Privacy Policy

1. Introduction

IME – Imóveis e Empreendimentos Hoteleiros, S.A. (“Timbre Hotels”) is dedicated to protecting the personal data of users of the timbrehotels.com website. This Privacy Policy explains how we collect, use, store, and protect your personal data, in compliance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and other applicable legislation.

By using this website, the user declares that they understand and accept the terms of this Privacy Policy.

2. Data Controller

Responsible for data processing:

IME – Imóveis e Empreendimentos Hoteleiros, S.A.

NIPC (Tax ID): 503 226 033

Headquarters: Rua do Arquitecto Cassiano Barbosa 44 Esc 9, 4100-009 Porto, Portugal

Phone: (+351) 226 105 430 (National fixed network Call)

Email: info@timbrehotels.com

3. Personal Data Collected

We only collect the personal data necessary for the purposes set out in this Policy, including:

3.1. Data provided by the user

Name, email, phone number
Data provided in contact forms
Data entered during the booking process

3.2. Data collected automatically

IP address
Device and browser type
Browsing data
Cookies (functional, statistical, preferences, and marketing)

3.3. Data related to the booking

Identification data
Payment data
Booking history

4. Purposes of Processing and Legal Bases

The processing of your personal data is based on the following legal bases provided for in Article 6 of the GDPR:

Purpose	Legal Basis
Booking management	Performance of a contract
Payment processing	Performance of a contract
Communication with the guest	Performance of a contract / Legitimate interest
Invoicing	Legal obligation
Communication to SEF (SIBA)	Legal obligation
Sending newsletters	Consent
Improvement of the digital experience	Legitimate interest
Cookie management	Consent / Legitimate interest

5. Data Sharing with Third Parties

Personal data is not shared with third parties, except when necessary for the stated purposes:

PMS – Property Management System
Booking engine
Payment processors
IT maintenance companies
Legal authorities (e.g., SEF via SIBA)
Supervisory bodies (when required by law)

All subcontractors comply with the GDPR and follow the instructions of Timbre Hotels.

6. Communication to SEF (SIBA)

Guests’ identification data is communicated to the Foreigners and Borders Service (SEF), through the SIBA platform, in compliance with Decree-Law No. 39/2008 and Ordinance No. 415/2008.

7. Data Retention

Personal data is retained only for the period necessary to fulfill the purposes for which it was collected.

Data Type	Retention Period
Booking and invoicing data	10 years (tax obligation)
Contact data for marketing	Until consent is withdrawn
Browsing logs/cookies	As per the Cookie Policy
Security incident logs	Up to 24 months
Data sent in forms	Up to 12 months

When the period expires, the data will be deleted or anonymized.

8. User Rights

The user may, at any time, exercise the following rights:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Right to withdraw consent
Right to lodge a complaint with the CNPD – Comissão Nacional de Proteção de Dados (National Data Protection Commission)

CNPD Contact: www.cnpd.pt

Requests can be sent to: info@timbrehotels.com

9. Data Security

Timbre Hotels adopts appropriate technical and organizational measures to protect personal data against:

Unauthorized access
Loss
Alteration
Improper disclosure

These include measures such as communication encryption, firewalls, backups, and access control systems. Despite the measures adopted, no system is completely inviolable, so we recommend using updated software and accessing secure networks.

10. Cookies

The website uses cookies to ensure its correct functioning, improve the user experience, and personalize content. The categories of cookies used include:

Essential/functional
Statistical/analytical
Preferences
Marketing and advertising

The user can configure or withdraw consent at any time through the cookie banner. For more information, please consult the Cookie Policy.

11. Links to Third Parties

The website may include links to third-party sites. Timbre Hotels does not control and is not responsible for the privacy practices of those sites.

12. Changes to this Privacy Policy

Timbre Hotels may update this Policy periodically. Any changes will be posted on this page with the update date.

13. Contact for Privacy Matters

For clarifications or to exercise your rights, please contact:

IME – Imóveis e Empreendimentos Hoteleiros, S.A.
Email: info@timbrehotels.com
Address: Rua do Arquitecto Cassiano Barbosa 44 Esc 9, 4100-009 Porto, Portugal