Privacy Policy.

1. Who is responsible

The controller for the processing described here is Bleisured Lda, Rua da Academia das Ciências 11A R/C, 1200-003 Lisbon, Portugal (NIF 517095130).

For any data protection matter, you can contact us at contact@bleisured.com or on +351 927 750 033.

‍

2. What data we process, for which purpose, and on which legal basis

Enquiries from property owners and other visitors. When you use our contact form or write to us, we process the data you provide, such as your name, phone number and email address, and the content of your message. Purpose: to respond to your enquiry and, where applicable, to prepare and enter into a contract. Legal basis: Article 6(1)(b) GDPR (steps prior to entering into a contract) and Article 6(1)(f) GDPR (our legitimate interest in answering enquiries).

Bookings. Our direct booking site (book.bleisured.com) is operated for us on the Hostaway booking engine. When you make a booking, we process your name, contact details, stay details, number of guests and payment information. Purpose: to process and manage your booking. Legal basis: Article 6(1)(b) GDPR (performance of a contract) and, for the retention of invoicing and accounting records, Article 6(1)(c) GDPR (legal obligation).

Website analytics. With your consent, we use Google Analytics 4 and Hotjar to understand how our website is used and to improve it. This involves online identifiers and your IP address. Legal basis: Article 6(1)(a) GDPR (consent), which you can withdraw at any time via the cookie settings. Details of the cookies used are in our Cookie Policy.

Security and functionality. To protect our booking site against abuse we use Google reCAPTCHA, and to detect technical errors we use Sentry. These services may process your IP address. Legal basis: Article 6(1)(f) GDPR (our legitimate interest in the security, stability and functionality of our services); where these services set non-essential cookies, we rely on your consent under Article 6(1)(a) GDPR. Apartment locations are shown using an OpenStreetMap-based map (Leaflet), which does not involve Google.

Server log data. When you access our websites, our hosting providers automatically process technical data such as your IP address, browser type, and the date and time of access. Legal basis: Article 6(1)(f) GDPR (legitimate interest in operating and securing the site).

Providing your data is voluntary. However, without the data needed for an enquiry or a booking, we cannot respond to you or process your booking.

‍

3. Who receives your data

We use carefully selected service providers who process personal data on our behalf as processors under Article 28 GDPR. Depending on the interaction, these include:

• Webflow, Inc. (United States) for website hosting and the contact form
• Make (Make.com, operated by Celonis Inc., United States) for routing contact form submissions to our systems
• Notion Labs, Inc. (United States) as our CRM, for managing enquiries and customer relationships
• Hostaway (booking engine provider) for direct bookings
• Stripe Payments Europe, Ltd. (Ireland) for processing booking payments
• Google Ireland Limited / Google LLC (United States) for Google Analytics and Google reCAPTCHA
• Hotjar Ltd (European Union) for website analytics
• Functional Software, Inc. (Sentry, United States) for error monitoring on the booking site

We do not sell your personal data. We only share it with third parties where necessary for the purposes above, where you have consented, or where we are legally required to do so.

‍

4. International transfers

Some of the providers above are located in the United States or process data there. In those cases the transfer is based on the EU-US Data Privacy Framework, where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses together with additional safeguards. You can request a copy of the relevant safeguards from us at contact@bleisured.com.

‍

5. How long we keep your data

We keep your data only as long as necessary for the purposes above. Enquiry data from visitors who do not go on to enter into a contract with us is deleted within 24 months. Booking, invoicing and accounting records are kept for the retention periods required under Portuguese tax and commercial law (generally 10 years). Analytics data is kept for up to 14 months (Google Analytics) and up to 12 months (Hotjar).

‍

6. Your rights

You have the right to request access to your personal data, and to request its rectification or erasure, the restriction of its processing, and its portability. You may object to processing based on our legitimate interests. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise any of these rights, contact us at contact@bleisured.com.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, email geral@cnpd.pt.

‍

7. Cookies

Our websites use cookies and similar technologies. Non-essential cookies are only set with your consent. For details, see our Cookie Policy.

‍

8. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

‍

9. Children

Our services are directed at adults. We do not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

‍

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the last update shown above.