Privacy Policy
Your personal data protection is a priority for us.
This Privacy Policy explains who we are, how we collect and use your data, with whom we share it, and how you can contact us if you have any questions.
1. Who we are:
The processing of your personal data is the responsibility of:
Tourism Apartments S. João, Lda (VAT No. 514072717), owner and operator of VC Heritage Ribeira Porto, located at Rua de S. João, 14, 4050-551 Porto.
You may contact us at: info@vcheritage.com.
2. What data we collect and for what purposes:
The personal data collected is used exclusively for reservation and stay management, including:
• Guest identification and contact details
• Data required for mandatory communication to the Portuguese Immigration and Borders Service (SEF)
• Billing and payment data (including VAT number, where applicable)
• Logistical information related to check-in, stay, and check-out
Your data may also be used for administrative, legal, and accounting communications, or to respond to contact requests and information inquiries.
3. Legal basis for processing:
Data processing is carried out based on:
• Performance of the accommodation contract established between the guest and VC Heritage
• Compliance with legal obligations, namely those imposed by SEF and tax legislation
• Guest consent, where applicable (e.g., optional communications or direct marketing)
4. Sharing of personal data:
Your data may be shared only with entities strictly necessary for service provision, namely:
• Booking platforms (Booking.com, Airbnb, Expedia, Talkguest, among others), operating under their own privacy policies
• Contracted service providers, such as Stripe (payments), cleaning services, accounting, and consultancy providers
• Public authorities, where legally required (such as SEF or the Tax Authority)
No personal data will be sold or improperly shared for commercial purposes.
5. Storage and security:
Personal data is stored securely within protected systems, including the Talkguest platform and associated payment and management services.
VC Heritage implements appropriate technical and organizational measures to ensure data confidentiality, integrity, and security.
6. International transfers:
Personal data is processed within the European Economic Area (EEA).
In cases involving suppliers (such as Stripe) that may operate outside the EEA, processing is conducted in compliance with the General Data Protection Regulation (GDPR) and only in countries recognized by the European Union as providing an adequate level of data protection.
7. Data retention:
Personal data is retained only for the period necessary to fulfil the purposes for which it was collected, as well as to comply with applicable legal and tax obligations.
Records required by SEF follow the retention periods established under Portuguese law.
8. Data subject rights:
Guests may exercise their rights under the General Data Protection Regulation (GDPR) — including access, rectification, or erasure of personal data — by contacting: info@vcheritage.com.
Guests also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
9. Updates:
VC Heritage reserves the right to update this Privacy Policy at any time to reflect legal or operational changes.
Periodic review is recommended.
Last update: February 18, 2026
