Fecha de Entrada en Vigor: Enero 2026
Versión 1.0
Vivências ("nosotros", "nuestro") opera una plataforma de mercado de turismo rural en Portugal. Esta política de privacidad explica cómo recopilamos, usamos, almacenamos y protegemos sus datos personales de acuerdo con el Reglamento General de Protección de Datos (RGPD) y la legislación portuguesa de protección de datos.
Recopilamos las siguientes categorías de datos personales: dirección de correo electrónico (para creación de cuenta y comunicación), hash de contraseña (para autenticación — nunca almacenamos su contraseña en texto plano), datos empresariales para socios (nombre de la empresa, NIF), registros de consentimiento (sus preferencias de cookies y términos), y datos de uso si ha dado su consentimiento a las cookies analíticas.
Utilizamos sus datos para: gestión de cuentas y autenticación, prestación de nuestros servicios de mercado, comunicación sobre sus reservas y cuenta, cumplimiento legal (incluidas las obligaciones fiscales y el registro del RGPD), y mejora de nuestra plataforma (solo con su consentimiento de análisis).
When you use our messaging features, we process: message content and metadata (timestamps, read receipts), typing indicators (processed in real-time, not stored), WebSocket connection data (connection state, session tokens), and conversation history. Messages are stored to enable asynchronous communication and are accessible to conversation participants and platform administrators for moderation purposes. Message data is retained while your account is active and deleted upon account deletion.
When you submit or receive reviews, we process: review text content and ratings, reviewer identity (protected by our double-blind review system until both parties have submitted), guest reputation scores (calculated from aggregated review data), and review helpfulness votes. Reviews use a blind submission mechanism where neither party can see the other's review until both have submitted or the review window expires. Published reviews are visible publicly (guest reviews of listings) or to the reviewed party only (partner reviews of guests). Upon account deletion, review text is anonymized but the rating data is retained for aggregate accuracy.
We use AI technology (powered by Anthropic Claude) to assist with content moderation of reviews, messages, listing descriptions, and uploaded images. AI moderation analyzes content for policy violations, spam, and safety concerns. Content flagged by AI is reviewed by human moderators before any action is taken -- no automated decision-making occurs without human oversight. Content sent for AI analysis is processed by Anthropic under their data processing agreement. AI moderation logs are retained for 90 days for audit purposes. You have the right to appeal any moderation decision through our appeals process.
If you file or are involved in a dispute, we process: dispute details and category, evidence submitted by both parties (text descriptions, uploaded files, conversation history), mediation chat messages between parties and administrators, resolution outcomes and any refund records. Dispute data is retained for 2 years after resolution for legal compliance and audit purposes. Evidence files are stored securely and access is restricted to dispute participants and administrators.
When you report content on our platform (as required by the Digital Services Act), we process: the report submission details, reporter identity (if provided -- anonymous reporting is supported), the reported content reference, and processing status. Reports are reviewed by our moderation team. Report data is retained for 6 months after resolution.
Under the Digital Services Act (DSA), we are required to collect and verify the identity of traders (partners) on our platform. This includes: legal business name, registration number, registered address, contact details, VAT identification number, and identity of the legal representative. This information is collected during partner onboarding and displayed to consumers as required by the DSA. Partner identity data is retained for the duration of the business relationship and for 6 months after account closure.
Tratamos sus datos bajo las siguientes bases legales: consentimiento (preferencias de cookies, comunicaciónes de marketing), ejecución de contrato (prestación de nuestros servicios de mercado), interés legítimo (seguridad de la plataforma, prevención del fraude) y obligación legal (registros fiscales, cumplimiento del RGPD).
Los datos de la cuenta se conservan mientras su cuenta esté activa. Los registros de consentimiento se conservan con fines de auditoría según lo exige el RGPD. Los registros financieros se conservan según lo exige la legislación fiscal portuguesa. Tras la eliminación de la cuenta, los datos personales se anonimizan o eliminan en un plazo de 30 días, salvo que las obligaciones legales exijan una conservación más prolongada.
Specific retention periods for platform features: messages are deleted with account deletion, review text is anonymized (ratings retained for aggregate accuracy), AI moderation logs are retained for 90 days, dispute records are retained for 2 years post-resolution, content reports are retained for 6 months post-resolution, and partner KYBC data is retained for 6 months after account closure.
En virtud del RGPD, tiene derecho a: acceder a sus datos personales, rectificar datos inexactos, suprimir sus datos (derecho al olvido), portar sus datos a otro servicio, restringir el tratamiento en determinadas circunstancias, oponerse al tratamiento basado en interés legítimo y retirar su consentimiento en cualquier momento sin que ello afecte a la licitud del tratamiento previo.
To exercise any of these rights, contact our Data Protection Officer at dpo@vivencias.pt. We will respond within 30 days as required by GDPR. If you are unsatisfied with our response, you have the right to lodge a complaint with the CNPD (Comissao Nacional de Protecao de Dados) at www.cnpd.pt.
Compartimos datos con: procesadores de pagos (para el procesamiento de transacciónes), proveedores de servicios de correo electrónico (para emails transacciónales) y proveedores de alojamiento (para el funcionamiento de la plataforma). No vendemos sus datos personales a ningún tercero.
Utilizamos cookies esenciales (necesarias para el funcionamiento del sitio), cookies analíticas (con su consentimiento) y cookies de marketing (con su consentimiento). Puede gestionar sus preferencias de cookies en cualquier momento mediante la configuración de cookies disponible en nuestro sitio.
As a consumer, you have the right to seek assistance from the following authorities and organizations:
DECO -- Associacao Portuguesa para a Defesa do Consumidor (Portuguese Consumer Protection Association)
deco.proteste.ptPortal da Queixa (Consumer Complaints Portal)
portaldaqueixa.comCNPD -- Comissao Nacional de Protecao de Dados (National Data Protection Commission)
www.cnpd.ptEuropean Consumer Centre Portugal (Centro Europeu do Consumidor)
cec.consumidor.ptWe use the Google Ads API to manage and optimize advertising campaigns that promote our rural tourism properties and experiences. Through the Google Ads API, we process the following data: campaign performance metrics (impressions, clicks, conversions, costs), keyword performance data for search advertising optimization, conversion tracking data including hashed email addresses and click identifiers (gclid) for Enhanced Conversions, and aggregated audience data for remarketing campaigns. This data is used to measure and optimize the effectiveness of our advertising campaigns, generate AI-powered ad copy for our listings, and provide performance analytics to platform administrators. Data shared with Google includes hashed user emails (for Enhanced Conversions with consent) and click identifiers for attribution. Campaign data is synced daily and retained for analytics purposes. Conversion data is retained per Google Ads data retention policies. The legal basis for this processing is legitimate interest (advertising optimization) and consent (marketing cookies via Consent Mode V2). Users can opt out of personalized advertising via Google Ad Settings at adssettings.google.com. Our use of the Google Ads API is subject to Google's Terms of Service and the Google API Services User Data Policy, including the Limited Use requirements. For more information about Google's data practices, see Google's Privacy Policy at policies.google.com/privacy.
Para cualquier consulta sobre protección de datos, póngase en contacto con nuestro Delegado de Protección de Datos en: dpo@vivencias.pt [correo electrónico provisional]
Podemos actualizar está política de privacidad de vez en cuando. Le notificaremos cualquier cambio sustancial por correo electrónico o mediante un aviso destacado en nuestra plataforma.