LGPD · Ley 13.709/2018
Política de Privacidad
Última actualización: [CONFIRM fecha]
[CONFIRM — this document is a structural template within the mockup. It must be reviewed by a lawyer and completed with the company's real details before launch. No company name, CNPJ, address, email or period below is real.]
1. Responsable del tratamiento
The controller of personal data processed through this site is [CONFIRM registered company name], CNPJ [CONFIRM], registered office at [CONFIRM full address], Florianópolis — Santa Catarina, Brazil.
Privacy contact: [CONFIRM DPO email]. Data Protection Officer: [CONFIRM name or “not applicable”].
2. Qué datos recogemos y por qué
| Data | When | Purpose | Legal basis (LGPD art. 7) |
|---|---|---|---|
| Nombre | Reserva y formulario de estadia larga | Identificar la reserva | Pre-contractual steps (item V) |
| WhatsApp / telefono | Reserva / WhatsApp | Responder y enviar la clave de acceso | Pre-contractual steps (item V) |
| Correo electronico | Reserva y area Mis Reservas | Confirmaciones y acceso a la cuenta | Pre-contractual steps (item V) |
| Fechas, tipo de habitacion y cantidad de camas | Widget de reserva | Verificar disponibilidad | Pre-contractual steps (item V) |
| Documento de identidad | En el check-in, fuera del sitio | Registro de huesped exigido por ley | Legal obligation (item II) |
| Clave de acceso al edificio | Generada para tu estadia | Permitir la entrada sin recepcion | Pre-contractual steps (item V) |
| Cuenta Mis Reservas | Si creas una | Guardar el historial de tus reservas | Consent (item I) |
| Cookies de analisis | Navegacion, si lo autorizas | Medir el uso del sitio | Consent (item I) |
| Cookies de marketing | Navegacion, si lo autorizas | Medir campanas | Consent (item I) |
Precios y reservas. Este sitio no procesa pagos ni guarda datos de tarjeta. El widget de reserva entrega la consulta al motor de reservas de Smart Hostel [CONFIRM cual es], y el formulario de estadia larga solo arma un mensaje de WhatsApp que envias vos — aca no se guarda nada y nada se envia por correo con tus datos en la URL.
3. Cookies
Essential cookies keep the site working and remember your consent choice; they cannot be switched off. Analytics and marketing cookies are off by default and are only enabled if you tick the matching option in the banner. You can revisit your choice at any time by clearing site data in your browser.
| Category | Default | Examples | Retention |
|---|---|---|---|
| Essential | Always on | Consent record (stored in your browser) | [CONFIRM] |
| Analytics | Off | [CONFIRM tool — e.g. Google Analytics 4] | [CONFIRM] |
| Marketing | Off | [CONFIRM tool — e.g. Meta Pixel] | [CONFIRM] |
4. WhatsApp
The buttons on this site open a WhatsApp conversation with a pre-filled message. From the moment you send that message, the processing of your data in that app is also governed by Meta Platforms' privacy policy, over which we have no control.
5. Comunicación de datos
We do not sell personal data. We share it only with processors necessary to deliver the service:
- Website hosting — [CONFIRM]
- Analytics tool, if permitted — [CONFIRM]
- WhatsApp / Meta Platforms, when you start the conversation
- Public authorities, where legally required
International transfers: [CONFIRM — likely, if hosting or analytics sit outside Brazil. State the countries and safeguards.]
6. Durante cuánto tiempo los conservamos
Contact data and enquiries: [CONFIRM period]. Consent records: [CONFIRM period]. After that, data is deleted or anonymised, unless a legal retention duty applies.
7. Your rights (LGPD art. 18)
At any time, free of charge, you may request:
- confirmation that processing exists;
- access to your data;
- correction of incomplete, inaccurate or out-of-date data;
- anonymisation, blocking or deletion of unnecessary or non-compliant data;
- portability to another provider;
- deletion of data processed on the basis of consent;
- information about who we share your data with;
- information about your right to refuse consent and the consequences;
- withdrawal of consent.
To exercise any of these, write to [CONFIRM email]. We will reply within the statutory period. You may also petition the ANPD, Brazil's data protection authority.
8. Seguridad
We apply technical and administrative measures to protect personal data. [CONFIRM measures — e.g. HTTPS, access control, backups]. In the event of a significant security incident we will notify you and the ANPD under art. 48.
9. Menores de edad
This site is not directed at people under 18 and does not knowingly collect children's data. No image on this site depicts children or minors.
10. Cambios
We may update this policy. The date at the top shows the last revision. Material changes will be flagged on the site.
Mis Reservas — el area de cuenta
Smart Hostel ya tiene un login de huesped. Un area de cuenta guarda datos personales de forma continua, y no solo durante una reserva, asi que necesita tres cosas escritas y funcionando: base legal para cada dato guardado, plazo de conservacion declarado, y un camino de eliminacion que el huesped pueda usar solo. [CONFIRM los tres]
La clave de acceso al edificio
Como no hay recepcion, la clave de acceso es una credencial de seguridad, no un detalle operativo. Por que canal se envia, cuanto tiempo sigue siendo valida y cuando se revoca [CONFIRM]. Nunca deberia circular por un canal abierto sin necesidad, y debe dejar de funcionar al terminar la estadia.
Registro de huespedes
El alojamiento tiene obligaciones propias de registro. Que documentos exige la ley, cuanto tiempo se guardan y quien tiene acceso [CONFIRM]. Esos datos se recogen en el check-in, no por este sitio.