Privacy Policy
This is a translation provided for convenience. In case of discrepancy, the Portuguese version prevails.
This policy explains how personal data is processed on BYOB.pt, under Regulation (EU) 2016/679 (GDPR) and Portuguese Law no. 58/2019 of 8 August.
1. Data controller
PROBITAS – Comércio de Computadores e Serviços, Lda., NIPC 502 217 189, Rua das Fisgas 442, Parque Cascais Stock – Armazém 6, 2645-117 Alcabideche, Portugal. Privacy contact: privacidade@byob.pt.
2. What data we process, why and on what legal basis
| Situation | Data | Purpose | Legal basis (GDPR art. 6) | Retention |
|---|---|---|---|---|
| Browsing the site | IP address, browser type, pages requested (hosting technical logs) | Operation, security and abuse prevention | Legitimate interest (f) | Up to 30 days |
| “Near me” | Approximate location of the device | Sort restaurants by distance | Consent (a), requested by the browser | Not stored: the calculation is done only on your device |
| Membership request / contact by email | Name, email, phone, restaurant details, message | Reply, prepare and perform the membership contract; invoicing | Pre-contractual steps and contract (b); legal obligation (c) for invoicing | Contract term + 10 years (tax documents); requests without a contract: 2 years |
| Restaurant review (sent by email) | Name to be published, email, month of visit, rating and text; possibly a photo of the bill | Moderate, verify the visit and publish the review (only the chosen name, rating and text are published) | Consent (a), which you may withdraw by asking for the review to be removed | While the review is published; bill deleted after verification; rejected reviews: 6 months |
| Restaurant suggestion (sent by email) | Name, email, details of the suggested restaurant, comment | Confirm and publish the restaurant; thank the author, if authorised (only the first name is published) | Consent (a) | 2 years, or while the thank-you note is published |
| Restaurant listings | Trade name, address, booking phone and email (business contacts) | Publication in the directory | Legitimate interest (f), or contract (b) for members | While the listing is published |
We do not profile, we do not make automated decisions and we do not sell personal data.
3. Recipients
- Cloudflare, Inc. – hosting and delivery of the site and storage of membership requests, on servers in the European Union (processor).
- OpenStreetMap Foundation – map images: your browser requests these images directly from OpenStreetMap servers, which receive your IP address.
- PROBITAS's email provider, certified accountant and authorities, where required by law.
Some of these providers may process data outside the European Economic Area, with the safeguards provided for in the GDPR (adequacy decision, such as the EU-US Data Privacy Framework, or standard contractual clauses).
4. Your rights
You may request access, rectification, erasure, restriction and portability, object to processing based on legitimate interest, and withdraw consent at any time, by writing to privacidade@byob.pt. We reply within one month.
You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD) – www.cnpd.pt.
5. Restaurants listed from public sources
If you manage a listed restaurant and do not wish to appear on BYOB.pt, or want to correct the details, write to info@byob.pt. The listing is removed or corrected within 10 working days at the latest.
6. Security
The site is served exclusively over an encrypted connection (HTTPS). Access to members' data is limited to the PROBITAS staff who need it.
7. Cookies
See the Cookie Policy.
8. Changes
This policy may be updated. The date of the last update is shown at the end of the page.
Last updated: 5 October 2026.
9. Newsletter
Controller: PROBITAS – Comércio de Computadores e Serviços, Lda., NIPC 502 217 189 (privacidade@byob.pt).
Data processed: email address, your name if you provide it, the chosen language, and the date and proof of the subscription request.
Purpose: sending the BYOB.pt newsletter — notice of each new member restaurant, events, tastings and service news.
Legal basis: your consent (GDPR art. 6(1)(a) and art. 13-A of Portuguese Law no. 41/2004), given through an unticked box and an express subscription request.
Processor: Mailjet SAS (France), sending platform that stores data on servers in the European Union.
Retention: while the subscription is active; after unsubscribing, the email is removed from the list within 30 days and the proof of consent is kept for up to 3 years for the defence of legal claims.
Your rights: you may unsubscribe at any time via the link in each newsletter or by writing to privacidade@byob.pt, without affecting the lawfulness of prior processing; you also have the rights of access, rectification, erasure, restriction, portability and to lodge a complaint with the CNPD (www.cnpd.pt). Data is neither sold nor disclosed to third parties.