Privacy Policy

1. Data controller

The operator of luxandbest.com, Rua Mouzinho da Silveira 352, 4050-418 Porto, Portugal, email [email protected]. Commercial registration number 506 763 790 · VAT PT506763790.

2. Scope and purpose

We process personal data when you visit luxandbest.com or contact us. The site publishes editorial hotel and dining content for Portugal. We do not process payments for hotel rooms, casino play, or travel bookings on this website.

3. Categories of personal data

• Contact and subscription data you submit (name, email, message content, marketing opt-in where ticked).
• Technical data in server and security logs (IP address, date/time, requested URL, referrer, user agent, HTTP status).
• Cookie and similar technologies as described in our Cookies Policy.

4. Legal bases (GDPR Art. 6)

• Art. 6(1)(a) — consent where you opt in to email updates or non-essential cookies where applicable.
• Art. 6(1)(b) — steps at your request before a possible contract (responding to your inquiry).
• Art. 6(1)(f) — legitimate interests in operating, securing, and improving the website, preventing abuse, and maintaining accurate editorial content, balanced against your rights.
• Art. 6(1)(c) — compliance with legal obligations under Portuguese and EU law.

5. Recipients and transfers

We do not sell personal data. Hosting, email delivery, or security providers may process data on our instructions under data-processing agreements where required. If any processor is located outside the European Economic Area, we rely on appropriate safeguards under GDPR Chapter V (for example Standard Contractual Clauses) where applicable.

6. Retention

Contact messages are kept only as long as needed to respond and for a reasonable period for follow-up or legal claims. Server logs are retained for a limited period consistent with security needs and then deleted or anonymised. Marketing lists: until you unsubscribe or withdraw consent.

7. Your rights

Under the GDPR and Lei n.º 58/2019 you may request access, rectification, erasure, restriction of processing, data portability (where applicable), and object to processing based on legitimate interests or for direct marketing. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.

To exercise rights, email [email protected]. We respond within one month, extendable where permitted by law.

8. Supervisory authority (CNPD)

You may lodge a complaint with the Portuguese Data Protection Authority — Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt, Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal.

9. Security

We apply appropriate technical and organisational measures proportionate to the risk, including HTTPS in production, access controls, and minimisation of data collected through forms.

10. Children

The site is intended for a general audience planning travel. Casino-related content is labelled 18+. We do not knowingly collect data from children under 16 without parental authority as required under Portuguese law.

11. Changes

We may update this policy; the effective date above will change when we do. Material changes will be reflected on this page.

12. Contact

[email protected] · Rua Mouzinho da Silveira 352, 4050-418 Porto, Portugal.