1. Data controller
The controller of your personal data is Segmento Inteligente, Lda. — Rua dos Piornais, Lote 11, R/C B, 9000-679 São Martinho, Funchal, Madeira, Portugal — NIF/NIPC 517792290, operating the Social Lodge brand and the socialodge.com website.
For any data protection matter, please use the contact details at the bottom of this page.
2. Data we collect
- Identification and contact data: name, email, phone, country and, where legally required, identification document;
- Booking data: accommodation, check-in and check-out dates, number of guests, estimated arrival and departure times, special requests and notes;
- Billing data: tax number and billing address, when provided;
- Payment data: processed directly by Stripe. The website does not collect or store card numbers or security codes; we only receive payment confirmation and a transaction reference;
- Browsing data: pages visited, language, referrer and user agent — only with consent given in the cookie banner.
3. Purposes and legal bases
- Managing the booking, communicating with the guest and providing the accommodation service — performance of the contract (Art. 6(1)(b) GDPR);
- Invoicing, tax obligations and reporting guests to the competent authorities — legal obligation (Art. 6(1)(c));
- Fraud prevention, service security and improving the website experience — legitimate interest (Art. 6(1)(f));
- Marketing communications and analytics cookies — consent (Art. 6(1)(a)), withdrawable at any time.
4. Processors and third parties
- Stripe Payments Europe, Ltd. — payment and refund processing;
- Supabase — database hosting and application infrastructure;
- Transactional email providers — booking-related communications;
- Airbnb and Booking.com — where the booking originates from those platforms;
- Google — maps and website analytics services, where applicable;
- Accommodation service providers (cleaning, maintenance), strictly with the data needed to perform the service.
We do not sell personal data. Any transfer outside the European Economic Area relies on adequacy decisions or on standard contractual clauses approved by the European Commission.
5. Retention periods
Booking data is kept for the duration of the contractual relationship and thereafter for the applicable statutory periods — notably 10 years for invoicing and tax documents. Data processed on the basis of consent is kept until consent is withdrawn. Browsing data is kept for a maximum of 24 months.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise these rights, contact us by email or phone (details at the bottom of this page). We may request proof of identity and will reply within one month.
7. Cookies
We use cookies and equivalent technologies (localStorage) that are strictly necessary for the website to work and, subject to consent, analytics cookies. You can manage your preference in the cookie banner. Details in the Cookie Policy at socialodge.com/cookies.
8. Security
We apply appropriate technical and organisational measures, including encryption in transit, role-based access control and data minimisation, to protect data against unauthorised access, loss or disclosure.
9. Complaints
Without prejudice to contacting us directly, you have the right to lodge a complaint with the supervisory authority — the Portuguese Data Protection Authority (CNPD), www.cnpd.pt.
10. Changes
This policy may be updated. The version in force is always available on this page, together with its update date.
