The protection of your personal data is a priority for By Leça Holiday Rentals. Below, we describe who we are, for what purposes we can use your personal data, how we treat it, with whom we share it, how long we keep it, and also the ways to get in touch with us and to exercise your rights.

Who are we?

Your data will be treated by Idalécia Cabrita Unipessoal, lda, registration number 517552884, (hereinafter referred to as By Leça).

By Leça is the data controller within the meaning General Data Protection Regulation (hereinafter referred to as GDPR).

Why do we treat your information?

Your personal data may be collected and processed by By Leça for the following purposes:

a) For the fulfilment of legal obligations to which By Leça is subject, in particular communications to foreign and border services and billing purposes.

b) For the purpose of performance of Temporary accommodation contract for tourists or the Local Accommodation Management Contract celebrated with By Leça particularly payment transactions, management of check-in’s and check-out’s, management of guests, charge a deposit, providing complementary services to the stay as cleaning, transfers and breakfast or grocery services, contractual obligation management or for pre-contractual diligence purposes.

c) For the purpose of mobile and email communications, with information and commercial communications, digital platforms, within the scope of By Leça marketing strategies, commercial and contractual information and communications, as well as for requests for information.

d) For the purpose of protecting property or held assets by By Leça, as well as for statistical analysis purposes.

The non-supply of personal data for the purposes provided for in points (a) and (b) leads By Leça in non-compliance with statutory obligations and consequently the possibility of resolution of the Temporary Accommodation Contract for Tourists or the Local Accommodation Management Contract celebrated, without the right to any compensation, as well as deficit services provided by By Leça that cannot be attributable to it.

What kind of personal data do we collect?

Within the scope of its activity, By Leça will collect and process the personal data necessary to provide the contracted services, requests for information or pre-contractual management, namely identification, contact, bank or payment card data.

What do we treat your information for?

The processing of your personal data will be carried out on the basis of the implementation of the temporary accommodation contract to tourists, of the Local Accommodation Management Contract and the fulfilment of legal obligations imposed on By Leça, in particular by legislation on matters of entry, permanence and departure of foreigners in the national territory and fiscal legislation (article 6 no. 1 (b) and (c) of the GDPR).

In addition, the personal data collected for the purposes provided for in point (c) of the preceding paragraph are based on the consent by itself rendered to By Leça for their treatment (article 6 no. 1 (a) of the GDPR).

For the purposes provided for in point (d) of the preceding paragraph, By Leça shall proceed to the processing of personal data, based on the legitimate interest it has pursued (article 6 no. 1 (f) of the GDPR).

How long have do we keep your information?

Without prejudice to legal provisions, regulatory or judicial determination in contrary, the personal data collected shall be kept only for the minimum period necessary for the purposes which have motivated their collection or subsequent treatment.

Who can we transmit your personal data?

By Leça may need to share some of your personal data with other recipients. These recipients include:

a) Organizations and/or companies affiliated to By Leça whenever they respect an equivalent policy on the protection of personal data.

b) Public entities to which By Leça is legally obliged to provide information, in particular the Foreign and Border Services and the DGCI – Directorate-General for Taxes.

c) Subcontractors providing certain services related to your personal data under the cover of a sub-contract and with the sole purpose to provide technical assistance to By Leça. These include, particularly, site hosting providers, mail marketing service providers, cleaning service companies, lawyers firms, accounting firms and insurance companies.

d) Competent authorities to which By Leça is legally obliged to disclose information during judicial proceedings or to detect technical and/or security problems, such as judicial entities or competent control authorities.

Are my data transferred to countries outside the European Union?

Your personal data, collected by By Leça, will not be transferred to any entity established outside the territory of the European Union.

Exceptionally and subject to certain conditions, By Leça may transfer your personal data to countries outside the territory of the European Union, in accordance with the applicable legislation, namely for the purposes of data hosting or storage, technical processing subcontracting, back-up and recovery of hosted data, development of services.

By Leça assures you that it will not transfer your personal data to countries that do not guarantee an adequate level of protection, in accordance with the provisions of the GDPR.

What are my rights?

At any time, in accordance with GDPR, you may request access to your personal data, as well as to its rectification or deletion, limitation of the treatment performed, the right of opposition and the right to data portability.

If the applications submitted are manifestly unfounded or excessive, in particular due to their repetitive nature, By Leça may require payment of a reasonable fee taking into account the administrative costs of providing the information or communication, or taking the measures requested or refusing to comply with the request.

In the case of personal data whose treatment by By Leça is legitimate in the consent granted by you, the right to withdraw the consent is granted, without the exercise of such right being able to compromise the lawfulness of the treatment carried out with on the basis of the consent previously given, nor the subsequent processing of the same data, based on another legal basis, such as the fulfilment of the contract or the legal obligation to which By Leça is subject.

It also has the right to file a complaint with the National Data Protection Commission.

Security and confidentiality

We are committed to keeping your data secure and we use appropriate security measures to ensure your personal data are protected and to prevent access to them by unauthorised persons. However, the transmission of data over the Internet is not completely secure and we cannot provide an absolute guarantee of the security of the information transmitted through our site.

We also respect the confidentiality of your information. Therefore, we do not sell, distribute or make your information commercially available in any other way, to any third party. By Leça undertakes to keep your information confidential in accordance with this Privacy Policy and with the applicable legislation.

Do you have any questions?

If any doubts remain in relation to the processing of your personal data, or if you wish to exercise any of your rights, please contact us:

E-mail: geral@byleca.pt

Adress: Rua da Palma edf Rita B 1dto Quarteira