Privacy policy | GDPR | Data protection law
1. Identity and scope
This Privacy Policy, in accordance with the General Data Protection Regulation (GDPR) and applicable national legislation, establishes the guidelines for the collection and processing of personal data by the following entities:
These entities are responsible for the management and operation of the registered trademarks with the INPI (National Institute of Industrial Property):
Whenever this policy refers to Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua, the reference encompasses the brands ALGARTUR and WEB EMPRESAS, which constitute an integrated group of companies.
2. Business activity
The Group operates in diverse sectors, including:
Furnished short-term accommodation for tourists (Local Accommodation).
Real estate sector.
Development of software, websites, and mobile applications (Smartphones).
3. Commitment and acceptance of terms
The Group Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua is firmly committed to protecting the privacy of its customers and users of the various websites and services it owns and operates.
Browsing our website, making reservations, or accepting our services implies the automatic acceptance of the terms of use, privacy, and personal data protection described herein.
4. The purpose of this privacy policy
The fundamental objective of this Privacy Policy is to inform our customers and users about the general rules regarding the privacy and processing of their personal data.
4.1. Legal compliance and commitment
This policy is established in strict respect and compliance with the General Data Protection Regulation (GDPR) and applicable national legislation.
ALGARTUR and WEB EMPRESAS adopt the best practices in the field of personal data security and protection.
The information provided by users and customers will be used solely by Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua and will not be disclosed to third parties, ensuring the safeguarding of the data provided to us.
4.2. Responsibility and processing rules
Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua are the sole entities responsible for the implementation and verification of this policy, as well as for defining clear rules for the processing of personal data.
We ensure that all those who entrust us with their data are aware of how the group processes that information and of their rights in this regard.
4.3. Supplementary documents and acceptance
The rules contained in this Privacy Policy supplement the provisions relating to the protection and processing of personal data already provided in the terms and conditions that govern the offering of the various products and services and which are duly published on the respective websites.
By accessing one of our websites, the provision of your personal data implies the full knowledge and acceptance of the conditions established herein. In this way, the user authorizes the collection and use of their data in accordance with the rules defined in this policy.
5. Scope of application
5.1. Exclusivity
This Privacy Policy applies exclusively to the collection and processing of personal data carried out within the scope of the activities of Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua, including the brands ALGARTUR and WEB EMPRESAS.
5.2. Third-party websites (External Links)
Websites operated by the Group may contain links to third-party websites, which are outside our management.
Such links are provided in good faith and merely for user convenience.
The Group Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua are not responsible for the collection and processing of personal data carried out on these websites, nor for their accuracy, credibility, or functionalities.
The inclusion of these links does not imply any assumption of responsibility or endorsement by our companies.
We strongly recommend reading the privacy policies of all websites the user visits carefully. This policy does not apply to them.
6. Concept of personal data
6.1. Legal definition
For the purposes of this policy and in accordance with the General Data Protection Regulation (GDPR) (Regulation EU 2016/679), personal data means any information, of any nature and regardless of its support (including text, sound, and image), relating to an identified or identifiable natural person.
Identifiable natural person: An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, identification number, location data, online identifiers, or to one or more specific elements of their physical, physiological, genetic, psychological, economic, cultural, or social identity.
6.2. Exclusion of legal persons
Personal data protection, according to European legislation, does not apply to legal persons (companies or other organizations). Our commitment to privacy covers exclusively the information of individuals (Customers and Users) who interact with us.
7. The data controller
7.1. Controller identification
The entity and individual legally responsible for the collection and processing of personal data (the "Controllers"), under the terms of the General Data Protection Regulation (GDPR), are:
7.2. Responsibilities
The Data Controller is the entity or individual who, individually or jointly, determines the purposes and means of processing your personal data.
In this context, Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua are responsible for:
Deciding which data is collected.
Defining the purposes for which the data is used.
Establishing the means of processing and the security measures applied to that data.
8. Categories of personal data collected
Within the scope of their activity, Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua collect and process the following categories of personal data, strictly necessary for the provision of services and/or supply of products:
8.1. Identification and contact data
Identification Data: Full name.
Contact Data: Address, telephone number, and email address.
Documents: Citizen Card / Identity Card data, passport (collected only when required by legal obligation, such as in local accommodation, for communication to competent authorities).
8.2. Billing and transaction data
Financial Data: Credit card data (processed only for payment and transaction processing, through secure and encrypted systems).
Billing Data: Information necessary for the issuance of invoices.
8.3. Usage and traffic data
Traffic and Location Data: In the context of website navigation and service use, traffic and location data are collected, as well as other usage data, to the extent necessary for billing and the marketing of the services provided.
Legal Compliance: Without prejudice to compliance with legal rules relating to the conservation and transmission of data for the purpose of crime investigation, detection, and repression, the processing of this data will be done for the time and to the extent strictly necessary.
9. Method and time of data collection
9.1. Collection channels
Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua collect personal data through the following channels:
In Writing: Filling out forms, contracts, or various documentation.
By Telephone: Support, commercial, or reservation interactions.
Via Digital (Online): Through the Group's websites, online forms, and mobile applications.
As a general rule, personal data is collected when the customer requests information, subscribes to one of our products or services, or makes a reservation.
9.2. Nature of data provision (mandatory)
The provision of some personal data is mandatory for the conclusion and execution of a contract or for compliance with legal requirements (e.g., billing, communication in local accommodation).
Consequence of Omission: In case of failure or insufficiency of mandatory data provision, Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua will not be able to provide the product or service in question.
Duty to Inform: The customer will always be informed by the Company of the mandatory nature of providing such data.
9.3. Data processing and storage
The personal data collected is processed electronically and in strict compliance with the General Data Protection Regulation (GDPR).
The data is stored in specific databases, created for this purpose and equipped with appropriate security measures.
We guarantee that, under no circumstances, the data collected will be used for any purpose other than that for which consent was obtained or that is legally provided for.
10. Purposes and legal bases for the processing of personal data
The processing of personal data collected by the Group Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua has the purposes described below, each being supported by a valid legal basis, in accordance with the GDPR:
| Purpose of processing | Legal basis (GDPR) | Application detail |
| Contractual and operational Management | Performance of a contract | Processing reservations, providing the contracted services (accommodation, software development, etc.), managing the commercial relationship, and issuing invoices. |
| Financial management and damage prevention | Legitimate interest and performance of a contract | Use of credit card data to process service payments and to cover eventual material damages caused to the properties during the short-term stay. |
| Marketing and communication | Consent or legitimate interest | Sending information, marketing actions, campaigns, promotions, advertising, and news about the Group's products/services, as well as inclusion in subscriber lists. |
| Service and quality Improvement | Legitimate interest | Adapting services to customer needs and interests, conducting market studies, satisfaction surveys, and evaluation. |
| Management of suggestions and complaints | Legitimate interest | Processing and responding to complaints, suggestions, or institutional information requests. |
10.1. Principle of transparency
Additional Information: At the time of data collection, you will be provided with more detailed information about how the data will be used, particularly regarding purposes that depend on your explicit consent.
11. Personal data retention period
The Group Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua only retains your personal data for the period strictly necessary to fulfill the purpose for which it was collected or to comply with legal requirements.
11.1. Retention criteria
The period during which data is stored and retained varies according to the purpose of processing:
Legal Obligations: There is a legal requirement to retain data for a minimum period of time, such as for billing and accounting data, which is retained for the legally required period (currently 10 years in Portugal, for tax purposes).
Contractual Management: Data necessary for the management and execution of a contract will be retained while the contract remains in force, plus the legal period for the exercise of rights (e.g., statute of limitations and expiration period).
Absence of Specific Legal Requirement: Where there is no specific legal or contractual requirement, the data will be stored and retained only for the minimum period necessary for the purposes that motivated its collection, after which it will be securely deleted or anonymized.
11.2. The role of the CNPD
Data retention may be extended for the period of time authorized by the National Data Protection Commission (CNPD).
12. Rights of the personal data subject
In accordance with the General Data Protection Regulation (GDPR), the data subject has the right to exercise the following rights at any time with Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua:
12.1. Guaranteed rights
| Right | Brief description |
| Right of access | Obtain confirmation as to whether or not your personal data is being processed and, if so, access your data and detailed information about the processing. |
| Right to rectification | Request the rectification of inaccurate or incomplete personal data. |
| Right to erasure (right to be forgotten) | Request the erasure of your personal data, provided there are no valid grounds for its retention (e.g., legal obligations). |
| Right to restriction of processing | Request the limitation of the processing of your data to certain categories or purposes, in certain circumstances. |
| Right to data portability | Receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and the right to transmit that data to another controller. |
| Right to object | Object to the processing of your personal data in specific situations (e.g., for direct marketing purposes). |
| Right to withdraw consent | Withdraw consent for the processing of your data at any time, without affecting the lawfulness of processing based on consent given prior to its withdrawal. |
12.2. Exercise of rights
The exercise of these rights must be carried out through the various contact channels made available by the Group (Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua).
A response to requests will be guaranteed within a maximum period of 30 days (which may be extended in cases of greater complexity).
13. Opposition to receiving marketing communications
13.1. Right to object
Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua may promote disclosure actions for new products or services (direct marketing) to their customers and users through various communication channels.
However, in accordance with the right to object provided for in section 13.1, the customer/user has the right to object, at any time, to the use of their data for these purposes.
13.2. Communication channels
Marketing communications may be carried out through the following channels:
Electronic Communications: Email, SMS, MMS, and other digital communication platforms.
Non-electronic Communications: Telephone (calls) or postal mail.
13.3. How to object (Opt-Out)
If you do not wish to receive these communications, you can object to the use of your data for marketing purposes or for inclusion in subscription lists at any time, and free of charge, through the following means:
At the time of collection: By objecting to the use of the data when it is collected.
At any time: By using the contact details provided by the Group (Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua) or, in the case of email marketing, by using the unsubscribe/opt-out option present in the footer of each communication.
14. Management of disturbing calls and invasion of privacy
14.1. Identification of the calling line
In duly justified situations where the invasion of privacy, disturbance of family peace, or intimacy of the user is at stake, the current legislation allows for the identification of the calling line.
14.2. Procedure for annuling concealment
In this context, Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua may, at the customer's request, annul the elimination (concealment) of the calling line presentation.
For this annulment to take effect, the legal procedure must be fulfilled, which requires:
Prior Authorization: Obtaining prior authorization from the National Data Protection Commission (CNPD).
Specific Purpose: The request aims exclusively to allow the customer to determine the source of unidentified calls that disturb their family peace or the intimacy of private life.
14.3. Protection measures
This exceptional measure is a guarantee offered to the data subject for the protection of their fundamental rights and freedoms against abuse or disturbing practices.
15. Security and protection measures for personal data
The group Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua undertake a strict commitment to the security and protection of the personal data provided to them. Strict rules and appropriate technical and organizational measures have been approved and implemented to protect data against dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of unlawful processing.
15.1. Technical and logical measures adopted
The Group adopts various cutting-edge technical and security measures, including:
Session Encryption: On our websites, personal data collection forms use encrypted sessions (SSL/TLS), ensuring the confidentiality of information transmission between the user's Browser and our server.
Secure Storage: All personal data provided is stored securely in systems under the management of Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua.
Access Control: Restricted data access by personnel, based on the need-to-know principle.
15.2. Physical and infrastructure measures
15.3. Organizational measures
15.4. User duties
Notwithstanding the security measures adopted, we are obligated to alert Users that their online security also depends on their own diligence. It is fundamental that the User adopts additional security measures, such as:
Using an updated PC and Browser with the latest security patches.
Keeping the firewall active, and antivirus and anti-spyware duly configured.
Ensuring the authenticity of the sites they visit, avoiding websites whose reputation they do not trust.
16. Communication and transfer of personal data
16.1. Subprocessors (service providers)
Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua may resort to other entities (Subprocessors) for the provision of specific services that involve the processing of personal data (e.g., accounting services, email marketing platforms, hosting of IT systems).
Contractual Obligation: Any subcontracted entity will process personal data on behalf and under the instruction of Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua, being duly consecrated and safeguarded in a written subprocessing agreement.
Security Guarantees: The Subprocessor is obligated to adopt the necessary technical and organizational measures to protect personal data against destruction, loss, alteration, dissemination, or unauthorized access and against any other form of unlawful processing.
Responsibility: Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua remain the Data Controller for the personal data provided to us.
16.2. Communication to third parties (legal obligation)
The Group does not provide data to third parties for purposes unrelated to its activity (such as marketing by other companies). However, data communication may occur when it is necessary or required by law (legal basis: compliance with a legal obligation), namely to the following entities:
Tax and customs authority (AT): For compliance with tax and accounting obligations.
Foreigners and borders service (SEF): In the context of local accommodation activity (legal obligation).
Judicial and police authorities: For the purposes of crime investigation, detection, and repression.
16.3. Transfer upon consent
The communication or transfer of personal data to other entities, for purposes not essential to the execution of the contract or not provided for by law, will only occur after prior information and the express consent of the customer/user.
17. Transfer of personal data (international)
17.1. General rule
The Group Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua commit to ensuring that the processing and storage of your personal data are carried out within the territory of Portugal and, preferably, within the European Economic Area (EEA), which includes the member states of the European Union.
The provision of the contracted services does not, as a general rule, imply the transfer of your personal data outside these territories.
17.2. Transfers outside the EEA (exception)
If, for reasons strictly necessary for the provision of a specific service ( such as the use of global software or cloud platforms), personal data is transferred to countries outside the EEA, the Group will ensure that:
The transfer is made only to countries that the European Commission considers to offer an adequate level of protection.
In the absence of such an adequacy decision, the transfer will only be carried out upon the adoption of appropriate safeguards provided for in the GDPR, namely through the conclusion of standard contractual clauses approved by the European Commission, or after obtaining the explicit consent of the data subject for the transfer.
18. Contacts and right to complain
18.1. Contact means for the data subject
To exercise your rights (access, rectification, erasure, restriction, objection, and portability) or for any clarification related to the processing of your personal data, the data subject should contact the Group Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua through the following channels:
Address: Rua Combatentes da Grande Guerra, 38. 8800-396 Tavira, Portugal
Email: info@algartur.com
Telephone: (00351) 964806971
18.2. Data protection officer (DPO)
If the Group Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua appoints a Data Protection Officer (DPO), due to legal requirement or voluntary decision, their contact details will be disclosed in this section.
Currently, any matter should be addressed to the contact point indicated in section 19.1. (Note: This reference seems to point to the section below, usually it points to 18.1).
18.3. Right to lodge a complaint with the supervisory authority
The data subject has the right to lodge a complaint directly with the competent supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD) (National Data Protection Commission)
Address: Av. D. Carlos I, 134 – 1.º. 1200-651 Lisboa, Portugal
Website: www.cnpd.pt
19. Amendments to the privacy policy
Manjua & Barbio, Lda. and Tiago Augusto Santos Manjua reserve the right to make adjustments or changes to this Privacy Policy at any time.
19.1. Notification of changes
The most recent and updated version of the Privacy Policy will be published on the Group's websites, and the user should consult it regularly.
19.2. Date of last update
November 17th, 2025
ALGARTUR: Your Local Accommodation partner since 2006.
Cabanas Tavira and Santa Luzia Tavira, Algarve – Land of Sun and Sea
- Property Rentals Santa Luzia Tavira, Algartur
- Property Rentals Cabanas Tavira, Algartur