Privacy & Data Protection Policy — Place to Stay (v2026-08-14 DRAFT)
Version 2026-08-14.
Who we are. Placetostay Student Housing, Lda. (NIPC 509300839, Rua Rodrigo da Fonseca 24, Lisbon) — "Place to Stay", "we". Contact: management@placetostay.pt.
What we collect and why.
- Identity & contact (name, email, phone, nationality, ID/passport number and document image, emergency contact): to perform your accommodation agreement and to meet our legal obligations (guest registration with the Portuguese authorities — SEF/AIMA "Boletim de Alojamento" — and invoicing). Legal bases: contract performance; legal obligation.
- Stay & payment records (dates, room, rent/charges, payments, deposits): contract performance; legal obligation (accounting).
- Room condition records (inspection answers, photos of the room you submit or staff take): performance of the agreement (Annex II room verification) and our legitimate interest in maintaining the property.
- Access records (door-code issuance and use windows): legitimate interest in the security of the building and its residents.
- Communications (emails/messages with us): contract performance and our legitimate interest in keeping a record of what was agreed.
Who processes it for us.
Hosting on our own EU server; email delivery (Brevo), Google Workspace (internal operations), e-signatures (OpenSign, EU), card payments (Stripe — we never see full card numbers), smart-lock codes (Nuki). Each processor acts under contract and GDPR safeguards. We do not sell personal data, ever.
Retention.
Identity documents and stay records: for the duration of your agreement and thereafter only as long as tax and guest-registration law requires; inspection photos: up to 24 months after check-out (damage/deposit evidence); we delete or anonymise after that.
Your rights.
Access, rectification, erasure, restriction, portability and objection — email management@placetostay.pt. You may complain to the CNPD (Comissão Nacional de Proteção de Dados, cnpd.pt).
Cookies.
Our portals and website use only strictly-necessary cookies: a session cookie that keeps you signed in. No advertising, analytics or third-party tracking cookies are set. Because these cookies are essential, no consent banner is required; disabling them in your browser will prevent sign-in from working.
Changes.
We version this policy; if it changes materially you will be asked to review and accept the new version on your next portal visit.