Privacy Policy

For Hotel Duas Torres, the privacy and security of guests’ and partners’ personal data are crucial. This policy applies to all systems, individuals, and processes that make up Hotel Duas Torres’ information system. The commitment to personal data security has been assumed by the management and extends to all employees. Hotel Duas Torres promotes data security and protection when processing personal data collected through traditional agencies, OTAs, or the embedded booking engine. We ensure:

  • Lawful processing based on legal grounds, legitimate interest or consent
  • Use limited to the original purpose
  • Accurate and complete information
  • Minimal and adequate data collection
  • Storage limited to defined retention periods
  • Integrity and confidentiality of information

Procedures are in place to ensure compliance with these principles and the GDPR. To understand how we collect, use, and protect your data, please consult this policy.

1. Hotel Duas Torres

Hotel Duas Torres is a 4-star aparthotel in Funchal, Madeira, offering accommodation, dining, wellness, and leisure services.

2. Categories of Personal Data Processed

We collect the following categories of data:

  • Identification data (e.g. name, passport number)
  • Demographic data (e.g. gender, birth date, nationality)
  • Contact details (e.g. address, email, phone)
  • Optional sensitive data (e.g. dietary restrictions, health info)
  • Financial data (e.g. credit card info)

3. Data Processing Based on Legal Obligation, Contract, or Legitimate Interest

We process your data for the following purposes:

3.1 Guests

  • Booking management
  • Billing and invoicing
  • Ensuring a safe and pleasant stay (e.g. dietary or health needs)

Data retention is in line with legal or regulatory requirements. If you provide third-party data, you must obtain consent and inform them of this policy. For minors under 13, consent must come from guardians.

4. Data Processing Based on Consent

With your explicit consent, we may process data for:

  • Preserving your personal preferences
  • Marketing communications

5. Data Processing via Website www.duastorres.pt

We collect data via:

  • Contact forms (name and email)
  • Online reservations (name, contact, country, payment info)

6. Cookie Policy

We use cookies to enhance your experience. By continuing to browse, you accept their use. You can manage cookies via your browser settings. We use:

  • Performance cookies – for site compatibility
  • Analytics cookies (e.g. Google Analytics) – for anonymised usage stats
  • Security cookies – for access to booking platform (e-gds)

7. Data Sharing

We may share your data with:

  • Legal authorities (e.g. SEF, police)
  • Tax Authority
  • Booking engine provider
  • Accounting, IT and support service providers

8. Your Rights

Under the GDPR, you have the right to:

  • Access – know what data we process and why
  • Rectification – correct incomplete or inaccurate data
  • Erasure – request deletion of data when lawful
  • Restriction – limit processing under certain conditions
  • Portability – receive your data in a structured format
  • Objection – object to processing under certain situations
  • Withdraw consent – at any time
  • Lodge complaints – with us or with the Data Protection Authority (www.cnpd.pt)

Requests are free unless excessive and will be addressed within 30 days.

9. Contact & Complaints

To exercise your rights or raise concerns, contact our DPO:

  • Email: gdpr@duastorres.pt
  • Mail: Duas Torres Explorações Turísticas Madeira Lda, Estrada Monumental 239, 9004-536 Funchal, Portugal

10. Policy Updates

This policy may be updated to reflect changes in legislation or practices. The date of the latest update will always be visible.