This policy explains what personal data we collect through this website, what we use it for and what rights you have. The General Data Protection Regulation (GDPR) and Portuguese Law 58/2019 apply.
1. Who is responsible for your data
Capstone Ventures, Lda, the company that runs the Vista Rio event space.
- Tax number (NIF/NIPC): 518406423
- Registered office: Centro de Empresas Clube Náutico, Edifício 5, 1º Andar Sala 3, 7580-509 Alcácer do Sal
- Vista Rio venue: Centro de Empresas Clube Náutico, Edifício 5, 1º Andar Sala 3, 7580-509 Alcácer do Sal
- Email: vistario.alcacer@gmail.com
- Phone: +351 932 685 647
2. What data we collect
- Quote request form: name, email, phone (optional), type of event, preferred date, number of guests and the message you write.
- Direct contact: the details you give us when you call or write by email, WhatsApp or Instagram.
- Technical data: IP address, browser type and the date and time of access, logged automatically by the hosting service to keep the site secure and working.
We do not ask for or process sensitive data. Please do not include any in your message.
3. What we use the data for and on what basis
- Replying to your enquiry and preparing a quote: steps taken at your request before a contract (Article 6(1)(b) GDPR).
- Managing the booking and the event, if you go ahead: performance of the contract (Article 6(1)(b)).
- Invoicing and accounting: compliance with legal obligations (Article 6(1)(c)).
- Security and operation of the site: legitimate interest (Article 6(1)(f)).
We do not use your data for advertising, we do not sell it and we make no automated decisions.
4. Who we share the data with
We use service providers that process data on our behalf, only as far as necessary:
- Netlify, Inc. (USA): website hosting and receipt of the form.
- Google (Google Fonts): the site's fonts are loaded from Google servers, which receive your IP address in order to deliver them.
- Meta (WhatsApp and Instagram): only if you choose to contact us that way, under those platforms' own policies.
- Accounting services and public authorities: where the law requires it, for example for invoicing.
Some of these providers are outside the European Economic Area. In those cases, transfers are made with the safeguards set out in the GDPR, such as an adequacy decision or standard contractual clauses.
5. How long we keep the data
- Enquiries that do not lead to a booking: up to 12 months after the last contact.
- Bookings and invoicing: for 10 years, the period required by Portuguese tax law.
- Technical data: for the period set by the hosting service, as a rule no more than 30 days.
6. Your rights
At any time you can ask to access your data, correct it, erase it, restrict or object to its processing, and ask for it in a portable format.
To exercise these rights, write to vistario.alcacer@gmail.com. We reply within one month at most.
If you believe your data has not been handled correctly, you can complain to the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
7. Cookies
This site sets no cookies of its own and uses no analytics or advertising tools. For that reason it shows no cookie notice.
If you follow a link to another site (Instagram, WhatsApp, Google Maps or our partners' websites), that site's policies apply.
8. Changes to this policy
We may update this policy when the site or the law changes. The version in force is always the one published on this page. Last updated: 9 October 2026.