, total cost of the booking. Every time a booking is made, the guests’ personal data and booking details will be stored for 5 years.
The legal basis for processing this personal data lies in the fulfilment of our contractual obligations to customers and the legitimate interest in continually improving our services. Furthermore, we are committed to ensuring compliance with applicable data protection laws.
The primary purpose of processing this data is to carry out internal statistics and prepare reports. By analysing booking patterns, guest preferences and other relevant metrics, we seek to optimize our operations and adapt our services to meet the specific needs of our customers.
We emphasize that we adopt strict measures to guarantee the security and privacy of the personal data collected.
II. Data transfer
Lisbeyond Group does not transmit your personal data to third parties, except in cases where this is necessary to provide the services you have contracted or to comply with legal obligations to which Lisbeyond Group is subject.
III. Data Subject Rights
You may exercise, free of charge, the following rights before Lisbeyond Group:
Right to information: You have the right to receive information from us about the processing of your personal data.
Right to rectification: You have the right to request the rectification of your personal data that is incorrect or incomplete.
Right to erasure of data: You have the right to request the erasure of your data when the requirements mentioned in art. 17 of the GDPR. Therefore, you have the right, for example, to demand the erasure of your personal data when they are no longer necessary for the purpose for which they were collected, as well as to request the erasure of data, if the processing of your data is based on your consent and it is withdrawn.
This right may be limited in certain situations, such as, for example, when data processing is necessary to comply with legal obligations to which Lisbeyond Group is subject, or when such processing is necessary for the purposes of declaring, exercising, or defending a right. in a judicial or administrative proceeding.
Right to limitation of processing: You have the right to request limitation of the processing of your data when the requirements mentioned in art. 18 of the GDPR. This situation arises, for example, if you dispute the accuracy of your personal data. You may therefore request the limitation of processing for a period that allows the accuracy of the data to be verified.
Right to object: If the processing is based on an overriding interest or if your data is used for direct marketing purposes, you have the right to object to the processing of your data, including the right to object to the processing of data for the purposes of direct marketing.
Right to data portability: As long as data processing is based on consent or compliance with a contract and is also carried out through automated processing, you have the right to receive your data in a structured, commonly used and readable format automatically and transmit them to another data controller.
Right to withdraw consent: To the extent that data processing is carried out on the basis of consent, the user has the right to revoke their consent to data processing, with future effect, at any time and free of charge. If you withdraw your consent, your personal data will no longer be processed, unless there is another legal basis that allows such processing.
Right to lodge a complaint: You also have the right to complain to the National Data Protection Commission, the competent supervisory authority in Portugal, regarding the processing of your data. For more information, visit www.cnpd.pt.
As a security measure, Lisbeyond Group may request specific information to exercise the aforementioned rights, in order to confirm the identity of the data subject.
IV. Your points of contact
Contact points for exercising your rights
For information about your contact points for exercising your rights and for more information, visit https://www.cnpd.pt/.
Contact person for data processing protection issues: firstname.lastname@example.org
You can obtain more information about the processing of personal data by consulting our Cookies Policy and Terms and Conditions, available on our website.
Version dated: January 8, 2024