AC Rental Lisbon ("we", "our") respects your privacy. This policy explains what personal data we collect, why we collect it, how we use it and the rights you have under the General Data Protection Regulation (GDPR).
1. Who we are
AC Rental Lisbon is a portable air conditioning rental service in Lisbon and Greater Lisbon, operated through the website acrentallisbon.pt. For questions relating to personal data, contact us by WhatsApp.
2. What data we collect
2.1. Data you provide directly
- Interest registration form: name, email, Lisbon neighbourhood.
- WhatsApp: phone number and the messages you send us.
- Booking and delivery: the exact delivery address (only when you confirm an order).
2.2. Data collected automatically
- Google Analytics: pages visited, time on site, device, country, traffic source. Your IP address is anonymised.
- Cookies: only after your consent (see Cookie Policy).
3. What we use your data for
| Purpose | Legal basis |
|---|---|
| Respond to your request / form | Pre-contractual steps |
| Carry out delivery and the rental service | Performance of the contract |
| Comply with tax obligations (invoice) | Legal obligation |
| Website traffic analysis | Consent |
| Commercial communications (future) | Consent |
4. Who we share your data with
Your data is not sold. We only share it with:
- Hetzner Online GmbH (Germany, EU) — website hosting.
- FormSubmit (formsubmit.co, USA) — receives and forwards submitted forms by email. Covered by Standard Contractual Clauses.
- Google LLC (USA) — Google Analytics (only after consent), with anonymised IP.
- Meta (WhatsApp) (Ireland/USA) — when you contact us by WhatsApp.
- Tax and Customs Authority (Portugal) — when we issue an invoice for a service provided.
5. How long we keep your data
- Form data without conversion to a customer: 12 months, then deleted.
- Customer data (with a rental): 10 years to comply with tax obligations (Commercial Code, Art. 40).
- Google Analytics data: 14 months (GA4 default setting).
- WhatsApp conversations: stored on our device until manually deleted; we recommend you also delete them on your side if you prefer.
6. Your rights (GDPR)
You have the right to:
- Access — know what data we hold about you
- Rectification — correct inaccurate data
- Erasure ("right to be forgotten") — except where there is a legal obligation to retain
- Restriction of processing
- Portability — receive your data in a structured format
- Objection to processing based on legitimate interest or marketing
- Withdraw consent at any time (without affecting the lawfulness of prior processing)
To exercise any of these rights, contact us by WhatsApp or through the form at acrentallisbon.pt. We respond within 30 days.
7. Complaints
If you believe that the processing of your data breaches the GDPR, you may lodge a complaint with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa
www.cnpd.pt
8. Security
We use HTTPS for all communications, a restrictive Content Security Policy, modern security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy), and storage managed by certified providers (Hetzner ISO 27001).
9. International transfers
Some of our providers (FormSubmit, Google) are based in the USA. These transfers are covered by the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.
10. Changes to this policy
We may update this policy to reflect changes in the service or in legislation. The date of the last update is shown at the top. Material changes will be communicated on the website.
11. Contact
For any question about privacy or to exercise your rights:
- WhatsApp: direct contact
- Form: acrentallisbon.pt