Privacy and Data Protection Policy (GDPR)

At Sunny Aljezur, privacy and the security of personal data are fundamental priorities. This policy outlines how we collect, use, and protect your information when using our website and accommodation services.

1. Data Controller 

The entity responsible for processing your personal data is Maria da Conceição Seromenho Pacheco dos Santos, with VAT number 129367346, based at Estrada Nac. 268 Misericórdia - Cx Postal 564 X, 8670-211 Aljezur. You can reach us via email at sunnyaljezur@gmail.com.

2. Data Collected and Purpose

We collect only the strictly necessary data to manage your relationship with us:

• Booking & Communication Management: Name, email, phone number, address, and payment details.Guest communications and reservation data are centralized through the specialized software Smoobu. Payments are securely handled by Stripe.
• Legal Obligation (AIMA): Identification documents for non-Portuguese guests to comply with mandatory reports to local authorities. This collection and automated submission are performed through the online service Hostkit.
• Contact Forms: Name and email to answer your inquiries.

3. Data Sharing 

Your personal data is never sold or shared with third parties for marketing purposes. It is shared exclusively with technical partners and authorities to execute the services and comply with the law:

• Smoobu: System for booking management and customer communication.
• Stripe: Secure payment processing gateway.
• Hostkit: External digital service used for the secure filling and automated submission of accommodation forms to AIMA (Agency for Integration, Migration and Asylum).
• Public Authorities: AIMA and the Portuguese
• Tax Authority, to strictly comply with current legislation.

4. Data Retention Period

We retain your personal data only for the period legally required by Portuguese tax and border control authorities, or until you request its deletion, where applicable.

5. User RightsUnder the GDPR,

You have the right to access, rectify, restrict, transfer, or request the deletion of your personal data. To exercise these rights, simply contact us via email at sunnyaljezur@gmail.com. You also retain the right to lodge a complaint with the National Data Protection Commission (CNPD).