This policy explains how we process the personal data of people who ask us for information or proposals for events at Casa Noronha Lima — through the forms on this website, by email or by WhatsApp — and the rights you have over that data.
1. Who is the controller
Host Wise, Lda., tax number (NIF) 514142375, registered office at Rua Sá da Bandeira, n.º 706, 6D, 4000-432 Porto, Portugal. Host Wise manages Casa Noronha Lima (Noronha Lima Boutique Hotel).
For any question about your data, write to events@hostwise.pt.
2. What data we process
- The data you enter in the form: name, email, phone, company (for corporate events), event type, planned date, number of guests and days, and the message you write.
- The content of the messages you exchange with us by email or WhatsApp, including attachments, and the data of other people you mention in them (for example colleagues, family members or suppliers).
- The data we create while handling your request: proposals, amounts and payments, team notes, request status and contact history.
- The website page and the campaign from which you reached the form, and technical browsing data collected by the measurement tools described in section 8.
3. Why we use the data and on what legal basis
- To answer your request, prepare and send proposals, schedule visits and follow up until you decide, including reminders when we do not hear back. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and, if the event is booked, the performance of the contract.
- To answer requests made on behalf of a company and to process the data of other people mentioned in messages, as far as needed to organise the event. Legal basis: our legitimate interest in answering the request and organising the event (Article 6(1)(f) GDPR).
- If you start filling in the form, enter your name and email and do not send it, we may send you an email inviting you to complete your request. Legal basis: our legitimate interest in following up on a request you started.
- To manage requests internally, improve our service and produce aggregated statistics. Legal basis: legitimate interest.
- To comply with legal obligations, for example invoicing and accounting. Legal basis: legal obligation (Article 6(1)(c) GDPR).
We do not rely on your consent. The box you tick in the form only confirms that you have read this policy. Whenever we rely on legitimate interest, we have balanced that interest against your rights, and you can object to that processing at any time (section 9).
4. Use of artificial intelligence
We use artificial intelligence tools to help us handle requests: summarising conversations, identifying request details (such as dates, number of guests or budget), classifying messages, suggesting and drafting replies and proposals and, in some cases, automatically sending a first reply or a reminder.
To do so, the content of messages and the request data are sent to artificial intelligence model providers (such as Anthropic, OpenAI or Google), which process them on our behalf and under our instructions.
Artificial intelligence does not make decisions that produce legal effects concerning you or similarly significantly affect you. Prices, availability and whether an event is accepted are always decided by our team.
5. Who we share the data with
- The Host Wise team that manages Casa Noronha Lima.
- Service providers that process the data on our behalf: hosting of the website and the management platform (Vercel), database (Supabase), email (Google Workspace and Resend), surveys (Typeform), WhatsApp (Meta), when you contact us that way, artificial intelligence models (section 4) and website measurement (Google, section 8).
- Event suppliers (for example catering or decoration), only when needed to organise the event you book and only with the data needed.
- Public authorities, when required by law.
We do not sell your data.
6. Transfers outside the European Economic Area
Some of these providers are based in the United States or may access the data from there. In those cases the transfer relies on the European Commission adequacy decision for the EU-US Data Privacy Framework, for certified companies, or on the standard contractual clauses approved by the European Commission.
7. How long we keep the data
We keep the data while the request is ongoing and, after that, only for as long as needed for the purposes above, to comply with legal obligations (for example, invoicing records are kept for 10 years) or to defend our rights. The specific retention periods will be stated in this policy.
8. Website measurement
This website uses Google Tag Manager to measure visits and the performance of our advertising campaigns. When you enter your contact details in the form, they may be passed to this tool to measure how well the campaigns work.
9. Your rights
You can at any time ask for access to your data, its correction or erasure, restriction of processing or data portability, and object to processing based on legitimate interest, including reminders and processing with artificial intelligence.
To exercise these rights, write to events@hostwise.pt. We reply within one month.
You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (www.cnpd.pt).
10. Changes to this policy
We may update this policy. The date of the last update is shown at the top of the page.