RSM56 Unipessoal L.D.A, with NIF PT517048248, located at Rua Castilho 13, D. 8ºA, Lisbon, and contact at dataprotection@incuscapital.com, as the property owner and Data Controller, informs you that your data will be processed for the following purposes:
Purposes:
- Establishment of the contractual relationship and related actions between the Customer and the Property. Management, development, and maintenance of the relationship and admission rules.
- Administration of your reservation and processing of your registration as a customer of the Apartment, your reservation, and your stay, as well as the subsequent commercial and contractual relationship with you.
- Economic and administrative management of payments and receipts.
- Handling of incidents that may arise during the stay.
- Satisfaction surveys with the aim of improving the quality management processes related to the contracted services and stay management.
- Defense of the interests of the entity in case of disputes.
- Commercial communications through any means to offer products and services similar to those acquired. If you do not wish to receive this type of information, you can object by sending an email to dataprotection@incuscapital.com.
- Video surveillance to maintain the security of the facilities, property, and people.
Legal Basis and Data Retention Periods:
- Execution of the contractual legal relationship established between the parties.
- Legal compliance with state and local regulations that apply, particularly Decree-Law No. 128/2014 on tourist apartments in Portugal, as well as any other applicable legislation.
- Legitimate interest of the property in identifying potential issues or areas for improvement in its quality system, keeping you informed about products and services related to your stay, and defending the interests of the parties in case of conflicts, and for the maintenance of security for facilities, property, and people. Data will be retained for the duration of the contractual relationship, in accordance with legal deadlines, and, once the relationship is terminated, for the expected statute of limitations period for any resulting responsibilities. Data under consent will be retained until deletion is requested, and opposition to commercial processing does not affect the main service provision. Data related to video surveillance will be retained for 30 days.
Data Recipients:
- Banks and financial institutions for the economic management of the stay.
- Tax authorities and other state, regional, and local public administrations and entities for tax declarations (taxes and fees).
- Courts and tribunals for the management of potential disputes arising from the stay.
- State Security Forces and Bodies in the event of any security incidents, based on formal legal requirements.
- Public authorities, regulators, or governmental or jurisdictional bodies when required by law, local regulations, or regulatory compliance.
- Entities of the MESETA PROPERTIES GROUP to comply with compliance and reporting policies.
The entity uses Microsoft Office 365, established in the U.S., adhering to the Data Privacy Framework Adequacy Decision, which allows the flow of personal data of European citizens to the United States and is in effect from July 10, 2023.
Exercising Rights:
Data subjects have the right to exercise the rights specified in Articles 15 to 22 of the GDPR at any time by sending an email to dataprotection@incuscapital.com and properly verifying their identity. User consent for the processing and transfer of personal data is revocable at any time without retroactive effects, in accordance with applicable regulations. To do so, simply contact the property through the email dataprotection@incuscapital.com. Interested parties can also file a complaint with the Comissão Nacional de Proteção de Dados at www.cnpd.pt.
The property informs you that it contracts with Libere Hospitality S.L. for the comprehensive management of your property, executing the services related to your stay and lodging through a mandate agreement between both parties. They also regulate data processing between them through a data processing agreement.