Privacy policy

Who handles your data

Convívio-Restaurante Marisqueira, Lda, R. Arquitecto Marques da Silva 303, 4150-484 Porto. For anything about your data, write to convivioporto@gmail.com.

What data, and why

When you book on the website, we ask for your name, phone number, email, date, time, number of people and, if you wish, a note. We use them only to record your booking, confirm it or let you know of any change, and to welcome you.

Without these details we cannot record a booking on the website — you can always book by phone. The legal basis is your booking request (Article 6(1)(b) GDPR).

If you mention allergies or special needs in the note, you are giving us your explicit consent to use that information only to prepare for your visit (Article 9(2)(a) GDPR). You can withdraw it at any time by asking us to delete it; in any case, it is deleted together with the booking.

Website security and cookies

The website uses a single technical cookie, which protects the forms and lasts at most 8 hours. We do not use advertising or analytics cookies, and our pages load nothing from other websites.

To stop abuse, we keep for 90 days the address of anyone who tries to sign in to the website’s management area (legitimate interest, Article 6(1)(f) GDPR).

Who we share it with

We use these services to run: website hosting (Render, with the server in Germany), backups (GitHub), sending emails (Brevo, in France) and our booking sheet (Google). Render, GitHub and Google are US companies certified under the Data Privacy Framework; transfers to certified companies are covered by the European Commission’s adequacy decision.

Our team receives a notice of each booking in a Telegram chat, a service based outside the European Union, with no adequacy decision and no data protection agreement with us. That is why the notice carries only what our staff need to welcome you: the name, phone number and note — not the email.

We never sell or pass on your data to anyone else.

How long we keep it

Bookings are deleted automatically 30 days after the booked date. The website’s automatic backups may keep them for longer: only the people who run the website can access them, and they are used only to restore it if something goes wrong. The website’s technical logs are kept for 90 days.

Your rights

You can ask us to see your data, correct it, delete it, restrict what we do with it, object, or receive it in a format you can take elsewhere. Write to convivioporto@gmail.com: we reply within one month.

If you think we have not handled your data properly, you can complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).

We do not make automated decisions or build profiles with your data.