Privacy and Data

Privacy Policy

Last updated: August 2026

Airosos e Janotas, Lda, responsible for operating Panorama Apartments, values the privacy of its clients and visitors and is committed to protecting their personal data.

This Privacy Policy explains how we collect, use, store and protect personal data processed through our website, our contact forms and the services associated with the booking process.

The processing of personal data is carried out in compliance with the General Data Protection Regulation (GDPR) and other applicable legislation regarding the protection of personal data.


1. Data Controller

The controller responsible for processing the personal data collected within the scope of the activities described in this Privacy Policy is:

Airosos e Janotas, Lda
NIF (Tax Number): 514281715
Cais da Ribeira, 24
4050-509 Porto, Portugal

For any question related to the processing of your personal data or the exercise of your rights, you can contact us via:

Telephone: +351 919 919 918
Email: geral@panoramapartments.pt


2. What Personal Data We Collect

The personal data we process depends on how you use our website and the services you request.

2.1. Contact form

When you use the contact form available on our website, we may collect:

  • Name;

  • Email address;

  • Content of the message;

  • Other data you voluntarily decide to include in your message.

This data is provided directly by the user and is used exclusively to analyse and respond to the request submitted.

2.2. Bookings and stays

When you make a booking through the RentalReady platform, the data necessary for managing the booking and the stay may be collected, namely:

  • First name and surname;

  • Contact details;

  • Address;

  • Identification document and respective data necessary to comply with legal obligations;

  • Dates and information relating to the stay;

  • Information required to process the booking and payment;

  • Other information necessary to provide the accommodation service.

The requested information may vary depending on the characteristics of the booking, the check-in process and the applicable legal obligations.

The RentalReady platform provides pre-check-in features which may include collecting information such as phone number, estimated time of arrival and identification documents.


3. Purposes of Processing

The personal data collected may be processed for the following purposes:

  • Responding to information and contact requests;

  • Managing and processing bookings;

  • Providing the requested accommodation services;

  • Managing the check-in and check-out process;

  • Communicating with guests regarding their booking or stay;

  • Processing or tracking payments associated with bookings;

  • Complying with legal obligations applicable to local accommodation activities;

  • Completing and communicating legally required information regarding guests;

  • Issuing invoices and complying with accounting, tax and administrative obligations;

  • Ensuring the security and proper functioning of the website and its systems;

  • Analysing website usage and performance through the analytics tools used;

  • Improving the website's content, features and user experience.

Personal data is processed only for specific, explicit and legitimate purposes, and to the extent necessary for those purposes, in accordance with the principles of purpose limitation and data minimisation provided for in the GDPR.


4. Legal Basis for Processing

The processing of your personal data may have different legal bases, depending on the purpose for which it is intended.

These bases include, in particular:

  • Performance of a contract, when processing is necessary to process and manage a booking or provide the requested services;

  • Compliance with legal obligations, in particular tax, accounting and guest registration obligations;

  • Legitimate interest, when applicable, to ensure the security, operation and improvement of our services;

  • Consent, when legally required, namely for certain uses of cookies and similar technologies.

Consent is not used as a basis for processing that is necessary for the performance of a contractual relationship or compliance with a legal obligation when another appropriate legal basis exists.


5. Booking Platform — RentalReady

Booking management is carried out through the RentalReady platform, which is used to support processes such as booking, communicating with guests, pre-check-in and stay management.

Data entered or processed through this platform may be processed by RentalReady and other service providers involved in providing services associated with the booking, in accordance with their respective roles and applicable conditions.

RentalReady provides mechanisms for presenting the privacy policy to guests during the booking process.

Whenever the processing of data is carried out by third parties on behalf of Airosos e Janotas, Lda., appropriate contractual and organisational measures will be adopted to ensure compliance with applicable data protection legislation.

Data may also be communicated to public entities or competent authorities whenever such communication is required by law or necessary to comply with a legal obligation.


6. Sharing Data with Third Parties

We may use specialised service providers to ensure the operation of the website, booking management, payment processing, website usage analysis, communication with clients and other operations necessary to provide our services.

Personal data will only be shared to the extent necessary for the purposes described in this Privacy Policy and in accordance with the applicable legal bases.

We do not sell your personal data or transfer it to third parties for commercialisation or unauthorised direct marketing purposes.

When legally required, data may be made available to competent authorities, in particular to comply with legal, tax or administrative obligations.


7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to ensure its correct functioning, improve the browsing experience, analyse website usage and, where applicable, support communication and marketing features.

Currently, we use the following tools:

  • Google Analytics, for statistical analysis and understanding website usage;

  • Meta Pixel, for campaign measurement and analysis of interactions related to Meta content and advertising.

Some cookies are necessary for the technical operation of the website, while others may depend on user consent.

When consent is legally required, analysis or marketing technologies must not be used before the respective consent is obtained. It must be possible to withdraw consent simply and at any time. The user can also manage or delete cookies through their browser settings. Disabling certain cookies may, however, affect some features of the website.


8. Data Retention

Personal data is retained only for the period necessary to fulfil the purposes for which it was collected.

Retention periods may vary depending on the nature of the data and the purpose of the processing.

Whenever there are legal, accounting, tax or guest registration obligations that require data to be retained for a specific period, the data will be kept for the legally applicable period.

Upon expiry of the applicable retention period, the data will be securely deleted or anonymised, unless its retention is necessary for the exercise or defence of rights in legal proceedings or to comply with other legal obligations.

The principle of storage limitation requires that personal data is not kept for longer than necessary for the purposes of processing, without prejudice to retention periods imposed by law.


9. Information Security

We adopt appropriate technical and organisational measures to protect personal data against:

  • Unauthorised access;

  • Accidental loss or destruction;

  • Improper alteration;

  • Unauthorised disclosure;

  • Other forms of unlawful processing.

Security measures are adjusted taking into account the nature of the processed data, the purposes of processing and the associated risks.


10. Data Transfers

Some of the technology service providers used in the operation of the website and the provision of our services may process personal data outside Portugal or the European Economic Area.

Whenever there is a transfer of personal data outside the European Economic Area, the guarantees provided for in the GDPR will be applied to ensure an adequate level of protection, where applicable.


11. Rights of Data Subjects

Under the terms of applicable legislation, the data subject may, depending on the circumstances of the processing, exercise the following rights:

  • Right of access — to know if their personal data is being processed and obtain access to it;

  • Right to rectification — to request the correction of inaccurate or incomplete personal data;

  • Right to erasure — to request the deletion of their personal data when the legal conditions for this are met;

  • Right to restriction of processing — to request that the processing of their data be restricted in certain circumstances;

  • Right to object — to object to certain processing, under the terms provided for in the GDPR;

  • Right to data portability — to receive certain personal data in a structured, commonly used and machine-readable format, when the legal conditions are met;

  • Right to withdraw consent — when processing is based on consent, this can be withdrawn at any time, without compromising the lawfulness of the processing carried out previously.

The exercise of some of these rights may be subject to limitations provided for in applicable legislation, in particular when there is a legal obligation to retain the data.


12. How to Exercise Your Rights

To exercise your rights or obtain clarification on the processing of your personal data, you can contact us via:

Airosos e Janotas, Lda
Cais da Ribeira, 24
4050-509 Porto, Portugal

Telephone: +351 919 919 918
Email: geral@panoramapartments.pt

The request should, whenever possible, identify the right you wish to exercise and include sufficient information to allow for the analysis and response to the request.

When necessary to protect personal data against fraudulent requests or improper access, we may request additional information to confirm the identity of the applicant.


13. Complaints

Without prejudice to any other available administrative or judicial remedy, the data subject has the right to lodge a complaint with the competent data protection supervisory authority.

In Portugal, the supervisory authority is the Portuguese Data Protection Authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa
Portugal

The CNPD provides its own mechanisms for submitting requests for information, complaints and reports.


14. Changes to the Privacy Policy

This Privacy Policy may be updated whenever necessary, in particular as a result of legislative, regulatory changes or changes related to the services and technologies used on the website.

The most recent version will always be available on our website.


15. Contact

For any question related to this Privacy Policy, the processing of your personal data or the exercise of your rights, you can contact us through the following means:

Airosos e Janotas, Lda
NIF: 514281715
Cais da Ribeira, 24
4050-509 Porto, Portugal
Telephone: +351 919 919 918
Email: geral@panoramapartments.pt

For questions related to the terms of use and provision of services, you can consult our Terms and Conditions.