1. What will be deleted

Upon your request, we will delete:

• Conversation history via WhatsApp, Facebook Messenger and Instagram Direct.
• Contact data collected for bookings (name, phone, email).
• Identifiers provided by the Meta platforms associated with your profile.
• Interaction logs with the automated conversational agent.
• Any other personal data not subject to a legal retention obligation.

2. How to request deletion

You have three ways to request the deletion of your data:

Option A — Email (recommended)

Send an email to:

📧 Send deletion request by email

In the email, please state:

• Subject: Data Deletion Request — Café do Mar
• The channel through which you contacted us (WhatsApp, Facebook, Instagram, website).
• The phone number, username or email associated.
• Confirmation that you are the data subject (we may reply to verify if needed).

Option B — Direct message

You may send us a message on the channel you usually use, with the request “GDPR data deletion request”. The request will be forwarded to a human team member.

Option C — Meta platforms

You may also remove the Café do Mar app directly from your Facebook or Instagram account settings:

• Facebook: Settings → Apps and Websites → Remove.
• Instagram: Settings → Security → Apps and Websites.

This removes the app’s access to your data on Meta, but does not delete the data we may have already stored in our systems. For complete deletion, use Option A.

3. Response time

We will confirm receipt of the request within 72 hours and complete the deletion of the data within 30 days, in accordance with Art. 12 GDPR. In cases of high complexity, this period may be extended by 2 months, and you will be informed of the extension and the reasons for it.

4. Data that cannot be deleted

By legal requirement, some data cannot be deleted immediately, namely:

• Invoicing data: kept for 10 years (Art. 123 CIRC).
• Data subject to ongoing litigation: kept until a final decision.
• Backups: deleted in the next rotation cycle (up to 90 days).

This data will be blocked (restricted access) until it can be deleted.

5. Confirmation

Once completed, we will send written confirmation by email indicating what was deleted and what, if anything, was retained due to a legal obligation.

6. Complaints

If you believe your request was not properly handled, you have the right to lodge a complaint with the supervisory authority:

Portuguese Data Protection Authority (CNPD)
www.cnpd.pt