Last updated: 13 - October - 2026
1. Who Are We?
BEM-VINDO HOMES is the commercial brand used to promote and provide local accommodation services in Porto and Vila Nova de Gaia, Portugal.
For the purposes of the General Data Protection Regulation (GDPR), the data controller responsible for the processing of personal data in connection with direct bookings made through this website is:
Legal name: Filipe Manuel Silva Ribeiro
Tax Identification Number (NIF): 229409679
Email: gestao.eli.al@gmail.com
In this Privacy Policy, “we”, “us” and “our” refer to the data controller operating the accommodation services under the BEM-VINDO HOMES brand.
2. Why Do We Process Your Personal Data?
We may collect and process your personal data for the following purposes:
a) Compliance with legal obligations
To comply with legal obligations applicable to our accommodation activity, including tax and invoicing requirements and guest registration or reporting obligations imposed by Portuguese law.
b) Managing direct bookings and providing accommodation services
To manage reservations made through the BEM-VINDO HOMES website, process booking requests, manage payments, communicate with guests, organise check-in and check-out, provide access information, manage guest requests and handle matters arising during the stay.
c) Customer service and communications
To respond to enquiries, provide information about accommodation and booking conditions, communicate important information about an upcoming stay and manage complaints or other requests.
d) Payment administration and accounting
To confirm payments, manage refunds where applicable, issue invoices and maintain the records required for accounting and tax purposes.
e) Protection of our property and legitimate interests
Where necessary and proportionate, to protect our property, prevent or investigate fraud or misuse, manage claims and establish, exercise or defend legal rights.
f) Marketing communications
Where applicable, to send information about offers, services or other promotional content, provided that the relevant legal requirements are met and consent is obtained where required.
You may withdraw your consent or object to direct marketing at any time, as applicable.
3. What Is the Legal Basis for Processing Your Personal Data?
We process personal data on the following legal bases, depending on the purpose:
- Performance of a contract or pre-contractual steps: to process and manage your reservation and provide the accommodation services requested.
- Compliance with a legal obligation: to fulfil applicable tax, accounting and guest registration or reporting obligations.
- Consent: where required, including for certain marketing communications or non-essential cookies.
- Legitimate interests: where necessary and proportionate, for purposes such as protecting our property, preventing fraud, managing disputes and improving the security of our services, provided that these interests do not override your rights and freedoms.
Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
4. What Personal Data Do We Collect?
Depending on your booking and the services requested, we may collect the following categories of personal data:
- Identification information: name, date of birth, nationality and identification document details where legally required.
- Contact information: email address, telephone number and, where necessary, residential address.
- Reservation information: accommodation selected, arrival and departure dates, number of guests, booking details and relevant communications.
- Guest registration information: information required to comply with applicable legal obligations.
- Payment information: payment status, transaction references and information necessary to confirm or manage payments and refunds. Payment card details may be processed directly by the relevant payment service provider.
- Communication records: information exchanged with us before, during or after your stay.
- Technical website information: certain technical data, such as IP address, browser information and cookie-related information, where collected through the website.
We only collect personal data that are relevant and necessary for the purposes described in this Privacy Policy.
5. Is Providing Personal Data Mandatory?
Certain personal data are necessary to process a reservation, provide the accommodation service, manage payments or comply with legal obligations.
If you do not provide information that is legally or contractually required, we may be unable to confirm your reservation, provide access to the accommodation or fulfil our legal obligations.
Where information is optional, this will be indicated where appropriate.
6. How Long Do We Keep Your Personal Data?
We retain personal data only for as long as necessary to fulfil the purposes for which they were collected, taking into account applicable legal obligations and the need to establish, exercise or defend legal claims.
Different retention periods may apply depending on the type of information and the purpose of processing. For example:
- Reservation and communication records are retained for as long as necessary to manage the booking and any related issues.
- Invoices and accounting records are retained for the periods required by applicable tax and accounting legislation.
- Guest registration information is retained in accordance with the applicable legal requirements.
- Marketing information is retained until consent is withdrawn or an objection is made, where applicable, subject to any necessary records of consent or suppression requests.
When personal data are no longer required, they will be deleted or anonymised where appropriate, unless further retention is required by law.
7. Who May Receive Your Personal Data?
Where necessary for the purposes described in this Privacy Policy, your personal data may be shared with the following categories of recipients:
a) Website and booking platform providers
Providers that host, operate or support the BEM-VINDO HOMES website and direct booking system, including Talkguest where applicable.
b) Payment service providers
Providers involved in processing payments and refunds associated with direct bookings. Payment card details may be handled directly by the relevant provider in accordance with its own security and privacy arrangements.
c) Accounting and professional advisers
Accountants, lawyers and other professional advisers where necessary to manage our activity or comply with legal obligations.
d) Technical and communication service providers
Providers of website hosting, information technology, email and other services necessary to operate our business and communicate with guests.
e) Public authorities and competent bodies
Authorities and public bodies to which we are legally required to disclose information, including those responsible for applicable guest registration, tax and legal obligations.
Where a service provider processes personal data on our behalf, appropriate contractual and data protection arrangements will be implemented where required by law.
We do not sell your personal data.
8. Are Your Personal Data Transferred Outside the European Economic Area?
Some of the service providers used to operate our website, booking system or payment processes may store or process personal data outside the European Economic Area (EEA).
Where such transfers take place, they must comply with the GDPR and be supported by an applicable legal transfer mechanism, such as an adequacy decision or appropriate safeguards.
The specific providers and transfer arrangements must be confirmed based on the services actually used by BEM-VINDO HOMES.
For further information about international transfers and the safeguards applied, please contact us using the details provided in this Privacy Policy.
9. What Are Your Data Protection Rights?
Under the GDPR, and subject to the applicable legal conditions, you may have the right to:
- Access your personal data and obtain information about how they are processed.
- Rectify inaccurate or incomplete personal data.
- Request erasure of your personal data where the legal requirements are met.
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interests, where the relevant legal conditions are met.
- Object to direct marketing at any time.
- Data portability, where the right applies.
- Withdraw consent where processing is based on consent.
To exercise your rights, please contact us using the contact details below. We may need to verify your identity before responding.
Requests will be handled within the applicable legal deadlines. The exercise of these rights is generally free of charge, although the law provides limited exceptions.
You also have the right to lodge a complaint with the Portuguese Data Protection Authority, the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.
10. Cookies and Similar Technologies
Our website may use cookies or similar technologies to ensure its proper operation, remember preferences, understand website usage or provide additional features.
Where required by law, non-essential cookies or similar technologies will only be used after the necessary consent has been obtained.
You may manage your cookie preferences through the website's cookie settings, where available, and through your browser settings.
Information about the cookies actually used on the website, their purposes and their retention periods should be provided in the relevant cookie notice or Cookie Policy, where applicable.
11. Security and Confidentiality
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.
Access to personal data is restricted to persons and service providers who need the information for legitimate purposes and are subject to appropriate confidentiality and data protection obligations.
Although we take reasonable steps to protect your information, no method of transmission or storage can guarantee absolute security.
12. Third-Party Websites and Services
Our website may contain links to third-party websites or services. When you access those websites or use those services, their own privacy policies and data protection practices may apply.
We recommend that you review the relevant policies before providing personal data directly to third parties.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our activities, the services used to operate the website or applicable legal requirements.
The latest version will be published on our website, together with its update date.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
BEM-VINDO HOMES
Data controller: Filipe Manuel Silva Ribeiro
Email: gestao.eli.al@gmail.com
We will handle your request in accordance with applicable data protection legislation.