Privacy Policy

1 · Data controller

PNstays, operating short-term rentals in Funchal, Madeira (ALEP member no. 4676), is the controller of the personal data collected through this website. For any question about your data, write to us at geral@pnstays.pt.

2 · What data we collect

We collect only what is necessary, and always from one of these situations:

• Contact forms — name, email address, phone (optional) and the message you write. On the owners' form, also the property location, if you provide it.
• Virtual assistant — the content of the messages you exchange with the assistant. It does not ask for your name or email; if you write them into a message, they are kept with that conversation.
• Technical data — IP address and access logs, generated automatically for site security and to limit abusive use.
• Cookies and similar identifiers — analytics and marketing only, and only if you consent. See the Cookie Policy.

We do not collect special category data (health, beliefs, ethnic origin) and we do not take automated decisions producing legal effects concerning you.

3 · Bookings and payments

On this website you make a booking request, not a confirmed booking. We check availability and reply with the confirmation and payment instructions.

This website does not collect, see or store card or payment data. Payment is made afterwards, by card or by bank transfer. For card payments, details are entered on a Stripe page, outside this website, and handled directly by them.

4 · Purposes and legal basis

5 · Who processes data on our behalf

We do not sell your data and we do not share it for third-party marketing. We use service providers who process data on our behalf, strictly as needed:

• Cloudflare — website hosting, database, file storage and anti-bot protection on our forms (Turnstile);
• Resend — delivering form messages to our inbox;
• Microsoft — website usage statistics and session recordings (Clarity), only with your consent;
• Anthropic — generating the virtual assistant's replies;
• Stripe — processing payments. Card details are handled directly by Stripe and never reach this website;
• TalkGuest — the system where we manage bookings and availability, and where online check-in takes place (guest identification details, expected arrival and departure times and, where applicable, flight number);
• Google (Analytics and Tag Manager) and Meta (Pixel) — statistics and campaign measurement, only with your consent.

We may also disclose data to public authorities where the law requires it.

6 · Transfers outside the European Union

Some of these providers are based outside the European Economic Area, notably in the United States. Where that happens, transfers rely on European Commission adequacy decisions or on standard contractual clauses, with the safeguards required by the GDPR.

7 · How long we keep it

• Contact messages — up to 24 months after the last contact, unless the relationship continues;
• Virtual assistant conversations — up to 12 months;
• Guest registration data — for the period required by short-term rental legislation and by the rules on reporting to the authorities;
• Records with tax relevance — 10 years, as required by law;
• Analytics and marketing data — for the periods set by the respective providers, listed in the Cookie Policy.

8 · Your rights

At any time you may request access to your data, its rectification or erasure, restriction of or objection to processing, and portability. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand — for cookies, simply change your preferences in the site banner.

To exercise any of these rights, write to geral@pnstays.pt. We reply within one month. If you believe your data is not being handled properly, you have the right to lodge a complaint with the Portuguese data protection authority, CNPD (cnpd.pt).

9 · Children

This website is not directed at children under 16 and we do not knowingly collect their data. If you become aware that a child has provided us with data, contact us and we will delete it.

10 · Changes to this policy

This policy may be updated whenever the site's services change or where the law requires. The date of the last update is shown at the top of this page.