1. Who we are

Your personal data will be processed by Rui Forte, Sole Trader (Tax ID 246712090), operating under the commercial brand Praça 44 Boutique Apartments, hereinafter referred to as the Data Controller.

This entity is responsible for determining how your personal data is collected, used and protected in the context of providing our accommodation services.

2. What personal data we collect

In the context of providing our Local Accommodation services, we collect only the data strictly necessary to manage your reservation and comply with applicable legal obligations.

We may collect the following data:

Identification and Contact Data

  • Full name

  • Identification document number (Citizen Card or Passport)

  • Nationality

  • Date of birth

  • Address

  • Email address

  • Phone number

Payment Data

  • Billing information

  • Payment details associated with the reservation

Payments are processed through secure and certified platforms, which may include partners such as Stripe, Airbnb, Booking.com, or other payment service providers. Full payment card details are not stored on our local systems.

Stay Information

  • Check-in and check-out dates

  • Number of guests

  • Any special requests associated with the reservation

3. Why we process your information (Purpose and Legal Basis)

The processing of your personal data is based on the following legal grounds under the General Data Protection Regulation (GDPR):

Contract performance

(Article 6(1)(b) GDPR)

To:

  • Process and confirm your reservation

  • Manage payments and invoicing

  • Organize check-in and check-out

  • Provide assistance during your stay

Compliance with legal obligations

(Article 6(1)(c) GDPR)

To:

  • Comply with tax obligations to the Portuguese Tax Authority

  • Complete and submit Accommodation Bulletins to the competent authorities, namely AIMA – Agency for Integration, Migration and Asylum, as well as the security forces (PSP or GNR), as required by Portuguese Local Accommodation legislation.

Legitimate interest

(Article 6(1)(f) GDPR)

To:

  • Ensure the security of our apartments

  • Prevent fraud or misuse of services

  • Continuously improve the quality of the services provided

Failure to provide the required data may make it impossible to complete the reservation or provide accommodation services, due to the legal obligations associated with these services.

4. Who we share your data with

Your personal data may be shared with third parties only when necessary for the provision of services or compliance with legal obligations.

These entities may include:

Public Authorities

  • Portuguese Tax Authority

  • AIMA – Agency for Integration, Migration and Asylum

  • Security forces (PSP or GNR)

Service Providers and Partners

  • Reservation management systems (Channel Manager)

  • Online booking platforms (Airbnb, Booking.com, among others)

  • Secure payment processors (e.g., Stripe)

  • Accounting services

  • Customer support technology providers

All partners are contractually required to comply with GDPR and ensure the security of personal data.

5. International data transfers

Whenever possible, your data is processed within the European Economic Area (EEA).

If it becomes necessary to use services or technological partners located outside the EEA, we ensure that such transfers are carried out under appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.

6. How long we retain your data

Your personal data is stored only for the period necessary to fulfill legal and operational purposes.

In particular:

Invoicing data

Stored for 10 years, as required by Portuguese tax legislation.

Accommodation bulletins

Stored for 1 year, in accordance with applicable legislation.

After the legal retention periods expire, the data will be securely deleted or anonymized.

7. Data security

We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure or alteration.

These measures include the use of secure systems, access controls and certified technology providers.

8. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Request access to your personal data

  • Request the correction of inaccurate or incomplete data

  • Request the erasure of your data (“right to be forgotten”), except when retention is required by law

  • Request the restriction of processing of your data

  • Object to the processing of your data in certain circumstances

  • Request data portability

To exercise any of these rights, you may contact us using the contact details below.

You also have the right to lodge a complaint with:

CNPD – Portuguese Data Protection Authority
https://www.cnpd.pt

9. Contact details

For any questions related to privacy or the processing of personal data, you may contact us:

Praça 44 Boutique Apartments
Responsible: Rui Forte

Email: praca44apartments@gmail.com
Phone: +351 916 295 118

Address:
Praça Municipal, nº44
4700-435 Braga
Portugal