Privacy Policy
This policy explains how Numa Mira looks after the personal data of the people who visit our website, speak with us about a gathering, partner with us as an estate or venue, or otherwise correspond with us. We have written it in plain language so that it is easy to follow.
1. Who we are
The controller of your personal data is Numa Mira, LDA, a company registered in Portugal with its registered office at Rua Bocage, 67, 2900-277 Setúbal, Portugal, and company registration number (NIPC) 519195809. Where this policy says "we", "us" or "Numa Mira", it means this company.
For any question about this policy or your data, you can reach us at contact@numamira.com.
2. Who this policy covers
This policy applies to:
- visitors to this website;
- guests and enquirers who begin a conversation or write to us about a gathering;
- the people we deal with at venue and estate partners;
- suppliers and other contacts who correspond with us.
3. The information we collect
- Identity and contact details, such as your name, organisation, email address and telephone number.
- The content of your enquiry, meaning what you tell us in the conversation flow or by email about the gathering you are imagining.
- Scheduling information, such as the times you choose to meet and any notes connected to that meeting.
- Correspondence between you and our team.
- Partner and supplier data, where you act for a venue, estate or supplier.
- Technical and usage data, such as device and browser type and aggregated, privacy-focused analytics about how the website is used.
4. How we collect it
- Directly from you, when you begin a conversation, choose a time to meet, email us or speak with our team.
- Automatically, through cookies and privacy-focused analytics when you use the website.
- From partners and referrals, where a venue, estate or trusted contact introduces you to us.
5. Why we use your information, and our legal bases
Under the General Data Protection Regulation (GDPR), we must have a lawful basis for each use of your personal data. The table below sets out what we do and the basis we rely on.
| What we do | Legal basis (GDPR Article 6) |
|---|---|
| Respond to your enquiry and hold a conversation about a possible gathering | Steps taken at your request before entering a contract (Article 6(1)(b)) |
| Arrange and hold a meeting you have chosen | Steps taken at your request before entering a contract (Article 6(1)(b)) |
| Provide and administer a gathering once it is agreed | Performance of a contract (Article 6(1)(b)) |
| Manage our relationships with venue and estate partners and suppliers | Our legitimate interests in running the business (Article 6(1)(f)) |
| Improve the website and understand aggregate usage | Our legitimate interests in maintaining and improving our service (Article 6(1)(f)) |
| Set non-essential cookies or send optional updates | Your consent (Article 6(1)(a)), which you may withdraw at any time |
| Meet our legal, accounting and tax obligations | Compliance with a legal obligation (Article 6(1)(c)) |
6. Cookies and analytics
We aim to keep the website light and respectful. We use privacy-focused analytics that do not rely on intrusive cross-site tracking, and we ask for your consent before setting any non-essential cookies. The cookies we do set are limited to what is needed to make the website work and, with your consent, to understand aggregate usage. You can manage or withdraw cookie consent at any time through your browser settings.
7. Who we share information with
We share personal data only where it is needed, with:
- Venue and estate partners, so a gathering can be prepared and hosted;
- Service providers and sub-processors who help us operate, such as our website hosting, scheduling and analytics providers, and, where relevant, payment providers;
- Professional advisers, such as our accountants and lawyers;
- Public authorities, where the law requires it.
We do not sell your personal data.
8. International transfers
Your data is normally processed within the European Economic Area. Where a provider processes data outside it, we put appropriate safeguards in place, such as the European Commission's Standard Contractual Clauses (SCCs), so that your data stays protected.
9. How long we keep your information
We keep personal data only for as long as we need it for the purposes above, then delete or anonymise it. Enquiry and conversation records are kept for as long as we are in contact and for a reasonable period afterwards, while records connected to a confirmed gathering are kept for the duration of our relationship and for the periods required by Portuguese accounting and tax law. We may keep certain records longer where the law requires.
10. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to erase your data in certain circumstances;
- restrict or object to certain processing;
- data portability;
- withdraw consent at any time, where we rely on consent.
To exercise any of these, please write to contact@numamira.com. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
11. How we protect your information
We use appropriate technical and organisational measures to keep personal data secure, and we limit access to those who need it. No system can be guaranteed perfectly secure, but we work to reduce risk and to respond promptly if an issue arises.
12. Children
Our website and gatherings are intended for adults and for professional contacts. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this policy from time to time. When we do, we will revise the effective date above and, where appropriate, let you know.
14. How to contact us
For any question about your privacy or this policy, please write to contact@numamira.com, or to Numa Mira, LDA at Rua Bocage, 67, 2900-277 Setúbal, Portugal. You can also read our Terms of Service.
