Politique de confidentialité

Who we are

LOFTZ is a brand of Abstract Tomorrow Unip. Lda, the data controller for personal data collected through loftz.net.

What we collect

When you send a booking or visit request we collect the details you provide: name, email, phone (optional), nationality, date of birth, occupation, gender and your requested dates.

We also keep a first-party, pseudonymous record of how the site is used (pages viewed, the page you arrived on, and the website or campaign that referred you), so we can see which channels lead to bookings. It is stored by us, is not shared, is not used for advertising, and holds no name, no account and no precise location (only a coarse country).

Separately, and only if you accept analytics cookies, we use Google Analytics for aggregate statistics.

If you stay with us

When your booking is confirmed you get a personal login to the LOFTZ guest area (account.loftz.net). There we collect what the tenancy contract and our invoices need: your full name, nationality, date of birth, ID document type, number and expiry date, a photo of your ID document, home address, phone, an optional emergency contact and, if you have one, your tax number. We also keep the payments, invoices and receipts of your stay.

When you sign your contract online we record your signature (your typed name or drawn signature), the time, your sign-in email and your IP address, as the record of a simple electronic signature (eIDAS Regulation, Article 25). Your password is stored only as a one-way hash.

Why we use it

To respond to and manage your booking or visit request, to confirm availability, to comply with legal obligations relating to tenancy, to measure which channels bring enquiries so we can improve the website, and, with consent, to run Google Analytics.

If you stay with us, to prepare, sign and manage your tenancy contract, to issue invoices and receipts, and to reach you or your emergency contact during your stay.

Legal basis

We process request data on the basis of steps taken at your request prior to entering a contract. Our first-party, pseudonymous website measurement runs under our legitimate interest in understanding and improving the site; it is privacy-preserving and you can object at any time. Google Analytics is used only with your consent.

Guest-area data is processed to perform your tenancy contract and to meet our legal obligations (invoicing and tax).

Sharing

We do not sell your data. We share it only with service providers who help us operate (for example, our email and hosting providers) under appropriate safeguards.

Invoicing data goes to our certified invoicing software (Moloni), which reports invoices to the Portuguese Tax Authority, as the law requires.

Retention

We keep request data only as long as necessary for the purposes above and to meet legal requirements, then delete it.

Tenancy contracts, invoices and the records that support them are kept for the period Portuguese law requires (generally 10 years), also after your stay ends or your login is closed.

The photo of your ID document is deleted once your stay has ended and your deposit is settled (60 days after check-out at the latest), unless a legal matter about the contract is still open; then it is kept until that is resolved, for up to 10 years.

Your rights

Under the GDPR you may request access to, correction or deletion of your data, object to or restrict processing, and lodge a complaint with the Portuguese data protection authority (CNPD).

You can contact us about this policy at henriquesantana@loftz.net.