Last updated: December 2025

Golden Rise respects your privacy and is committed to protecting your personal data in accordance with:

• GDPR (EU Regulation 2016/679)
• Portuguese Data Protection Law (Lei n.º 58/2019)
• ePrivacy Directive

This Privacy Policy explains how we collect, use, store, and protect your information.

1. Data Controller

Company name: Massive Legacy LDA
Address: Levada dos Moinhos 27, 9000-215 Funchal, Madeira, Portugal
Email: info@goldenriseproperties.pt
Phone: +351 963 218 889
VAT Number (NIF): PT518370569

2. Personal Data We Collect

We may collect the following categories of data:

2.1. Information You Provide Directly

• Name
• Contact details (email, phone number)
• Address
• Booking information
• Reviews or feedback
• Payment information (processed securely via third-party provider; we do NOT store card data)

2.2. Automatically Collected Data

• IP address
• Device information
• Browser type
• Cookies and tracking files (see Cookie Policy)

2.3. Data from Third Parties

• Booking platforms (Airbnb, Booking.com, etc.)
• Payment processors
• Marketing partners (only with consent)

3. Purpose and Legal Basis of Processing

We process data under GDPR Articles 6(1)(a)–(f).

We use your data to:

• Manage bookings and guest stays
• Provide customer service
• Manage property access and security
• Improve website performance
• Send service-related communications
• Comply with legal obligations (e.g., invoicing)
• Send marketing communications only if you consent

4. Sharing Your Personal Data

We may share data with:

• Booking platforms
• Payment processors
• Property service partners (cleaning, maintenance)
• IT service providers
• Legal authorities, if required

We do not sell personal data.

All partners are required to comply with GDPR and data confidentiality standards.

5. International Data Transfers

We do not transfer your data outside the EEA unless:

• The destination country is deemed adequate by the EU
• Standard Contractual Clauses (SCCs) are in place

6. Data Retention

We retain personal data only for as long as necessary:

• Booking and invoicing: 10 years (Portuguese tax law)
• Marketing consent: Until withdrawn
• Customer support: Up to 2 years

7. Your Rights (GDPR Articles 12–23)

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• File a complaint with the Portuguese authority (CNPD)

CNPD – Comissão Nacional de Proteção de Dados
Website: www.cnpd.pt

Requests may be submitted to: privacidade@goldenriseproperties.pt

8. Cookies

Our website uses cookies to:

• Improve functionality
• Remember preferences
• Provide analytics

Visitors can control cookie settings via the cookie banner and browser preferences.

A full Cookie Policy should also be provided on your website.

9. Data Security

We implement organisational and technical measures to protect your data:

• Encryption
• Secure servers
• Access control
• Regular security audits

Despite best practices, no system can be 100% secure.

10. Changes to This Policy

Any updates will be posted on this page with a revised date.

11. Contact

For privacy-related queries:
Email: privacidade@goldenriseproperties.pt
Phone: +351 963 218 889