Privacy and Data Protection Policy

1. Who is Responsible for Processing Your Data?

The entity responsible for processing your personal data collected through this website is Clever Minutes – Unipessoal, Lda, with registered office at Travessa do Grão Mestre, 16, Montinhos do Burgau, 8600-120 Luz, Lagos, with VAT number (NIF) 518087654 and contact e-mail info@aurorasol.pt (hereinafter referred to as “Aurora Sol”).

2. What Personal Data Do We Collect?

Within the scope of booking management and user contact, Aurora Sol collects and processes the following data:

• Identification Data: First name, last name, nationality, date of birth, and identification document (Passport or National ID Card — mandatory for reporting to migration authorities).
• Contact Data: E-mail address, telephone/mobile number, and postal address.
• Payment Data: Transactions are carried out through secure external platforms. Aurora Sol does not store and has no access to your full credit card details, bank accounts, or security credentials.
• Navigation Data: IP address, cookies, and website usage data (please refer to our Cookies Policy).

3. For What Purposes Do We Process Your Data?

Your personal data is collected and processed strictly for the following purposes:

• Booking and Stay Management: Processing your reservation request, billing, pre- and post-stay communications, and intermediation of the secure payment of your stay through licensed partners.
• Compliance with Legal Obligations: Mandatory communication of foreign citizens’ stays to AIMA (Agency for Integration, Migration and Asylum), invoicing to the Tax Authority (Autoridade Tributária), and filling out the Complaints Book.
• Marketing Communications: If you have given your explicit consent, for sending e-mails regarding special offers, news, or promotions from Aurora Sol.
• Security and Support: Clarifying doubts sent through our contact form and ensuring the security of our website.

4. What is the Legal Basis for Processing?

The processing of your data is lawful based on:

• Performance of a contract: Necessary to fulfill the reservation and provide the accommodation services requested.
• Compliance with legal obligations: Tax obligations and mandatory reporting of foreign guests to Portuguese authorities.
• User consent: For sending newsletters or using certain marketing cookies.

5. With Whom Do We Share Your Data?

Aurora Sol does not sell or transfer your data to third parties for commercial purposes. However, your data may be shared with:

• Public Authorities: AIMA and the Portuguese Tax and Customs Authority, in strict compliance with Portuguese law.
• Subcontractors: Technological service providers and integrated payment system suppliers that process data in an encrypted and secure manner:
  • Stripe: For the secure processing of credit/debit card payments.
  • Ifthenpay: For the secure generation and processing of Multibanco and MB WAY references.
  • Property Management Software (PMS) providers, booking engines, and website hosting services that process data strictly on our behalf.

6. How Long Do We Keep Your Data?

We retain your data only for the period strictly necessary to fulfill the purposes described in this policy:

• Billing Data: Retained for the legal period of 10 years, as required by the Portuguese Tax Authority.
• Guest Registration Data (AIMA): Retained for the legal period stipulated by the border control authorities.
• Contact/Marketing Data: Kept until the user withdraws their consent or requests its deletion.

7. What Are Your Rights?

Under the GDPR, the user has the right to:

• Access the personal data we hold about you.
• Request the rectification of incorrect or outdated data.
• Request the erasure of your data (right to be forgotten), provided it does not conflict with legal retention obligations.
• Restrict or object to the processing of your data.
• Request data portability to another entity.
• Withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

To exercise your rights, the user must send a written request to the e-mail info@aurorasol.pt or by post to the company’s registered office. You also have the right to lodge a complaint with the National Data Protection Commission (CNPD).

8. Data Security

We commit to adopting the appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, or access.

9. Updates to this Policy

Aurora Sol reserves the right to update this Privacy Policy whenever necessary to reflect legislative changes or improvements in our services. We recommend regularly checking this page.

Last updated: August 27, 2026.