Privacy Policy

Last updated: September 17, 2026

At Domusoul, we value the privacy and protection of the personal data of our guests and visitors. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, make a reservation, or contact us.

1. What personal data may we collect?

Depending on how you use our website and the services you request, we may collect different types of personal data, including:

• first and last name;
• email address;
• phone number;
• Reservation details, including arrival and departure dates, number of guests, and reserved accommodations;
• data required for invoicing;
• Information voluntarily provided by the guest when they contact us;
• data necessary for compliance with legal obligations applicable to hosting;
• Technical information related to website usage, including IP address, device type, browser, and information collected through cookies, where applicable.

Domusoul seeks to collect only the data necessary for the purposes described in this Privacy Policy.

2. What do we use your data for?

Your personal data may be used for:

• to process and manage reservations;
• Process payments related to reservations;
• Send confirmations and information necessary for your stay;
• to communicate with you before, during and after your stay;
• Provide customer support and respond to requests for information;
• Issue invoices and fulfill accounting and tax obligations;
• to fulfill legal obligations applicable to the hospitality business;
• To guarantee the security of our services and prevent fraudulent or improper use;
• To improve the functionality and user experience of our website and services, where applicable;
• to send marketing communications, offers or news from Domusoul,only when there is a legal basis for it and, when necessary, with their consent..

3. Legal basis for treatment

Depending on the purpose, the processing of your personal data may be based on different legal grounds provided for in the General Data Protection Regulation (GDPR), namely:

• execution of a contract or pre-contractual due diligence, when the data is necessary to make and manage a reservation;
• compliance with legal obligations to which Domusoul is subject;
• consent, when legally required;
• Domusoul’s pursuit of legitimate interests is permitted, provided that these interests do not override the rights and freedoms of data subjects.

When treatment depends on your consent, you may withdraw that consent at any time, without affecting the lawfulness of treatment previously performed.

4. Sharing data with third parties

Domusoul does not sell your personal data.

Your data may be shared with third parties only when necessary to provide the requested services, comply with legal obligations, or protect the legitimate interests of Domusoul.

They may, for example, have access to certain data:

• Technology and reservation management service providers;
• payment service providers;
• Service providers necessary for the management and operation of the accommodations;
• accountants and administrative service providers;
• public authorities and legally competent entities, when required.

These providers shall only process data in accordance with applicable instructions and purposes and in compliance with data protection legislation.

 

5. Payments

When you make a payment through our website, certain data may be processed by the payment service provider used by Domusoul.

Domusoul will not directly store your complete payment card details when these are processed by the respective payment service provider.

Specific information about the service provider used and the respective data processing can be found at the time of payment or through the contacts indicated in this Privacy Policy.

6. Data preservation

Personal data will only be kept for the period necessary to fulfill the purposes for which it was collected.

In certain situations, we may be required to retain certain data for longer periods to comply with legal, tax, or accounting obligations, or to exercise or defend rights in administrative or judicial proceedings.

When the data is no longer needed, it will be deleted or anonymized in accordance with applicable procedures.

7. Data security

Domusoul adopts appropriate technical and organizational measures to protect personal data against loss, destruction, alteration, unauthorized access, or any other form of improper processing.

Access to personal data is limited to individuals and entities that need this data to perform their duties or provide the necessary services.

Despite the security measures adopted, no system for transmitting or storing information over the Internet can be considered absolutely secure.

8. Cookies

Our website may use cookies and similar technologies to ensure its proper functioning, improve the user experience and, where applicable, analyze website usage or provide personalized content.

Cookies strictly necessary for the website to function may be used where legally permitted.

Other types of cookies, including certain analytics or marketing cookies, may require your consent.

You can manage your preferences through the cookie management mechanism available on the website.

For detailed information about the cookies used, their purposes and retention periods, please consult our [link to cookie policy].Cookie Policy.

9. Your rights

Under applicable law, you may exercise the following rights with respect to your personal data, where applicable:

• right of access;
• right of rectification;
• right to erasure;
• right to limitation of treatment;
• right to data portability;
• right to object;
• right to withdraw consent when the processing is based on that consent.

The exercise of some of these rights may be subject to the conditions and exceptions provided for in applicable legislation.

To exercise your rights, you can contact us through:

email:

We may request additional information to confirm the applicant’s identity whenever necessary to protect personal data against unauthorized access.

10. Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Portugal, the supervisory authority is:

National Data Protection Commission (CNPD)

11. Minors

Our services are intended for use by adults or minors under the responsibility of their parents or legal guardians.

We do not intentionally seek to collect personal data from minors through the website for purposes other than those necessary for the provision of our services or for compliance with applicable legal obligations.

12. Changes to this Privacy Policy

Domusoul may update this Privacy Policy whenever necessary, particularly to reflect legal, technological, or service-related changes.

The most recent version will always be available on our website, with the date of the last update indicated.