BmyT – Castilho 63 Hostel & Suites and  The Villa (Lisbon, Portugal) 

Contact: info@castilho63.com 

Headquarters: Rua Castilho 63, Lisboa, Portugal

 

1. Data Controller 

BmyT, headquartered in Lisbon, Portugal, is responsible for processing your  personal data (the “Controller”). For any questions regarding privacy or your data,  contact us at info@castilho63.com. 

 

2. Types of Personal Data 

We may collect personal data such as: name, date of birth, ID or passport number,  nationality, address, phone, email, payment data, stay preferences, number of guests,  room type, check-in/check-out records, IP address, cookies, and browsing data.  Sensitive data (e.g., allergies or special requirements) is collected only if communicated  by the guest. 

 

3. Purpose of Processing 

Management of reservations, check-in/check-out, stay, billing, legal compliance,  guest communication, marketing (with consent), statistical analysis, payment  processing, and fraud prevention. 

 

4. Legal Basis

Performance of a contract, compliance with legal obligations, consent for  marketing, legitimate interest (e.g., fraud prevention and service improvement). 

 

5. Recipients 

Subcontractors and service providers, competent authorities, and collection/fraud  entities where applicable. 

 

6. International Transfers 

If data is transferred outside the EEA, we ensure appropriate safeguards according  to GDPR. 

 

7. Data Retention 

Data is retained only as long as necessary for the purposes collected, unless a  legal/regulatory obligation requires longer retention. 

 

8. Your Rights 

Access, rectification, erasure, restriction of processing, objection, portability, and  withdrawal of consent. To exercise, contact info@castilho63.com. You may also lodge  a complaint with the Portuguese Data Protection Authority (CNPD). 

 

9. Cookies 

The website uses cookies for analytics, functionality, and marketing. You may  configure your browser to reject cookies, which may affect your experience. 

 

10. Security 

Technical and organizational measures to protect data against unauthorized access,  disclosure, alteration, or destruction. 

 

11. Changes 

This policy may be updated at any time. The updated version will be published on  the website with the revision date.