1. About us
Bridge2Lisbon is a Lisbon-based company specializing in the management of short-term rental properties, with its main operations on the Airbnb platform. Our website is integrated with the Hostaway (https://hostaway.com) reservation platform, through which we process the data
necessary to provide our services securely and with respect for the privacy of your personal data.
2. What personal data we collect
Throughout our relationship with you (Data Subject), we collect and process the following personal data:
From our customers:
Full name
Identity document or passport
Date of birth
Address
Email address
Mobile number
Reservation number
Information about the reserved property
From property owners:
Full name
Mobile phone number
Data of the property made available for rent
3. How we collect your Personal Data
Personal Data may be collected in the following ways:
Directly through the Bridge2Lisbon website, at the time of your booking.
Indirectly, via the Airbnb platform, with the intermediation of Hostaway.
By direct contact via email or WhatsApp.
4. Purposes of Personal Data processing
Personal data is processed for the following purposes:
Processing and management of reservations.
Communication with customers and owners.
Compliance with legal and tax obligations.
Guarantee of process security.
Continuous improvement of our services.
5. Legal basis for processing
The processing of your personal data is carried out in accordance with the following legal bases:
Performance of a contract (e.g. property reservation).
Compliance with legal obligations (e.g., tax obligations).
Legitimate interest of Bridge2Lisbon (e.g., communication with clients).
Consent, when required (e.g., non-mandatory future communications).
6. Data Sharing
Bridge2Lisbon may share your personal data with:
Airbnb platform and Hostaway system, for managing reservations and providing contracted service.
Competent authorities, to comply with regulations and legislation.
Contracted service providers, such as:
o Microsoft (Office 365 and SharePoint Online), responsible for our corporate communication services (e-mail) and data storage.
All service providers comply with contractual and legal obligations regarding data protection.
7. Storage and retention period
Your Personal Data is stored in secure online environments, including:
Microsoft SharePoint Online (for document storage).
Corporate email (Microsoft Outlook 365).
Your Personal Data is kept for the period necessary to fulfill the aforementioned purposes, respecting the applicable legal deadlines. As a rule:
Booking data is kept for up to 10 years.
Contact details are deleted at the request of the Holder or together with the booking data.
8. Data security
Bridge2Lisbon adopts security measures to protect your Personal Data such as:
Up-to-date corporate antivirus.
Periodic backups.
Access control to systems.
Storage on platforms with international security certifications.
9. Rights of data subjects
Under GDPR, data subjects (you) have the following rights:
Right to be informed: Data subjects have the right to be informed about the collection and processing of their personal data, including the purpose, legal basis, recipients, and duration of storage.
Right of Access: Data subjects can request confirmation as to whether their data is being processed and, if so, have access to their data and information about how it is being processed.
Right to Rectification: Data subjects may rectify inaccurate or incomplete personal data.
Right to erasure: Data subjects may request the deletion of their personal data, especially if it is no longer necessary for the purpose for which it was collected or if consent has been withdrawn.
Right to restriction of processing: Data subjects may request the restriction of the processing of their data in certain circumstances, such as contesting the accuracy of the data.
Right to Data Portability: Data subjects may request the transfer of their personal data to another data controller.
Right to withdraw consent: Data subjects may object to the processing of their personal data in certain situations, especially if the processing is based on legitimate interest or for direct marketing purposes.
To exercise any of these rights, please contact our Data Protection Officer (DPO):
Andreia Freudenfeld
10. Data Protection Officer (DPO)
Bridge2Lisbon has appointed as its Data Protection Officer (DPO) Ms. Andreia Freudenfeld, responsible for ensuring compliance with privacy regulations and responding to requests from data subjects.
All communications and requests related to data protection should be addressed to:
11. Changes to this Policy
This Privacy Policy may be updated from time to time. We recommend that you regularly check this page to stay informed about how we protect your data.