Privacy Policy

1. Data Controller

The party responsible for data processing on this website is:
Edith Wittkamp
Rittershausstraße 7, 65187 Wiesbaden, Germany
Phone: +49 173 9216409 • Email: studio@edithwittkamp.de
(Operator of Casa Valeria Alojamento Local in 8650-111 Burgau, Portugal – License numbers: 154025/AL and 154021/AL)

2. Website Infrastructure & Booking Engine (Smoobu)

This website and its booking engine are hosted and provided via the systems of Smoobu GmbH, Falckensteinstraße 48, 10997 Berlin, Germany.

When accessing our website, server log data (such as IP address, date and timestamp of access, browser type) are collected automatically to ensure system stability and security (legal basis: Art. 6(1)(f) GDPR). Reservation data submitted through the booking tool is processed securely on Smoobu's servers under a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR.

3. Online Payment Processing (Stripe)

For payment transactions (deposit and balance payments via credit card), we utilize the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.

Payment details entered during checkout are transmitted directly to Stripe via encrypted channels. We do not store complete credit card information. Processing is necessary to execute the accommodation contract (Art. 6(1)(b) GDPR).

4. Statutory Reporting & Tax Obligations in Portugal

As a licensed accommodation provider in Portugal (Alojamento Local), we are legally mandated to fulfill statutory registration and fiscal duties:

• Foreign Guest Reporting to AIMA (SIBA): Under Portuguese statutory law (Lei n.º 23/2007), accommodation operators are required to register identification and passport details of all non-Portuguese guests with the Portuguese immigration authority AIMA. Legal basis: Art. 6(1)(c) GDPR (compliance with a legal obligation).
• Fiscal Invoicing (Finanças / Tax Authority): Under Portuguese tax legislation, we are legally required to issue certified electronic tax invoices (*Fatura-Recibo*) through the portal of the Portuguese Tax and Customs Authority (*Autoridade Tributária e Aduaneira*). Legal basis: Art. 6(1)(c) GDPR.
• Data Handling via Hostkit: To process guest reporting to AIMA and invoice transmission to Finanças securely, we use the specialized software service Hostkit (Hostkit - Gestão de Alojamento Local, Lda., Portugal) as a data processor pursuant to Art. 28 GDPR.

5. Retention Period

Personal booking data is deleted once it is no longer required for the purpose of the booking. Statutory fiscal retention periods remain unaffected: billing and accounting records are preserved for up to 10 years in compliance with Portuguese and German tax laws.

6. Your Rights Under GDPR

You have the right to:

• Request access to your stored personal data (Art. 15 GDPR)
• Request rectification of incorrect data (Art. 16 GDPR)
• Request erasure of your data (Art. 17 GDPR), provided statutory archiving rules do not conflict
• Request restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to data processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a competent data protection authority (such as the Hesse Commissioner for Data Protection in Germany or the Portuguese Data Protection Commission CNPD).