Data di Entrata in Vigore: Gennaio 2026
Versione 1.0
Vivências ("noi", "ci", "nostro") gestisce una piattaforma di marketplace per il turismo rurale in Portogallo. Questa informativa sulla privacy spiega come raccogliamo, utilizziamo, conserviamo e proteggiamo i tuoi dati personali in conformità con il Regolamento Generale sulla Protezione dei Dati (GDPR) e la normativa portoghese sulla protezione dei dati.
Raccogliamo le seguenti categorie di dati personali: indirizzo email (per la creazione dell'account e la comunicazione), hash della password (per l'autenticazione — non conserviamo mai la password in chiaro), dettagli aziendali per i partner (nome dell'azienda, partita IVA), registri dei consensi (le preferenze sui cookie e sui termini) e dati di utilizzo se hai acconsentito ai cookie analitici.
Utilizziamo i tuoi dati per: la gestione dell'account e l'autenticazione, la fornitura dei nostri servizi di marketplace, la comunicazione riguardante le tue prenotazioni e il tuo account, la conformità legale (inclusi gli obblighi fiscali e la registrazione GDPR) e il miglioramento della nostra piattaforma (solo con il tuo consenso analitico).
When you use our messaging features, we process: message content and metadata (timestamps, read receipts), typing indicators (processed in real-time, not stored), WebSocket connection data (connection state, session tokens), and conversation history. Messages are stored to enable asynchronous communication and are accessible to conversation participants and platform administrators for moderation purposes. Message data is retained while your account is active and deleted upon account deletion.
When you submit or receive reviews, we process: review text content and ratings, reviewer identity (protected by our double-blind review system until both parties have submitted), guest reputation scores (calculated from aggregated review data), and review helpfulness votes. Reviews use a blind submission mechanism where neither party can see the other's review until both have submitted or the review window expires. Published reviews are visible publicly (guest reviews of listings) or to the reviewed party only (partner reviews of guests). Upon account deletion, review text is anonymized but the rating data is retained for aggregate accuracy.
We use AI technology (powered by Anthropic Claude) to assist with content moderation of reviews, messages, listing descriptions, and uploaded images. AI moderation analyzes content for policy violations, spam, and safety concerns. Content flagged by AI is reviewed by human moderators before any action is taken -- no automated decision-making occurs without human oversight. Content sent for AI analysis is processed by Anthropic under their data processing agreement. AI moderation logs are retained for 90 days for audit purposes. You have the right to appeal any moderation decision through our appeals process.
If you file or are involved in a dispute, we process: dispute details and category, evidence submitted by both parties (text descriptions, uploaded files, conversation history), mediation chat messages between parties and administrators, resolution outcomes and any refund records. Dispute data is retained for 2 years after resolution for legal compliance and audit purposes. Evidence files are stored securely and access is restricted to dispute participants and administrators.
When you report content on our platform (as required by the Digital Services Act), we process: the report submission details, reporter identity (if provided -- anonymous reporting is supported), the reported content reference, and processing status. Reports are reviewed by our moderation team. Report data is retained for 6 months after resolution.
Under the Digital Services Act (DSA), we are required to collect and verify the identity of traders (partners) on our platform. This includes: legal business name, registration number, registered address, contact details, VAT identification number, and identity of the legal representative. This information is collected during partner onboarding and displayed to consumers as required by the DSA. Partner identity data is retained for the duration of the business relationship and for 6 months after account closure.
Trattiamo i tuoi dati sulla base delle seguenti basi giuridiche: consenso (preferenze cookie, comunicazioni di marketing), esecuzione del contratto (fornitura dei nostri servizi di marketplace), interesse legittimo (sicurezza della piattaforma, prevenzione delle frodi) e obbligo legale (registri fiscali, conformità GDPR).
I dati dell'account vengono conservati finché il tuo account è attivo. I registri dei consensi vengono conservati a fini di audit come richiesto dal GDPR. I dati finanziari vengono conservati come richiesto dalla normativa fiscale portoghese. In caso di cancellazione dell'account, i dati personali vengono anonimizzati o eliminati entro 30 giorni, salvo che gli obblighi legali richiedano una conservazione più lunga.
Specific retention periods for platform features: messages are deleted with account deletion, review text is anonymized (ratings retained for aggregate accuracy), AI moderation logs are retained for 90 days, dispute records are retained for 2 years post-resolution, content reports are retained for 6 months post-resolution, and partner KYBC data is retained for 6 months after account closure.
Ai sensi del GDPR, hai il diritto di: accedere ai tuoi dati personali, rettificare i dati inesatti, cancellare i tuoi dati (diritto all'oblio), trasferire i tuoi dati a un altro servizio, limitare il trattamento in determinate circostanze, opporti al trattamento basato su interesse legittimo e revocare il consenso in qualsiasi momento senza pregiudicare la liceità del trattamento precedente.
To exercise any of these rights, contact our Data Protection Officer at dpo@vivencias.pt. We will respond within 30 days as required by GDPR. If you are unsatisfied with our response, you have the right to lodge a complaint with the CNPD (Comissao Nacional de Protecao de Dados) at www.cnpd.pt.
Condividiamo i dati con: processori di pagamento (per l'elaborazione delle transazioni), fornitori di servizi email (per le email transazionali) e fornitori di hosting (per il funzionamento della piattaforma). Non vendiamo i tuoi dati personali a terze parti.
Utilizziamo cookie essenziali (necessari per il funzionamento del sito), cookie analitici (con il tuo consenso) e cookie di marketing (con il tuo consenso). Puoi gestire le tue preferenze sui cookie in qualsiasi momento tramite le impostazioni sui cookie disponibili sul nostro sito.
As a consumer, you have the right to seek assistance from the following authorities and organizations:
DECO -- Associacao Portuguesa para a Defesa do Consumidor (Portuguese Consumer Protection Association)
deco.proteste.ptPortal da Queixa (Consumer Complaints Portal)
portaldaqueixa.comCNPD -- Comissao Nacional de Protecao de Dados (National Data Protection Commission)
www.cnpd.ptEuropean Consumer Centre Portugal (Centro Europeu do Consumidor)
cec.consumidor.ptWe use the Google Ads API to manage and optimize advertising campaigns that promote our rural tourism properties and experiences. Through the Google Ads API, we process the following data: campaign performance metrics (impressions, clicks, conversions, costs), keyword performance data for search advertising optimization, conversion tracking data including hashed email addresses and click identifiers (gclid) for Enhanced Conversions, and aggregated audience data for remarketing campaigns. This data is used to measure and optimize the effectiveness of our advertising campaigns, generate AI-powered ad copy for our listings, and provide performance analytics to platform administrators. Data shared with Google includes hashed user emails (for Enhanced Conversions with consent) and click identifiers for attribution. Campaign data is synced daily and retained for analytics purposes. Conversion data is retained per Google Ads data retention policies. The legal basis for this processing is legitimate interest (advertising optimization) and consent (marketing cookies via Consent Mode V2). Users can opt out of personalized advertising via Google Ad Settings at adssettings.google.com. Our use of the Google Ads API is subject to Google's Terms of Service and the Google API Services User Data Policy, including the Limited Use requirements. For more information about Google's data practices, see Google's Privacy Policy at policies.google.com/privacy.
Per qualsiasi richiesta relativa alla protezione dei dati, si prega di contattare il nostro Responsabile della Protezione dei Dati all'indirizzo: dpo@vivencias.pt
Potremmo aggiornare questa informativa sulla privacy di tanto in tanto. Ti informeremo di eventuali modifiche sostanziali tramite email o un avviso prominente sulla nostra piattaforma.