1. Data Controller
Dilema Silvestre Lda (under the brand "Dreams Collection") is the entity responsible for processing personal data collected through the website and online booking system. For any questions related to the processing of your data, you can contact us through the following means:
Email: reservas@dreamscollection.pt
Mobile: +351 965 848 682

2. What Data We Collect
In the context of bookings and website use, we collect the following personal data:

  • Identification data: Full name;

  • Contact data: Email address and phone number;

  • Tax data: NIF/Tax ID (when requested for invoicing purposes);

  • Payment data: Credit/debit card details, securely processed via Stripe, a PCI-DSS Level 1 certified service provider;

  • Browsing data: IP address, browser type, pages visited, and visit duration (via cookies – see Cookie Policy).

3. Purposes and Legal Basis for Processing
Your data is processed for the following purposes:

  • 3.1 Booking management: Performance of a contract (Art. 6(1)(b) of the GDPR) — We process your data to manage, confirm, and execute your accommodation booking, including issuing invoices and sending stay-related communications.

  • 3.2 Legal obligations: Legal obligation (Art. 6(1)(c) of the GDPR) — Certain data is retained to comply with tax and accounting obligations required under Portuguese law.

  • 3.3 Direct marketing: Consent (Art. 6(1)(a) of the GDPR) — With your express consent, we may send promotional communications about our accommodations. You may revoke your consent at any time.

  • 3.4 Website improvement: Legitimate interest (Art. 6(1)(f) of the GDPR) — Anonymous analysis of browsing behavior to improve user experience.

4. Data Retention
Booking-related data is retained for the mandatory period required to comply with tax obligations (in accordance with Portuguese tax legislation). Marketing data is retained until consent is revoked. Browsing data is retained for the period indicated in the Cookie Policy.

5. Sharing Data with Third Parties
Your personal data may be shared with:

  • Payment service providers (e.g., Stripe, PayPal), under data processing contracts ensuring GDPR compliance;

  • Email marketing platforms, only if you consent to commercial communications;

  • Public authorities, when required by law.

    We do not sell, rent, or lease your data to third parties for their own commercial purposes.

6. International Data Transfers
If any of our service providers are located outside the European Economic Area, we ensure that transfers are carried out using appropriate legal mechanisms, such as Standard Contractual Clauses approved by the European Commission.

7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:

  • Access: Obtain confirmation as to whether your data is being processed and receive a copy;

  • Rectification: Correct inaccurate or incomplete data;

  • Erasure: Request deletion of your data ("right to be forgotten"), where applicable;

  • Restriction: Restrict processing under certain circumstances;

  • Portability: Receive your data in a structured, machine-readable format;

  • Objection: Object to processing based on legitimate interest or for direct marketing purposes;

  • Withdrawal of consent: Without affecting the lawfulness of processing based on consent given prior to its withdrawal.

To exercise your rights, send a request to reservas@dreamscollection.pt. You also have the right to lodge a complaint with the competent supervisory authority: Comissão Nacional de Proteção de Dados (CNPD) – www.cnpd.pt.

8. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction, including SSL/TLS encryption, access controls, and periodic security reviews.

9. Changes to This Policy
We may update this Privacy Policy periodically. The latest version will always be available on the website, along with the date of the last update.