Portofino Restaurant & Bar is committed to safeguarding the privacy and personal data of our guests and website visitors. This notice clearly describes how we collect, process, store, and protect your information in strict accordance with the General Data Protection Regulation (EU Regulation 2016/679 - GDPR) and applicable Portuguese data protection laws.
1. Data Controller
The data controller is Portofino Restaurante & Bar, located at Praia do Ouro, Av. dos Náufragos 2970, Sesimbra, Portugal. Inquiries regarding data privacy may be directed to geral@portofino.pt or by phone to +351 919 480 286.
2. Purposes of Data Processing
Personal data is collected strictly for legitimate purposes: (a) Managing and confirming dining reservations (name, telephone number, email, date, and party preferences); (b) Responding to event inquiries, group menus, and gift voucher orders; (c) Sending informational newsletters when explicitly consented to by the user (with immediate one-click opt-out available at any time); (d) Complying with statutory accounting and tax obligations applicable to restaurant operations.
3. Data Retention
Reservation records are retained only for the duration necessary to deliver the service and maintain service continuity, after which they are safely anonymized or deleted. Accounting records are preserved in compliance with mandatory statutory retention periods.
4. Your Rights as a Data Subject
Under the GDPR, you have the right to request access to your personal data, correction of inaccurate details, erasure ('right to be forgotten'), restriction of processing, objection to marketing, and data portability. To exercise your rights, email geral@portofino.pt. You also have the right to lodge a complaint with the national supervisory authority (CNPD - www.cnpd.pt).
5. Cookies & Information Security
We use only essential technical cookies necessary for secure site navigation and aggregated privacy-friendly analytics without invasive personal tracking. Robust organizational and technical safeguards are maintained to protect your data against unauthorized access, alteration, or loss.