Scroll
Privacy Policy
At Just Stay Hotels, SA (“JSH”) we recognize the importance of processing your personal data, which is why we ensure compliance with the obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter “GDPR”), Law No. 58/2019, of August 8 (Personal Data Protection Law) and other applicable legislation on privacy.
Respect for your privacy, the protection of your personal data and compliance with the applicable legal obligations in this matter is a priority for us, which is why we are committed to only processing your personal data that is strictly necessary to provide you with the best service, ensuring respect for your privacy, transparency in information and application of best practices in the field of security and protection of personal data.
Therefore, we inform you of our Privacy Policy, informing you about your rights and how we collect and use your personal data.
1. Who is responsible for processing personal data?
Just Stay Hotels SA, headquartered at Rua Sá da Bandeira, 562 1º Esquerdo, 4000-431 Porto – Portugal is the entity responsible for the processing of personal data, as it defines which data is collected, the means of processing and the purposes for which this data is used.
Any and all information relating to an identified or identifiable natural person is considered personal data.
2. Who are the holders of personal data?
The customer, or potential customer, natural person, to whom the data relates and who uses, or intends to use, the products, services, campaigns, made available by JSH.
The representative or point of contact within the company, in the case of legal entities, within the scope of the execution of a contract, or pre-contractual diligence, concluded between that company and JSH.
2.1. What categories of personal data are processed by JSH?
i) Identification data: name, civil identification number/passport number, date of birth, photograph;
iii) Information for the provision of hotel services: for example your credit card number, your arrival and departure days, your preferences and interests related to your stay.
In the case of representatives of legal entities, we only collect data that is essential for the proper execution of the contract, such as the name of the legal representatives and contact persons, email, telephone number and NIPC.
2.2. How, when and for what purposes are your personal data collected?
Your personal data may be collected in the following circumstances and for the following purposes:
1. When you make a reservation for a stay or when you purchase hotel services from the JSH website through other platforms, for the purposes of fulfilling and executing the contract.
2. For marketing campaigns, when you receive notifications of special offers from JSH, based on your consent and/or JSH’s legitimate interests.
3. When you send us your CV, in the context of the recruitment process for a specific vacancy and/or to evaluate a spontaneous application, for pre-contractual procedures at the candidate's request.
4. For communication to entities and/or public authorities, to comply with legal obligations and/or in the context of ongoing legal proceedings, for the pursuit of JSH's legitimate interests.
3. What are the lawful grounds and duration of the processing of personal data?
The grounds that legitimize the processing of your personal data by JSH, for the purposes described in point 2.2 of this policy, are the following:
Consent: your personal data may be processed upon your free, specific, informed and explicit expression of will, under which you accept, by means of a statement or unequivocal positive act, that your personal data may be processed. For example, we process the personal data of customers who sign up for our newsletter. We also process, on this basis, data relating to your history of preferences and interests.
Pre-contractual procedures and/or contract performance: your personal data may be required to clarify doubts, to conclude, perform and manage the contract entered into with JSH. For example, we process personal data to manage your room reservation and accommodation request as well as to manage your entire stay, as part of customer contact via the website and social media; when we need to contact the representative of a legal entity, as part of the execution of a contract; as part of a recruitment process.
Compliance with a legal obligation : your data may be necessary for compliance with a legal obligation to which the data controller, in this case JSH, is subject. For example, in order to comply with tax obligations we must provide information to the Tax Authority or in order to comply with legal obligations we must provide information to the Agency for Integration, Migration and Asylum (AIMA)
Legitimate interest: your data may be necessary to carry out certain tasks related to JSH’s business activity, except in cases where your privacy and data protection rights prevail. Examples: we process personal data based on legitimate interest, in particular to improve our services, manage our relationship with the customer, before and during the hotel service provided; satisfaction surveys on the services provided; to present campaigns and promotions to our customers.
Therefore, JSH will process your personal data in accordance with the following:
3.1. How long do we keep your personal data?
JSH retains the personal data of its data subjects only for the period strictly necessary to pursue the purpose for which they were collected. In certain cases, the law requires the retention of data for a specific period, particularly in the case of data required to inform the Tax Authority, which will be retained for 10 years, in accordance with current legislation.
In the absence of a specific legal obligation, your data will only be processed for the period necessary to fulfill the purposes for which it was collected, and as long as legitimate grounds exist that allow JSH to retain it.
As a rule, your personal data, when processed for the purposes of advertising campaigns, marketing , will be kept for a maximum period of 3 years from the collection of your consent or the last contact made (whichever occurs last) and if, within this period, you have not withdrawn your consent.
Once the maximum retention period has been reached, personal data will be irreversibly anonymized (anonymized data may be retained) or securely destroyed.
4. To whom do we transmit your personal data?
JSH may transmit your personal data to third parties in order to comply with legal and/or contractual obligations and only to the extent necessary to carry out the purposes described above.
JSH suppliers and/or service providers are contractually subject to the same terms and conditions for processing personal data that this privacy policy establishes, and are prohibited from using, transferring, disclosing or registering the data subject's personal data for any purpose other than that for which they were specifically contracted.
JSH may transmit your personal data, depending on the purpose for which it was collected, to different recipients, such as reservation management platforms, tour operators, communication agencies, event promoters, and other commercial partners, and only the data necessary for the development of the activity pursued by these entities within the scope of the purposes identified in this privacy policy will be transmitted.
Your personal data may also be transmitted to entities to whom the data must be communicated by law, such as the Tax Authority or the Agency for Integration, Migration and Asylum (AIMA).
5. What are the rights of personal data holders?
JSH guarantees the applicability and compliance with all rights of the holder of personal data provided for in the GDPR and current national legislation.
- Right of Access
You have the right to obtain confirmation from JSH as to whether or not personal data concerning you are being processed and, where this is the case, the right to access your personal data and information relating to such processing, for example, you may request an exact copy of your compilation and request additional information about the processing we carry out.
- Right of Rectification
You also have the right to obtain, without undue delay, from JSH, the rectification of inaccurate personal data concerning you, in particular the right to correct or complete your personal data.
- Right to erasure of data (“right to be forgotten”)
You may exercise the right to obtain the erasure of your personal data by JSH, without undue delay, provided that: the data are no longer necessary for the purpose for which they were processed; when you withdraw your consent and there are no other valid grounds for their retention; when you object to the processing and there are no prevailing legitimate interests on the part of JSH, as well as in other cases provided for by law.
- Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to JSH, in a structured, commonly used and machine-readable format, as well as the right to transmit such data to another controller (if technically possible) without JSH being able to prevent it, and if the processing is based on consent or a contract, and if the processing is carried out by automated means.
- Right to withdraw consent
You may, at any time, change your consent or withdraw it, however, the withdrawal of consent does not compromise the lawfulness of the processing carried out based on the consent previously given.
- Right of Objection
You may also object, at any time, to the processing of personal data concerning you, when there are no compelling and legitimate reasons for the processing that prevail over your interests, rights and freedoms, or for the purposes of declaring, exercising or defending a right in legal proceedings.
- Right to Restriction of Processing
In certain situations, you have the right to obtain from JSH the limitation of the processing of your data, in particular if you contest the accuracy of the personal data for a period that allows JSH to verify its accuracy, in cases where the data are no longer necessary for the purposes of the processing but are still required by the holder for the purposes of declaring, exercising or defending a right in legal proceedings and also when you object to the processing, until it is verified that the reasons of legitimate interest of JSH prevail over yours, as well as in other cases provided for by law.
- Right not to be subject to any automated decision-making
You have the right not to be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
5.1. How to exercise your rights?
We will respond to your request for exercise and rights within a maximum period of 30 days, except in cases of greater complexity, in which case we will inform you in advance.
You may exercise your rights free of charge, except if the request is manifestly unfounded or excessive, in which case a reasonable fee may be charged taking into account the costs.
Additionally, we inform you that you may be asked to prove your identity in order to exercise your rights.
In fact, you can exercise your rights through the following addresses:
Letter: 1st Left, 4000-431 Porto – Portugal.
However, if you are not satisfied with our response after exercising any of these rights, you have the right to file a complaint with the supervisory authority - National Data Protection Commission (“CNPD”) – www.cnpd.pt .
6. Procedural and Technical Security Measures
JSH has implemented appropriate physical, technological, organizational and security measures to protect the personal data made available to us against dissemination, loss, misuse, alteration, processing or unauthorized access, as well as against any other form of unlawful processing.
7. Cookies
We recommend reading our Cookies Policy , which forms an integral part of this policy, to find out more information about the processing of your personal data carried out through this functionality.
8. Privacy Policy Update
JSH reserves the right to update this Privacy Policy at any time. Therefore, we recommend that you periodically consult this policy on our website to stay informed about the processing of your personal data.
Without prejudice to the consultation of this policy on our website, JSH will inform you of the changes made through the various communication channels used by it.
This Privacy Policy was last updated on October 21, 2024