Aurora Palaces
Lisbon · Portugal
This website describes lodging that includes one licensed evening venue for adults aged 18 or older. Aurora Palaces does not operate casinos, accept wagers, or provide gaming services. Any play activity is solely between you and the licensed operator under applicable Portuguese law.
1. Data controller
The publisher of aurorapalaces.com (data controller under Article 4(7) GDPR): HOTEL LISBOA LDA, Rua Barata Salgueiro, nº 5 e 5-A, 1169-066 Lisboa, Portugal. Email: [email protected]. Commercial registration: 501 642 030. VAT: PT501642030.
2. Scope and purpose
We process personal data when you visit aurorapalaces.com or contact us. The site publishes editorial hotel information for Lisbon — Alfama, Castelo, Avenida, and Lapa — plus one editorial casino round. We do not sell rooms, process accommodation payments, or operate gaming products.
3. Categories of personal data
3.1 Data you provide
- Contact details (name, email address, message content) when you use the Concierge Desk form or email us.
- Any optional travel preferences you choose to share in correspondence.
3.2 Automatically collected data
- Technical and usage data such as IP address, browser type, device identifiers, pages viewed, referring URL, date and time of access, and approximate location derived from IP.
- Server and security logs required to operate and protect the website.
3.3 Cookies and similar technologies
See our Cookies Policy for details on cookies and local storage (if any).
4. Legal bases (GDPR Article 6)
- Art. 6(1)(b) GDPR — processing necessary to respond to your requests and pre-contractual steps at your request.
- Art. 6(1)(f) GDPR — legitimate interests in operating, securing, and improving aurorapalaces.com, preventing abuse, and maintaining editorial archives, balanced against your rights.
- Art. 6(1)(c) GDPR — compliance with legal obligations under Portuguese and EU law (including tax and accounting duties where applicable).
- Art. 6(1)(a) GDPR — consent where required for non-essential cookies or optional marketing (only if explicitly offered and accepted).
5. Recipients and transfers
We do not sell personal data. Processors (e.g. hosting, email delivery, analytics if enabled) may process data on our instructions under Article 28 GDPR data processing agreements. If data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Retention
- Contact messages: retained as long as needed to reply and for a reasonable period thereafter for dispute resolution (typically up to 24 months unless law requires longer).
- Server logs: retained for a limited security window (typically up to 90 days) unless investigation requires extension.
- Legal/tax records: retained for periods required by Portuguese law.
7. Security
We implement appropriate technical and organisational measures under Article 32 GDPR, including access controls and HTTPS where configured on production hosting. No method of transmission over the Internet is completely secure.
8. Your rights
Under GDPR Articles 15–22 you may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.
To exercise rights, email [email protected]. We respond within one month as required by Article 12 GDPR, subject to lawful extensions for complex requests.
9. Supervisory authority — CNPD (Portugal)
You have the right to lodge a complaint with the Portuguese data protection authority:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal
Website: www.cnpd.pt
10. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects within the meaning of Article 22 GDPR.
11. Children
Our editorial content is intended for adults planning travel. The evening-venue listing is marked 18+. We do not knowingly collect data from children under 16 without parental consent.
12. Changes
We may update this Privacy Policy. The “Effective” date above will change when we publish material updates on aurorapalaces.com.
13. Contact
Data protection inquiries: [email protected].