General Information
This Privacy Policy aims to inform you of the general rules regarding privacy and the processing of your personal data, which we collect and process. The privacy policy is related to the current website; we are not responsible for any content or privacy policy of other websites. Any external link will be clearly identified. By accessing our website, you commit to accepting and respecting this Privacy Policy.
Our website fully respects your privacy rights and will not collect any personal information in an abusive manner. Any personal information you provide to us will be treated securely and confidentially, with the legal basis for data protection being the General Data Protection Regulation (GDPR).
Responsible Entity and Data Protection
Data Controller
The entity responsible for processing your data is Lisboa Autêntica, Lda, headquartered at Largo da Severa, 7A and 7B 1100-588 Lisbon, NIF 513706429 and contact email: info@lisboaautentica.com.
Right to Complain
If you consider that the processing of your data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Portugal, this authority is the National Data Protection Commission (CNPD).
International Data Transfer
For the provision of certain services by subcontractors or technological partners (such as statistical analysis, security, or hosting services), data may be processed on servers located outside the European Union.
In these cases, we ensure that our partners comply with the legal mechanisms and safeguards required by the GDPR, namely through the adoption of Standard Contractual Clauses approved by the European Commission, ensuring that the level of protection for individuals is not compromised.
Collection and Use of Personal Information
Requests related to the information provided
If you are concerned about how the information provided through our website is treated, please do not hesitate to present us with all your questions.
Your rights as a data subject
The General Data Protection Regulation grants rights to data subjects so that they can, in a simple way, have control over their data.
In case of doubts or to exercise your rights, you can contact us via email: info@lisboaautentica.com. You should include all possible forms of identification, specifically the data you previously provided to us through the website.
The following are your main rights under current legislation:
- Right to Information
You have the right to be informed, in a clear and accessible way, about how we collect, use, store, and share your personal data. - Right of Access
You can request access to the personal data we hold about you at any time, as well as information on how we process it. - Right to Rectification
You can request the correction or updating of your personal data if it is incorrect or outdated. Whenever applicable, you can make these corrections directly through your client area. - Right to Erasure (Right to be Forgotten)
You can request the deletion of your personal data, except when it is necessary for the fulfillment of legal or contractual obligations. - Right to Restriction of Processing
You have the right to request the restriction of the processing of your data in certain situations, for example, when you contest their accuracy or object to their processing. - Right to Data Portability
You can request that your personal data be provided in a structured, commonly used, and machine-readable format, and you can also request the transmission of this data to another entity, whenever technically feasible. - Right to Object
You can object at any time to the processing of your personal data, particularly when the processing is carried out for direct marketing purposes or based on legitimate interests. - Right not to be subject to automated decisions
You have the right not to be subject to decisions taken solely based on automated processes, including profiling, which may significantly affect your interests. - Right to lodge a complaint
If you consider that the processing of your personal data does not comply with applicable legislation, you have the right to lodge a complaint with the National Data Protection Commission (www.cnpd.pt).
Why we process your personal data
The need for data processing varies depending on the case.
Online booking process
We collect some additional data during the booking process for the conclusion of the purchase and sale contract and service provision, namely to:
- Communicate with you regarding the status of the booking;
- Activate mechanisms to prevent potential fraud during the purchase process and block transactions;
- Manage possible returns after purchases are made;
- Legal purposes such as invoicing.
We will process your data for the time necessary to manage the purchase of the products or services you acquired, as well as for the fulfillment of other legal obligations.
The data you provide to us will not be transmitted to third parties except to ensure the provision of the contracted service; any external provider will be contractually bound to Article 28 of the GDPR.
Contact Forms
The data you provide when filling out the contact form(s) on the website are treated as confidential and are only used to process the request you addressed to us.
The period for which personal data is stored and kept varies according to the purpose for which the information is processed. As a rule, we delete or anonymize all personal information within 90 days after sending the final response.
The data you provide to us will not be transmitted to third parties.
Newsletter Subscription
On our website, you have the possibility to register to receive our newsletter. If you have authorized the sending of our newsletter, we use your email address and eventually your name to send information about products, promotions, and news from our brand.
You can revoke your consent to receive the newsletter at any time through your client area (when applicable) or by clicking on the unsubscribe link we place at the end of each newsletter. Revocation leads to the deletion of the collected user data.
We may eventually use external processors contracted for sending the newsletter; these will be contractually bound to Article 28 of the GDPR. We exclude the possibility of a broader transmission to third parties.
Access Log
When accessing our website through the browser used on your device, the following data is automatically sent to the web server and stored in our database without your intervention:
- the IP address of the device accessing the internet;
- the date and time of access;
- the browser used and eventually the operating system (User Agent).
We collect this information to perform security and system stability analyses, as well as to ensure that the connection to the website is made without difficulties.
We exclude, in principle, the possibility of transmitting this data to third parties.
Google Analytics
To develop satisfactory user experiences and for the continuous optimization of our website, we use Google Analytics, a web analysis service belonging to Google Inc. In this context, anonymized usage profiles are created and cookies are used. The cookie generates the following information about your use of our web page in this process:
- browser type/version,
- operating system used,
- Referrer (the page visited immediately before),
- host name of the accessing computer (IP address),
- time of server inquiry.
The information collected is used to analyze the use of our website. IP addresses are anonymized so that it is not possible to assign them to individuals. In the reports prepared based on Google Analytics, there is, therefore, no personal reference. This treatment is carried out only with your prior consent.
The configuration of these cookies is predetermined by the service proposed by Google, and the information generated by the cookie about the use of the website is transmitted and stored by this entity. For more information, see the Google Privacy Policy.
Remarketing
We use Google remarketing tools to present our online offer tailored to you in Google services (for example, in search, on YouTube, etc.). In this process, information about your browsing behavior is collected anonymously and stored in cookie text files, to be later analyzed by an algorithm. With remarketing measures, we aim to ensure that we only show you advertising oriented to your interests on your devices.
You can object at any time to the presentation of these personalized ads by excluding the use of Google cookies. To do so, you should visit the Ad Settings at https://adssettings.google.pt
Cookies used for remarketing purposes and the information contained therein are stored for a period of 90 days, after which they are automatically deleted by the Google service.
Changes to the Privacy Policy
It is possible that we modify the information stated in our Privacy Policy when we consider it appropriate. If the change made is significant in relation to your privacy, we will notify you through our website, placing a prominent notice and/or by sending a message to your email address, whenever applicable.
You should then review the changes, evaluate them, and you may object to or cancel any service if you so wish.
Information About Cookies
On our website, we use cookies to help us optimize the various pages as well as improve your user experience. Cookies are small files that a website, when visited by the user, places on their device through the internet browser. Cookies do not cause any damage, do not contain viruses, Trojan horses, or other harmful software.
The information stored in cookies from our website is used exclusively by us and is never provided to third parties, with the exception of third-party cookies that are used and managed by external entities and are intended for statistical analysis and eventual security mechanisms.
Cookie Details
| Category | Name | Domain | Purpose | Duration |
|---|---|---|---|---|
| Essential | multisnet-token | lisboaautentica.com | Security: Authentication and user session management. | Session |
| Essential | multisnet-csrf_token | lisboaautentica.com | Security: Protection against Cross-Site Request Forgery (CSRF) attacks. | 1 year |
| Essential | multisnet-default_lang | lisboaautentica.com | Functionality: Remembers the user's preferred language. | Session |
| Essential | CookiesControl | lisboaautentica.com | Management: Saves the user's cookie consent preferences. | 1 year |
| Performance | _ga / _ga_DPZLV03SHB | lisboaautentica.com | Statistics: Google Analytics - User distinction and traffic analysis. | 2 years |
| Marketing | _gcl_au | lisboaautentica.com | Advertising: Google AdSense - Ad conversion management. | 3 months |
| Marketing | IDE | doubleclick.net | Advertising: Google DoubleClick - Campaign effectiveness measurement. | 1 year |
| Marketing | __Secure-1PSID / __Secure-3PSID | google.com | Marketing: Profiling and ad personalization in Google services. | 2 years |
| Marketing | SID / SAPISID / APISID | google.com / .pt | Marketing: Authentication cookies and personalization of integrated Google services. | Up to 2 years |
You can always block the use of cookies by activating that option in your browser; you can do it for all cookies or only for some. Please note that if you block or delete one or more cookies used by our website, it may not function as expected.
To consult more information on this topic and learn how to manage cookies, you can visit: www.allaboutcookies.org.