Privacy and Data Policy

At Just Stay Hotels SA (“JSH”) we recognise the importance of processing your personal data, which is why we have adopted appropriate technical and organisational measures to ensure a high level of security in the processing of such data. Therefore, we hereby inform you of our Privacy Policy, informing you of your rights and how we collect and use your personal data.

We assume responsibility for treating your personal data in an integral and confidential manner, taking into account only clear and precise purposes.

1. Who is responsible for processing personal data?

Just Stay Hotels SA, headquartered at Rua Sá da Bandeira, 562 1º Esquerdo, 4000-431 Porto – Portugal is the entity responsible for the processing of personal data, as it defines which data is collected, the means of processing and the purposes for which this data is used.

Any and all information relating to an identified or identifiable natural person is considered personal data.

2. Who are the holders of personal data?

The customer, or potential customer, natural person, to whom the data relates and who uses, or intends to use, the products, services, campaigns, made available by JSH.

The representative or point of contact within the company, in the case of legal entities, within the scope of the execution of a contract, or pre-contractual due diligence, concluded between that company and JSH.

2.1. What categories of personal data are processed by JSH?

i) Contact information: for example name, email, telephone, address.
ii) Personal information: for example date of birth, identification number.
iii) Information relating to your children: for example name, date of birth.
iv) Information for the provision of hotel services: for example your credit card number, your arrival and departure days, your preferences and interests.
In the case of representatives of legal entities, we only collect data that is essential for the proper execution of the contract, such as name, email, telephone number and NIPC.

2.2. How, when and for what purposes are your personal data collected?

Your personal data may be collected in the following circumstances and for the following purposes:

1. Through JSH websites when you make your stay reservation.
2. For the purposes of concluding and executing a contract, in particular when purchasing hotel services.
3. For marketing campaigns, when you receive notifications of special offers from JSH, and with express consent you provide us with your personal data.
3. What are the grounds for and duration of the processing of personal data?

The grounds that legitimize the processing of your personal data by JSH, for the purposes described in point 2.2 of this policy, are the following:

Consent: your personal data may be processed upon your free, specific, informed and explicit expression of will, under which you accept, by means of a statement or unequivocal positive act, that your personal data may be processed. For example, we process the personal data of our customers and potential customers, upon consent, for commercial and marketing purposes, namely marketing campaigns, promotions, satisfaction surveys on the services provided. We also process, on this basis, data relating to your history of preferences and interests.

Pre-contractual procedures and/or contract execution: your personal data may be necessary to clarify doubts, to conclude, execute and manage the contract concluded with JSH. For example, we process personal data to manage your room reservation and accommodation request as well as to manage your entire stay.

Compliance with legal obligation: your data may be necessary to comply with a legal obligation to which the data controller, in this case JSH, is subject. For example, to comply with tax obligations we have to provide information to the Tax Authorities.

Legitimate interest: your data may be necessary to perform certain tasks related to JSH’s business activity, except in cases where your privacy and data protection rights prevail. Examples: we process personal data based on legitimate interest, in particular to improve our services, manage our relationship with the customer, before and during the hotel service provided; in the context of customer contact via website and social networks; when we need to contact the representative of a legal entity, within the scope of the execution of a contract.

Therefore, JSH will process your personal data in accordance with the following:

3.1. How long do we keep your personal data?

JSH retains the personal data of its data subjects only for the period strictly necessary to pursue the purpose for which they were collected. In certain cases, the law requires the retention of data for a specific period, particularly in the case of data required to inform the Tax Authority, which will be retained for 10 years, in accordance with current legislation.

We will also retain your data for as long as you maintain a contractual relationship with JSH. However, we may retain your personal data for periods longer than the duration of the contract, based on your consent, to ensure rights and duties related to the contract or in situations where JSH has a legitimate interest, always respecting the period necessary to pursue the purpose for which they were collected.

In the absence of a specific legal obligation, your data will only be processed for the period necessary to fulfil the purposes for which it was collected, and as long as there are legitimate grounds for JSH to retain it.

As a rule, your personal data, when processed for the purposes of marketing campaigns, will be kept for a maximum period of 3 years from the collection of your consent or the last contact made (whichever occurs last) and if, within this period, you have not withdrawn your consent.

Once the maximum retention period has been reached, personal data will be irreversibly anonymized (anonymized data may be retained) or securely destroyed.

4. To whom do we transmit your personal data?

JSH transmits your personal data only when necessary for the purposes described above.

JSH suppliers and/or service providers are contractually subject to the same terms and conditions for processing personal data that this privacy policy establishes, and are prohibited from using, transferring, disclosing or registering the data subject's personal data for any purpose other than that for which they were specifically contracted.

JSH may transmit your personal data, depending on the purpose for which it was collected, to different recipients, such as reservation management platforms, tour operators, communication agencies, event promoters, and other commercial partners, and only the data necessary for the development of the activity pursued by these entities within the scope of the purposes identified in this privacy policy will be transmitted.

Your personal data may also be transmitted to entities to whom the data must be communicated by law, such as the tax authority or the Foreigners and Borders Service.

5. What are the rights of personal data holders?

JSH guarantees the applicability and compliance with all rights of the holder of personal data provided for in the General Data Protection Regulation and current national legislation.

• Right of Access

You have the right to obtain confirmation from JSH as to whether or not personal data concerning you are being processed and, where this is the case, the right to access your personal data and information relating to such processing, for example, you may request an exact copy of your compilation and request additional information about the processing we carry out.

• Right of Rectification

You also have the right to obtain, without undue delay, from JSH, the rectification of inaccurate personal data concerning you, in particular the right to correct or complete your personal data.

• Right to erasure of data (“right to be forgotten”)

You may exercise the right to obtain the erasure of your personal data by JSH, without undue delay, provided that: the data are no longer necessary for the purpose for which they were processed; when you withdraw your consent and there are no other valid grounds for their retention; when you object to the processing and there are no prevailing legitimate interests on the part of JSH, as well as in other cases provided for by law.

• Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to JSH, in a structured, commonly used and machine-readable format, as well as the right to transmit such data to another controller (if technically possible) without JSH being able to prevent it, and if the processing is based on consent or a contract, and if the processing is carried out by automated means.

• Right to withdraw consent

You may, at any time, change your consent, limit it to certain types of processing or withdraw it, however, the withdrawal of consent does not compromise the lawfulness of the processing carried out based on the consent previously given.

• Right of Objection

You may also object, at any time, to the processing of personal data concerning you, when there are no compelling and legitimate reasons for the processing that prevail over your interests, rights and freedoms, or for the purposes of declaring, exercising or defending a right in legal proceedings.

• Right to Restriction of Processing

In certain situations, you have the right to obtain from JSH the limitation of the processing of your data, in particular if you contest the accuracy of the personal data for a period that allows JSH to verify its accuracy, in cases where the data are no longer necessary for the purposes of the processing but are still required by the holder for the purposes of declaring, exercising or defending a right in legal proceedings and also when you object to the processing, until it is verified that the reasons of legitimate interest of JSH prevail over yours, as well as in other cases provided for by law.

• Right not to be subject to any automated decision-making

You have the right not to be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

5.1. How to exercise your rights?

You may exercise your rights free of charge, except if the request is manifestly unfounded or excessive, in which case a reasonable fee may be charged taking into account the costs.

We will respond to your requests within a maximum period of 30 days, except in cases of more complex requests.

In fact, you can exercise your rights through the following addresses:

Letter: 1st Left, 4000-431 Porto – Portugal.

Email: privacy@stayhotels.pt

Telephone contact: 220 150 658

However, if you are not satisfied with our response after exercising any of these rights, you have the right to file a complaint with the CNPD (National Data Protection Commission, Rua de São Bento, no. 148, 3rd floor, 1200-821 Lisbon, Tel: 351 213928400, Fax: 351 213976832, e-mail: geral@cnpd.pt).

6. Procedural and Technical Security Measures

JSH uses appropriate physical, technological, organizational and security measures to protect your personal data in order to protect the personal data made available to us against its dissemination, loss, misuse, alteration, processing or unauthorized access, as well as against any other form of unlawful processing.

7. Cookies

Cookies are small text files that are stored on a user’s device when they access certain websites. On subsequent visits, these files are sent back to the website that installed them, allowing the website to identify the user’s preferences. The use of cookies is a common practice on most websites, particularly since the rise of e-commerce practices.

On this website, with the user's consent, we use the following cookies:

Cookies for personalization purposes - allow us to remember the user's preferences regarding their location and language. In this way, we optimize the user's subsequent visits to our website, no longer requiring them to repeatedly select these options.

Cookies for statistical purposes - by collecting usability statistics we are able to understand how users navigate our website so that we can improve both their experience and its features. To help us collect this information, we use the Google Analytics tool. We also inform you that the information we collect, such as the pages visited and the time spent on the website, does not allow us to identify a specific user, since visits are anonymous.

If you have any questions about privacy or cookies, please contact us at geral@stayhotels.pt

8. Privacy Policy Update

JSH reserves the right to update this Privacy Policy at any time. Therefore, we recommend that you periodically consult this policy on our website to stay informed about the processing of your personal data.

Without prejudice to the consultation of this policy on our website, JSH will inform you of the changes made through the various communication channels used by it.

This Privacy Policy was last updated on May 24, 2018.