Privacy policy

Who handles your data

Convívio - Restaurante Marisqueira Lda, R. Arquitecto Marques da Silva 303, 4150-484 Porto. For anything about your data, write to convivioporto@gmail.com.

What we use your data for

We use the details you give us when booking only to manage your booking. The legal basis is your booking request (Article 6(1)(b) GDPR). Without them we cannot record a booking on the website; you can always book by phone.

If you mention allergies or other health needs in the notes, we use that information only to prepare for your visit, with your explicit consent (Article 9(2)(a) GDPR), which you can withdraw at any time.

Website security and cookies

The website uses a single technical cookie, which lasts at most 8 hours. To stop abuse, we keep for 90 days the IP address of anyone who tries to sign in to the website’s management area (legitimate interest, Article 6(1)(f) GDPR).

Who we share it with

Your data passes through the services we use to run: Render (website hosting, with the server in Germany), GitHub (backups), Brevo (sending emails, in France) and Google (our email). Render, GitHub and Google are US companies certified under the Data Privacy Framework, which is covered by the European Commission’s adequacy decision.

Our team receives a notice of each booking, with the name, phone number and notes, on Telegram, a service based outside the European Union, with no adequacy decision and no data protection agreement with us.

How long we keep it

We delete bookings from our system 30 days after the booked date. They stay for up to 7 more days in the website’s backups, and may be kept longer, with no set limit, in the emails and messages about the booking.

Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, and to receive it in a format you can take elsewhere. Write to convivioporto@gmail.com.

You can also complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).