Who are we?

Your data will be processed by Agitarideias Energeticas, Lda, nipc 509421679, hereinafter referred to as Castle Inn Lisbon. HELLOVACATIONS).

Castle Inn Lisbon is responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (hereinafter referred to as GDPR).

Why do we process your information?

Your personal data may be collected and processed by Castle Inn Lisbon for the following purposes:

a) To comply with legal obligations such as compliance with the Immigration and Borders Service and for invoicing.

b) For contractual purposes, namely payment transactions, management of arrivals and departures, guest management, provision of complementary services to the stay such as cleaning, transfers;

c) For contact purposes via email, mobile communications such as WhatsApp, digital platforms, in the context of marketing strategies, information and commercial and contractual communications, as well as for requests for information.

d) For the purposes of protecting assets owned or held by Castle Inn Lisbon, as well as for statistical analysis purposes.

If the guest fails to provide personal data for the purposes set out in paragraphs a) and b), Castle Inn Lisbon will be in breach of its legal obligations and may consequently cancel the reservation, without the right to a refund or any compensation, as well as the provision of services by Castle Inn Lisbon whose weaknesses cannot be attributed to it.

What types of personal data do we collect?

Collection and processing of personal data necessary for the provision of contracted services, requests for information or pre-contractual management, namely identification, contact, banking or payment card data.

What do we process your information for?

The processing of personal data will be carried out based on the existence of a reservation made by the guest and in compliance with legal obligations imposed on Castle Inn Lisbon, namely by legislation on the Entry, Stay and Exit of Foreigners in the National Territory and tax legislation (article 6.1 b) and c) of the GDPR).

In addition, the personal data collected for the purposes set out in the preceding paragraph c) are based on the consent given by the guest to Castle Inn Lisbon for the respective processing (article 6.1 a) of the GDPR).

For the purposes set out in the preceding paragraph d), Castle Inn Lisbon will process personal data, based on the legitimate interest pursued by the guest (article 6.1 f) of the GDPR).

For how long do we keep the guest's information?

The personal data collected will only be kept for the minimum period necessary for the purposes for which they were collected or subsequently processed.

To whom may we share your personal data?

Castle Inn Lisbon may have to share some of your personal data with other recipients, namely:

a) Organisations and/or companies affiliated with Castle Inn Lisbon, provided that they comply with an equivalent policy on personal data protection.

b) Public entities to which Castle Inn Lisbon is legally obliged to provide information, namely the Immigration and Borders Service and the Tax Authority;

c) Subcontractors who provide certain services related to your personal data under the cover of a subcontract and for the sole purpose of providing technical assistance to Castle Inn Lisbon. These include, in particular, website hosting providers, email marketing service providers, cleaning service companies, law firms, accounting firms and insurance companies.

d) The competent authorities to which Castle Inn Lisbon is legally obliged to disclose information in the course of legal proceedings or upon detecting technical and/or security problems, such as competent judicial entities or supervisory authorities.

Are data transferred to countries outside the European Union?

Personal data will not be transferred to any entity established outside the territory of the European Union.

Exceptionally and under certain conditions, Castle Inn Lisbon may transfer your personal data to countries outside the territory of the European Union, in accordance with applicable legislation, namely for the purposes of data hosting or storage, technical outsourcing of processing, back-up and recovery of hosted data, development of services.

Castle Inn Lisbon guarantees that it will not transfer personal data to countries that do not guarantee an adequate level of protection, in accordance with the provisions of the GDPR.

What are the rights of the holder of personal data?

At any time, under the terms of the GDPR, you may request access to your personal data, as well as its rectification or erasure.