Villa Lijó Suites

Last updated: June 24, 2026

This Privacy Policy explains how Villa Lijó Suites collects, uses, stores, protects, and processes the personal data of its guests, customers, website users, and other data subjects, in accordance with Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR), Portuguese Law no. 58/2019, and other applicable personal data protection legislation.

This Policy applies to personal data collected through the Villa Lijó Suites website, contact forms, booking requests, bookings made through direct contact or partner platforms, as well as in the context of providing accommodation services.

By using the website, contacting Villa Lijó Suites, or making a booking, the user acknowledges that they have read and understood this Privacy Policy.

1. Data Controller

The controller responsible for processing personal data is:

José Firmino da Silva Ferreira
Tax ID: 107947951
Address: Rua das Escolas n.º 918, 4845-024 Rio Caldo, Portugal
Telephone: +351 253 392 171
Privacy contact email: geral@villalijosuites.pt

Whenever this Policy refers to “Villa Lijó Suites”, “we”, “us” or “our”, it refers to the entity identified above in its capacity as data controller.

2. What personal data we may collect

As part of our activity, we may collect and process the following categories of personal data, depending on how you interact with us:

2.1. Identification and contact data

• full name;
• telephone number;
• email address;
• address, country of residence or locality, where necessary;
• preferred contact language, where applicable.

2.2. Booking and stay-related data

• check-in and check-out dates;
• number of guests;
• type of suite or room booked;
• booking channel used;
• requests, preferences or observations related to the stay;
• information about additional services requested;
• booking history, cancellations, and communications related to the stay.

2.3. Billing and payment data

• name and billing details;
• tax number for invoice issuance, when requested or legally required;
• booking amount, deposit, payments, and other transaction-related elements;
• limited information about the payment method, where applicable.

Note: Villa Lijó Suites does not, as a rule, store full bank card details when payments are processed by third-party payment platforms or providers.

2.4. Legally required identification data in connection with the stay

Whenever legally required for guest registration purposes and compliance with legal obligations applicable to accommodation services, data may be collected such as:

• nationality;
• date of birth;
• type of identification document;
• identification document number;
• issuing country;
• other data strictly necessary to comply with legal obligations to report to competent authorities.

2.5. Communication data

When you contact us by email, telephone, WhatsApp, website form or other means, we may process:

• the content of your message;
• your information requests;
• complaints, suggestions or assistance requests;
• records of communications relevant to the management of the booking or the relationship with the guest.

2.6. Website browsing data

When you visit our website, technical and browsing data may be collected, namely:

• IP address;
• device type;
• operating system;
• internet browser;
• browser language;
• pages visited;
• date and time of access;
• source of access;
• data collected through cookies or similar technologies, under the terms of the applicable Cookie Policy.

3. How we collect personal data

Personal data may be collected:

• directly from the data subject, when filling in a form, sending a contact request, making a booking, requesting information, or communicating with us;
• at check-in or before arrival, for the purposes of formalising the stay and complying with legal obligations;
• through partner booking platforms or intermediaries, when the booking is made through those channels;
• automatically, through the website, cookies, log files and technical browsing tools, in accordance with applicable law.

4. Purposes of personal data processing

Villa Lijó Suites processes personal data for specific, explicit and legitimate purposes, namely:

4.1. Booking management and provision of accommodation services

This includes, in particular:

• receiving and managing booking requests;
• confirming, changing or cancelling bookings;
• preparing arrival, check-in, stay and check-out;
• managing property occupancy;
• responding to requests related to the stay;
• providing additional services requested by the guest.

4.2. Communication with guests, customers and users

This includes:

• responding to contact requests, information requests or quotation requests;
• sending pre-stay, during-stay and post-stay information;
• sending check-in instructions, useful information, guest support or communications related to the booking.

4.3. Billing, accounting and administrative management

This includes:

• issuing invoices and receipts;
• managing payments, deposits, refunds or adjustments;
• accounting, tax and administrative management of the business.

4.4. Compliance with legal obligations

This includes, where applicable:

• registration and communication of guest data to competent authorities, as legally required;
• compliance with tax, accounting, administrative or regulatory obligations;
• responding to legally valid requests from public authorities, courts or supervisory bodies.

4.5. Security, fraud prevention and legal defence

This includes:

• protecting the property, guests, website and business activity;
• preventing misuse, fraud, breach or unlawful conduct;
• exercising, establishing or defending rights in judicial, extrajudicial or administrative proceedings.

4.6. Website improvement and user experience

This includes:

• statistical and functional analysis of the website;
• improving content, performance, security and usability;
• assessing how users browse the website, where permitted and, if applicable, with consent.

4.7. Marketing and promotional communications

Villa Lijó Suites may use contact data to send promotional communications, campaigns, updates or offers, only where there is a legal basis to do so, namely the data subject’s consent or another admissible legal basis.

The data subject may object or withdraw consent at any time, in accordance with the law.

5. Legal basis for processing

The processing of personal data by Villa Lijó Suites is based, depending on the case, on the following legal grounds:

5.1. Performance of a contract or pre-contractual measures

Where processing is necessary to:

• manage booking requests;
• confirm, perform and follow up the stay;
• provide the contracted services;
• respond to the data subject’s pre-contractual requests.

5.2. Compliance with a legal obligation

Where processing is necessary to comply with legal obligations to which Villa Lijó Suites is subject, namely:

• tax and accounting obligations;
• guest registration obligations and legal reporting to competent authorities;
• legal duties to retain information.

5.3. Legitimate interest

Where processing is necessary for the purposes of the legitimate interests pursued by Villa Lijó Suites, provided such interests do not override the rights and freedoms of the data subject, namely for:

• managing the relationship with guests and customers;
• security of the property, website and business activity;
• fraud prevention and defence of rights;
• improving the website and service quality;
• administrative and operational management of the accommodation.

5.4. Consent

Where processing depends on the data subject’s consent, namely in certain uses of non-essential cookies or the sending of promotional communications, such consent may be withdrawn at any time, without affecting the lawfulness of processing carried out up to that date.

6. With whom we may share personal data

Villa Lijó Suites may share personal data with third parties only to the extent necessary for the purposes identified above and as legally permitted.

Data may be disclosed, namely, to the following categories of recipients:

6.1. Service providers

Entities providing services necessary for the operation of the business, such as:

• website hosting and maintenance;
• email, form and communication services;
• booking, check-in or invoicing management software;
• payment processors;
• technical, IT or administrative support;
• accounting or legal service providers.

Where applicable, these entities will act as processors, processing the data on behalf of Villa Lijó Suites and in accordance with documented instructions and confidentiality and security obligations.

6.2. Booking platforms and booking channels

Whenever a booking is made through partner booking platforms, there may be an exchange of information necessary for booking management, stay, invoicing, cancellation or guest support.

6.3. Public authorities and official entities

Data may be disclosed to public, regulatory, tax, police, administrative or judicial authorities whenever required by law, a legitimate order or regulatory compliance obligations.

6.4. Professional advisers and support entities

Lawyers, accountants, consultants, insurers or other professional support entities, where access to the data is necessary for the normal exercise of the business, defence of rights or compliance with legal obligations.

7. International data transfers

As a rule, Villa Lijó Suites seeks to process personal data within the European Economic Area.

However, some technology service providers, communication platforms, booking platforms or digital tools used may involve the processing of data outside the European Economic Area.

In such cases, Villa Lijó Suites will seek to ensure that such transfers only take place:

• to countries subject to an adequacy decision by the European Commission; or
• under appropriate safeguards provided for by law, such as standard contractual clauses or equivalent data protection mechanisms.

8. Data retention period

Villa Lijó Suites will retain personal data only for the period necessary for the purposes for which they were collected or for the period required by law.

Retention periods may vary depending on the nature of the data and the purpose of the processing. In general terms:

8.1. Booking, invoicing and related documentation data

These will be retained for the period necessary for the execution of the booking, management of the contractual relationship and compliance with legally applicable tax, accounting and administrative obligations.

8.2. Data collected to comply with legal guest registration obligations

These will be retained for the period legally required by applicable legislation.

8.3. Contact data and communications

These will be retained for the time necessary to respond to the request, follow the customer relationship or manage the booking, without prejudice to longer periods where there is a legal basis to do so.

8.4. Marketing data

These will be retained for as long as there is a legal basis for the relevant processing, namely until consent is withdrawn or the right to object is exercised, where applicable.

8.5. Browsing data and cookies

These will be retained in accordance with the Cookie Policy, the website settings and the technical periods applicable to each cookie or tool.

When data are no longer necessary, they will be securely deleted or anonymised whenever possible and appropriate.

9. Data subjects’ rights

Under applicable law, the data subject may exercise, at any time, the following rights, within the legally established limits:

• right of access to their personal data;
• right to rectification of inaccurate or incomplete data;
• right to erasure of data, where applicable;
• right to restriction of processing;
• right to object to processing, in the cases provided for by law;
• right to data portability, where applicable;
• right to withdraw consent, where processing is based on consent;
• right not to be subject to decisions based solely on automated processing, where applicable.

These rights may be exercised by sending a request to:

geral@villalijosuites.pt

Villa Lijó Suites may request proof of identity from the applicant whenever necessary to confirm that the request is submitted by the data subject or by an authorised representative.

10. Complaints to the supervisory authority

Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with the competent supervisory authority for data protection matters.

In Portugal, the supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt

11. Personal data security

Villa Lijó Suites adopts appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access or any other unlawful or improper form of processing.

Such measures may include, depending on the case:

• access control;
• protection of accounts and devices;
• use of providers and platforms with appropriate security measures;
• internal confidentiality procedures;
• restriction of access to data to those who need it for the performance of their duties.

Despite security efforts, no internet data transmission or storage system is completely infallible, and therefore absolute security cannot be guaranteed. Nevertheless, Villa Lijó Suites acts diligently and adopts measures proportionate to the risk.

12. Minors

The Villa Lijó Suites website and services are not intended to intentionally collect personal data from minors without a legitimate basis.

Whenever minors’ data are processed in the context of a booking or stay, such processing will only take place to the extent necessary for the provision of services, occupancy management, guest safety and compliance with applicable legal obligations, and it is the responsibility of parents, legal representatives or responsible adults to ensure the legitimacy of communicating such data.

13. Links to third-party websites

The Villa Lijó Suites website may contain links to third-party websites, platforms or services, including booking platforms, social networks or partners.

This Privacy Policy does not apply to such third-party websites or services. Villa Lijó Suites recommends reading the respective privacy policies before providing any personal data in those contexts.

14. Cookies

The Villa Lijó Suites website may use cookies and similar technologies to ensure its operation, improve the browsing experience, collect statistical data and, where applicable, support additional functionalities.

Detailed information on the cookies used, their purposes, duration and how consent is managed should be included in the Villa Lijó Suites Cookie Policy.

15. Changes to the Privacy Policy

Villa Lijó Suites reserves the right to update, amend or revise this Privacy Policy at any time, namely to adapt it to legal, regulatory, operational or technological changes.

The version in force will always be the one published on the website, with an indication of the respective update date.

Whenever the changes are materially relevant, additional information measures may be adopted where appropriate.

16. Contact details

For any questions related to this Privacy Policy or the processing of your personal data, you may contact:

Villa Lijó Suites
José Firmino da Silva Ferreira
Address: Rua das Escolas n.º 918, 4845-024 Rio Caldo, Portugal
Telephone: +351 253 392 171
Email: geral@villalijosuites.pt