Last updated: [6 July 2026]
1. Introduction
RC – Restaurant (“RC Restaurant“, “we”) respects the privacy of visitors to the website www.rc-restaurante.pt, book a table, take part in our Fado Nights or book dining experiences via our online booking and checkout system.
This Privacy Policy explains what personal data we collect, for what purposes, on what legal basis, for how long, with whom we share it, and what rights each data subject has, in accordance with the Regulation (EU) 2016/679 (GDPR) and the Law No. 58/2019, dated 8 August, which ensures its implementation in Portugal.
By using the website, making a booking (by telephone, WhatsApp, email, the contact form or, in future, the online booking engine) or completing a purchase of a Fado Experience, you are agreeing to the practices described here.
2. About us — Data Controller
- Name/Company: Topics and Trends Ltd
- Tax Identification Number (NIF): 513416005
- Address: Rua Gonçalo Cristovão, No. 294, 4th floor, Dtº, Frente 4000-266 Porto
- General and privacy email: info@rc-restaurante.pt
- Telephone: +351 222 081 814
Given the nature and scale of the data processing we carry out, we are not required to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR. Nevertheless, any queries regarding your personal data may be addressed to the contacts listed above or those set out in section 14.
3. What personal data do we collect?
We only collect the data necessary to provide the service you have requested. Depending on how you interact with us, this may include:
3.1 Table booking details — by telephone, WhatsApp (+351 963 208 120), email or, in future, via the website’s online booking system: full name, email address, telephone number, date/time and number of guests, special requests (e.g. special occasion, preferred table) and dietary restrictions or allergies, where voluntarily provided.
3.2 Data relating to the Fado Night Events — in addition to the booking details: guests’ names where applicable for reserved seating, and payment and billing details (point 3.3) and, should RC Restaurante take photographs or record video of the performance for promotional purposes, your image — always with a visible notice displayed on the premises and the option to decline.
3.3 Payment and billing details (online checkout) — name and billing address, tax identification number (NIF) where required for invoicing, and payment details (card, MB WAY or other available methods). These payment details are entered and processed directly by the IfthenPay, a payment institution authorised and supervised by the Bank of Portugal (licence no. 8707), which acts as an intermediary in the processing of Multibanco, MB WAY, Payshop and credit/debit card transactions; RC Restaurante does not access or store full card details or payment reference details.
3.4 Contact form details — full name, email address, telephone number, reason for contacting us (booking, enquiries, suggestions, event quotes, other) and the content of the message.
3.5 Browsing data and cookies — IP address, device/browser type, pages visited and traffic source, collected via cookies — see section 10.
3.6 Communications via WhatsApp and social media — If you choose to contact us via WhatsApp, Instagram or Facebook, we will process the content solely for the purpose of handling your enquiry; these conversations are also subject to Meta/WhatsApp’s own privacy policies.
3.7 Special categories of data — dietary restrictions and allergies may reveal health information, which constitutes a special category of data under Article 9 of the GDPR. We only process this information with your explicit consent (when you provide it voluntarily) and solely for the purpose of preparing your meal safely.
4. Purposes and legal basis for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Managing table bookings and availability | Performance of a contract / pre-contractual steps — Article 6(1)(b) |
| Process the purchase of Fado Experiences and the corresponding payment | Performance of the contract — Article 6(1)(b) |
| Issue invoices and fulfil tax obligations | Legal obligation — Article 6(1)(c) |
| Catering for allergies and dietary restrictions | Explicit consent for health data — Article 9(2)(a) |
| Respond to enquiries via the contact form | Pre-contractual measures / legitimate interests — Article 6(1)(b) and (f) |
| To capture and share photos and videos of the Fado Nights | Consent — Article 6(1)(a) — and the right to one’s own image (Article 79 of the Civil Code) |
| Send marketing communications (newsletters, promotions) | Consent — Article 6(1)(a) — may be withdrawn at any time |
| Preventing fraud and ensuring the security of the website and payments | Legitimate interest — Article 6(1)(f) |
| Analysing and improving the website’s performance | Consent to non-essential cookies — Article 6(1)(a) |
5. Who we share your data with
We only share what is strictly necessary with subcontractors bound by a data processing agreement in accordance with Article 28 of the GDPR:
- Online payment processor — IfthenPay (Multibanco, MB WAY, Payshop and credit/debit card)
- Booking engine / online booking management platform, where applicable
- A CRM and marketing automation tool used to manage contacts and communications (Inflow Connect)
- Google (Analytics, Ads) and Meta (Facebook/Instagram Ads), for performance analysis and advertising campaigns, subject to consent to the use of cookies
- Website hosting and maintenance provider
- Accounting and the Tax Authority, where required by law
- Public authorities, where required by law or by court order
We do not sell your personal data to third parties.
6. International data transfers
Some of the service providers listed above (namely Google and Meta) may process data outside the European Economic Area. In such cases, the transfer takes place under mechanisms recognised by the GDPR — Standard Contractual Clauses approved by the European Commission or adequacy decisions, such as the EU-US Data Privacy Framework.
7. Retention periods
| Data category | Retention period |
|---|---|
| Booking data with no associated invoicing | Up to 24 months after the booking, or until a request is made to delete the data |
| Tax and invoicing documents | Minimum period required under Portuguese tax and commercial law (as a general rule, 10 years) |
| Payment details (card) | Not retained by RC Restaurante — see the payment processor’s policy |
| Marketing consent | Until consent is withdrawn |
| Photos/videos of events | Deadline specified at the time of collection; collection possible on request |
| Messages from the contact form | Up to 12 months after the application has been processed |
| Cookies | See the table in section 10 |
8. Information security
We implement appropriate technical and organisational measures to protect your data: a secure connection (HTTPS/SSL), access controls, payment processing via a payment institution authorised by the Bank of Portugal, and confidentiality agreements with all subcontractors.
9. Your rights
Under Articles 15 to 22 of the GDPR, you have the right to:
- Access to your personal data
- Amend incorrect or incomplete data
- Delete your personal data, where applicable
- Limit treatment in certain circumstances
- Portability based on the data provided
- To oppose for processing, in particular for direct marketing purposes
- Withdraw consent at any time, without affecting the lawfulness of the processing carried out previously
To exercise these rights, please contact info@rc-restaurante.pt. We will reply within one month at the latest.
10. Cookies and similar technologies
| Category | Purpose | Examples | Consent? |
|---|---|---|---|
| Essentials | How the website and checkout process work | Session cookies, security | No |
| Analytics/Performance | Understanding how to use the website | Google Analytics | Yes |
| Marketing/Advertising | Remarketing and campaign measurement | Google Ads, Meta Pixel | Yes |
| Staff | Remember preferences | Language, booking details | Yes |
You can manage your preferences at any time via the cookie banner or your browser settings. The legal basis for non-essential cookies is consent, in accordance with Law No. 41/2004 (as amended by Law No. 46/2012) and the GDPR. It is also recommended that you publish a Cookie Policy independent, with the exact list to be provided following a technical audit of the website.
11. Minors
The website and the booking/checkout services are intended for persons aged 18 or over who have the legal capacity to enter into contracts. Data relating to children (e.g. number of children in the group, high chair) is only processed in the context of a booking made by a responsible adult.
12. Third-party links and content
The website may include links or widgets from third parties (Instagram, Facebook, TripAdvisor, TheFork, Yelp, Google Maps, WhatsApp). These platforms have their own privacy policies, which we recommend you consult; RC Restaurante has no control over how these organisations process data.
13. Changes to this policy
We may update this policy to reflect changes in the law or to our services — in particular, with the introduction of the online booking and checkout system. The current version will always be available on this page, along with the date of the last update.
14. Contact details and complaints
RC – Restaurant (Tópicos e Tendências S.A. · Tax Identification Number 513416005) Rua Gonçalo Cristovão, No. 294, 4th floor, ground floor, Frente 4000-266 Porto · Email: info@rc-restaurante.pt · Telephone: +351 222 081 814
If you consider that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:
CNPD — National Data Protection Commission Av. D. Carlos I, 134, 1st floor, 1200-651 Lisbon Tel: (+351) 213 928 400 · Email: geral@cnpd.pt · www.cnpd.pt