Privacy Policy

1. Who is the data controller

The controller of your personal data is DOTVILAS — GESTÃO DE ESPAÇOS PUBLICITÁRIOS, LDA., a Portuguese company registered under number 506 837 114, with registered office at Rua Brito e Cunha, n.º 579, 4450-088 Matosinhos, Portugal, trading as MyStay.

Contact: info@mystay.co · +351 22 145 0772

For any privacy-related matter or to exercise your rights, please contact us at info@mystay.co.

2. What data we collect

We only collect data that is strictly necessary to provide our services and to meet legal obligations. Specifically:

• Identification and contact data (name, email, phone, address).
• Property data (location, characteristics, licensing documents where applicable).
• Website usage data (pages visited, device, IP address, cookies).
• Payment data handled through our payment processor (Stripe) — we never store card details on our systems.
• Communications. The content of communications exchanged with us by email, SMS, chat or telephone.
• Source data. When you reach our website through an advertisement, we record the campaign parameters present in the address and the click identifier assigned by the advertising platform (for example fbclid or gclid).

3. How we use your data

• To deliver the services you have contracted (property management, distribution, invoicing, guest support).
• To respond to information requests, estimates or meeting bookings.
• To send service-related communications (transactional and, with your consent, marketing).
• To improve website performance and service quality through aggregated analytics.
• To comply with legal, tax and accounting obligations.
• Measuring and improving our advertising, by understanding which advertisements lead to enquiries and contracts, so that we invest where it works.

4. Legal basis

We process your data under one of the following GDPR bases: (i) performance of a contract with you; (ii) compliance with legal obligations; (iii) legitimate interests of MyStay (e.g. site security); (iv) your consent, where applicable (e.g. newsletters).

Legitimate interest, to measure the effectiveness of our advertising and correctly attribute the enquiries we receive.

Performance of a contract, to run campaigns and prize draws you take part in, including the necessary communications and the awarding of prizes.

5. Who we share your data with

We only share your data with third parties when strictly necessary to deliver the service or to comply with the law, namely:

• Distribution platforms (Booking.com, Airbnb, Vrbo and others) for listing and booking management.
• Payment processors (Stripe) to issue payouts.
• Technology providers (hosting, email, analytics) bound by data processing agreements.
• Supabase — hosting of our contact and enquiry database.
• Desklab — customer relationship management and sending of communications.
• Google — email and productivity tools.
• Public authorities when legally required (SEF/AIMA, Tax Authority, INE).

6. International transfers

Some of our providers may process data outside the European Economic Area. In those cases, we make sure appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission.

7. How long we keep your data

We retain your data only for as long as necessary for the purpose for which it was collected and to comply with legal retention obligations (for example, 10 years for tax documents). After that, data is deleted or anonymised.

Contact details collected through forms, enquiries or participation in campaigns are kept for as long as consent remains in place, and are deleted after 24 months without any interaction with our communications. Withdrawal of consent or objection to processing is actioned immediately, regardless of that period.

8. Your rights

Under the GDPR you have, at any time, the following rights over your data:

• Access — know what data we hold about you.
• Rectification — correct inaccurate or outdated data.
• Erasure — request deletion of your data, where applicable.
• Restriction and objection to processing.
• Portability — receive your data in a structured format.
• Withdraw your consent at any time, without affecting the lawfulness of previous processing.
• Lodge a complaint with the Portuguese Data Protection Authority (CNPD).

9. Cookies

We use essential cookies for the site to work and, with your consent, analytics and marketing cookies. You can manage your preferences at any time through your browser settings.

10. Changes to this policy

This policy may be updated to reflect legal changes or service improvements. The latest version is always available on this page, with the date of the last update.

11. Contact

To exercise your rights or ask any privacy-related question, contact us at info@mystay.co or by phone on +351 22 145 0772.