Privacy Policy
Who handles your data
Creative Azimuth, Lda. (tax number 513372962), trading as The Lisbon Concierge, with registered office at Av. D. João V, n.º 5, 3.º Dto., 2720-166 Águas Livres, Portugal, is the data controller for the data collected on this website.
For any privacy question, write to info@thelisbonconcierge.com or call +351 211 946 406.
Contact forms
We collect your email and your message. On the owners form, also your name, phone number (optional), the area and size of the property, its Alojamento Local registration status and how you found us. With the request we keep where your visit came from: campaign, landing page and referring website.
We use this data to reply to you and, if you go ahead, to prepare a contract. The legal basis is the pre-contractual steps taken at your request and our legitimate interest in replying to people who contact us.
Ads on ChatGPT: what we send to OpenAI
If you reached the website through an ad on ChatGPT, the address carries a click identifier created by OpenAI. If you then send a contact form, our server gives OpenAI that identifier, the type of event (a contact request), the time and the page you landed on.
We do not send your name, email, phone number, message, IP address or browser details. We send nothing if you declined cookies, or if you did not come from an ad on ChatGPT.
We do this to find out whether our ads bring in contacts, based on our legitimate interest in measuring our advertising. You can object at any time: decline cookies before sending the form, or write to us.
OpenAI handles this data as an independent controller, to produce reports, measure and optimise ads, create custom audiences and improve its services, and may link it to your click on the ad. Its use is governed by the OpenAI privacy policy.
Website statistics
We use Google Analytics 4 to understand how the website is used. Its cookies are only stored if you accept them, and the legal basis is your consent. If you decline, Google may still receive cookieless signals about the visit, such as the page viewed, which we use for aggregate statistics based on our legitimate interest. The click identifier from a ChatGPT ad is never sent to Google.
Our server also counts visits that come from ads, including from people who decline cookies: date and time, page, campaign, ad and whether it was a bot. This count is stored in Firebase (Google), with no cookies, no IP address and nothing that identifies you.
Technical logs and security
The server does not log every visit: it only logs technical errors and warnings. Those logs include the IP address and the page address, which may contain the click identifier. We use them to keep the website running and protect it from abuse, based on our legitimate interest, and they are deleted after 90 days.
Cookies
cookie-consent: stores your cookie choice, for one year. _ga and _ga_*: Google Analytics cookies, only if you accept, for up to two years. If you accept, we also keep where your visit came from in your browser (tlc-attribution), until you close the tab.
We do not use advertising cookies or the OpenAI pixel.
Who we share data with
We do not sell personal data. Besides OpenAI, as described above, we use service providers who process it on our behalf: Hetzner (website hosting), Google (email, Analytics and Firebase), MXroute (email sending), Slack (internal alerts about contact requests) and the suppliers of our internal management and artificial intelligence tools.
Some of these providers, like OpenAI, may process data outside the European Economic Area, notably in the United States. In those cases, the transfer relies on a European Commission adequacy decision or on standard contractual clauses.
How long we keep it
Contact requests: up to two years after the last contact, unless they lead to a contract or the law requires us to keep them longer. Google Analytics data: up to 14 months. Technical logs: 90 days. Data sent to OpenAI is kept under its own policy.
Your rights
You can ask for access to, correction, erasure or portability of your data, for processing to be restricted, and you can object to processing based on legitimate interest. Where the basis is consent, you can withdraw it at any time, without affecting processing already carried out. To do so, write to info@thelisbonconcierge.com. We reply within one month.
You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados.
Changes
If this policy changes, we will publish the new version here, with the date of the update.