Reset Password

0
0
Total: 0,00 €
View CartCheckout
  1. Home
  2. Privacy statement

Privacy statement

June 16, 2020 by Tomoparadise

Last updated: 7 October 2026

1. Who we are

The Paradise Portugal website (www.paradiseportugal.com) is operated by Infinity Win Lda, the data controller for the personal data described in this privacy statement:

Infinity Win Lda
Rua dos Bombeiros Voluntários, Centro Comercial do Rossio – Loja 11
2530-147 Lourinhã, Portugal
VAT: PT514469471
E-mail: paradiseportugal.com@gmail.com

For any question about your personal data, or to exercise your rights, please write to us at paradiseportugal.com@gmail.com.

2. The data we collect

  • Booking requests and bookings: name, e-mail address, telephone number, dates of stay, number of guests, the property booked and any message you send us.
  • Customer account (optional): username, e-mail address and password (stored in encrypted form), your bookings, invoices and messages.
  • Sign in with Google (optional): if you choose to sign in with your Google account, Google sends us your name, e-mail address and Google account identifier. We never receive your Google password.
  • Guest registration form (sent before arrival): full name, e-mail address, mobile number, identity document number (ID card, passport or tax number), number of adults and children and the children’s ages, estimated arrival and departure times, preferred language and comments.
  • Payments: the 10% booking deposit is paid online by card through Stripe. You enter your card details directly with Stripe; we never see or store your full card number. We keep the amount, date and status of each payment. The balance is paid in cash on arrival.
  • Contact form, e-mail and WhatsApp: your name, e-mail address, telephone number and the content of your message.
  • Technical data: IP address, browser type, device, pages visited, date and time, recorded by our server for security purposes and, only with your consent, by Google Analytics.

3. Why we use your data and on what legal basis

  • To handle your booking request, organise your stay with the owner of the property and provide customer service: performance of a contract or steps taken before entering into a contract (Article 6(1)(b) GDPR).
  • To take payments, issue invoices and keep our accounts: legal obligation (Article 6(1)(c) GDPR).
  • To register guests and report their stay to the competent authorities where Portuguese law requires it: legal obligation (Article 6(1)(c) GDPR).
  • To answer your messages: our legitimate interest in responding to enquiries, or steps taken before entering into a contract.
  • To protect the website against spam, fraud and attacks (Google reCAPTCHA, security logs, Stripe fraud prevention): our legitimate interest (Article 6(1)(f) GDPR).
  • To measure the audience of the website with Google Analytics: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
  • To send you news or offers by e-mail: only with your consent; you can unsubscribe at any time.

We do not sell your personal data, and we do not make decisions about you based solely on automated processing.

4. Who receives your data

  • The owner or manager of the property you book, who receives the information needed to welcome you (name, dates, number of guests, contact details, arrival time).
  • Our service providers, acting on our behalf and on our instructions: OVHcloud (website hosting, France), Stripe (online payments), Google (sign-in with Google, Google Analytics, reCAPTCHA, backups), our e-mail provider, and WhatsApp (Meta) if you choose to contact us through WhatsApp.
  • Public authorities, when the law requires it (for example the tax authorities or the authorities responsible for guest registration).
  • Our accountant and legal advisers, where necessary.

5. Transfers outside the European Union

Some of our providers (Google, Stripe, Meta) may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework and/or by the standard contractual clauses of the European Commission.

6. How long we keep your data

  • Booking, payment and invoice data: 10 years, as required by Portuguese tax and accounting law.
  • Guest registration data: for the period required by law, and no longer than necessary.
  • Messages and booking requests that do not lead to a booking: up to 2 years after our last exchange.
  • Customer account: until you ask us to delete it (subject to the legal retention periods above).
  • Google Analytics data: 14 months.

7. Cookies

We use:

  • Necessary cookies, without which the website cannot work: language choice (trp_language), your cookie choice (pp_consent, 6 months), login and customer account (wordpress_*), payment and cart (woocommerce_*, wp_woocommerce_session_*), security and anti-spam (Google reCAPTCHA on forms) and fraud prevention (Stripe cookies on the payment page).
  • Audience-measurement cookies (Google Analytics: _ga, _ga_*), set only if you click “Accept” in the cookie banner. Without your consent, Google Analytics does not set any cookie (Google Consent Mode).

You can change your choice at any time with the “Cookies” link at the bottom of every page, or here: manage my cookies. You can also delete cookies in your browser settings.

8. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time (without affecting processing carried out before). To exercise these rights, write to paradiseportugal.com@gmail.com; we will reply within one month.

You also have the right to lodge a complaint with the Portuguese data protection authority: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

9. Security

Our website uses HTTPS encryption. Access to personal data is limited to the people who need it, and the website is kept up to date and backed up regularly. No transmission over the Internet is completely secure, but we take reasonable measures to protect your data.

10. Minors

Bookings must be made by adults (18 years or older). Data about children (number and age) is only collected to prepare your stay.

11. Changes to this statement

We may update this privacy statement, for example if our services or the law change. The date of the latest update is shown at the top of this page.