Privacy Policy

1. Who We Are (Data Controller)

This website, luzzilisbon.com, is operated by:

[LEGAL COMPANY NAME, Lda.] (operating as “Luzzi”)
Rua do Comércio 130, 1100-150 Lisboa, Portugal
NIF: [COMPANY TAX NUMBER]
Email: [privacy@luzzilisbon.com]

We are the data controller responsible for the personal data collected through this website.

2. What Data We Collect and Why

a) Contact Form

When you use our contact form, we collect your name, email address, and message.

• Purpose: to respond to your enquiry.
• Legal basis: our legitimate interest in responding to communications you initiate (Art. 6(1)(f) GDPR), or steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Retention: we keep correspondence for up to [12 months] after your enquiry is resolved, unless a longer period is required by law.

b) Table Reservations

Reservations are processed through our booking partner ServMe (widget.servmeco.com). When you book a table, your data (such as name, contact details, party size, and preferences) is collected and processed by this provider in accordance with its own privacy policy. We receive your booking details in order to manage your reservation.

• Purpose: managing your reservation.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Retention: [24 months] for booking history and no-show management.

c) Cookies and Analytics

We use Google Tag Manager and Google Analytics to understand how visitors use our website (pages visited, time on site, approximate location, device type).

• Purpose: website statistics and improvement.
• Legal basis: your consent (Art. 6(1)(a) GDPR and Portuguese Law no. 41/2004). Analytics cookies are only set after you accept them via our cookie banner. You can withdraw or change your consent at any time via the Manage Cookie Preferences link.
• See our Cookie Policy for the full list of cookies and their lifespans.

d) Server Logs

Our hosting provider automatically records technical data (IP address, browser type, date/time of access) in server logs for security and operational purposes.

• Legal basis: legitimate interest in the security and stability of our website (Art. 6(1)(f) GDPR).
• Retention: [30 days].

3. Third-Party Services and Links

Our website contains links to third-party services, including Instagram and Spotify. Clicking these links takes you to platforms with their own privacy policies, which we do not control. We recommend reviewing their policies.

4. Who We Share Data With

We share personal data only with:

• Service providers acting on our behalf (website hosting, email, booking platform, analytics), under data processing agreements where applicable;
• Public authorities, where required by law.

We do not sell your personal data.

5. International Transfers

Some of our providers (e.g. Google) may process data outside the European Economic Area. Where this occurs, transfers are safeguarded by the EU–US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

6. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data (“right to be forgotten”);
• Restrict or object to processing;
• Data portability (receive your data in a structured, machine-readable format);
• Withdraw consent at any time (for processing based on consent), without affecting prior processing.

To exercise these rights, contact us at [privacy email]. We will respond within one month.

You also have the right to lodge a complaint with the Portuguese supervisory authority:

CNPD – Comissão Nacional de Proteção de Dados
Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa
www.cnpd.pt

7. Data Security

We apply appropriate technical and organisational measures (HTTPS encryption, access controls, reputable hosting) to protect your personal data against unauthorised access, loss, or misuse.

8. Children

Our website and services are not directed at children under 16, and we do not knowingly collect their personal data.

9. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top indicates the latest revision. Significant changes will be highlighted on this page.