Privacy Policy Trainspot
In compliance with the General Data Protection Regulation (GDPR).
1.Data Controller
The entity responsible for the collection and processing of your data is Train Spot Lda., with tax number 510488935 and registered office at Largo da Alfândega n.º 4, 7330-012 Beirã Marvão. Represented by the manager.
For any questions regarding the protection of your personal data, you may contact us via email: info@trainspot.pt
2.What data we collect and how
We only collect the data necessary for managing your stay and for the operation of the website.
This data may be collected through booking platforms, telephone contact, email, or via the website.
It may include:
Booking data Name, address, email, telephone, and payment details when a booking is made through our website or partner platforms (e.g., Booking or Airbnb).
Check-in data Identification details and nationality, required to comply with legal obligations to report guests to the Accommodation Bulletin Information System (SIBA/AIMA).
Website navigation data The website may collect technical data through cookies, including IP address, device type, browser used, and pages visited.
3.Purpose and legal basis of processing
Your personal data is processed based on the following purposes and legal grounds:
Contract performance Management of bookings and provision of accommodation services.
Legal obligation Issuing invoices and mandatory reporting of guests to competent authorities.
Legitimate interest Improvement of services, website management, and property security.
Consent Use of analytical cookies or sending marketing communications, where applicable.
4.Cookies and analytics technologies
This website uses cookies necessary for its operation and analytical cookies to improve user experience.
We may use traffic analysis services, namely Google Analytics, which allow us to understand in an aggregated way how visitors use the website.
The use of analytical cookies depends on user consent, which may be withdrawn at any time through browser settings or website cookie preferences.
5.Data retention
Personal data is retained only for the period necessary to fulfill the purposes for which it was collected or to comply with legal obligations.
Tax data Retained for 10 years, as required by Portuguese tax law.
Accommodation bulletins Retained for 1 year after the guest’s departure, in accordance with SIBA regulations.
Marketing data Only where consent has been given and until the data subject requests its removal.
6.Data sharing with third parties
Your personal data may be shared with external entities when necessary for service provision or legal compliance, including:
Public authorities Tax Authority and AIMA (Agency for Integration, Migration and Asylum).
Technology partners Services or software used for booking management, contact forms, invoicing, or website analytics.
Some of these service providers may process data outside the European Economic Area. In such cases, appropriate safeguards are adopted in accordance with the GDPR.
7.Data subject rights
Under applicable law, the data subject has the right to:
Access their personal data Request correction of inaccurate or incomplete data Request deletion of data where applicable Request restriction of processing Object to data processing Request data portability where applicable
To exercise any of these rights, you should contact us via email at info@trainspot.pt.
You also have the right to lodge a complaint with the competent supervisory authority, the Portuguese Data Protection Authority (CNPD).
8.Changes to the privacy policy
This privacy policy may be updated periodically to reflect legal or operational changes.
The most recent version will always be available on our website or upon request.
9.Applicable law
This policy is governed by the General Data Protection Regulation and the applicable national legislation on data protection in Portugal. https://eur-lex.europa.eu/eli/reg/2016/679/oj?locale=pt
