THE CONCORD 50

Privacy notice

Updated: 9 November 2026.

Who handles your information

Concord Passport, Portugal, administers The Concord 50. For privacy enquiries, corrections, entry withdrawal or rights requests: connect@concordpassport.com.

Information and purposes

We collect your name, role, professional email, hotel details, ownership and affiliation, positioning, travel occasions and public supporting evidence. We record your entry reference, verification status, notice version and activity dates. A hashed network identifier and temporary counters help prevent abuse.

Concord Passport uses this information to administer participation, verify contact access and eligibility, communicate updates and results, respond to requests and maintain professional contacts in its commercial lead database. It may also communicate relevant Concord Passport services where applicable law permits. Entry is not recorded as marketing consent. Where a message requires consent, we will request it first.

Legal bases and communication choices

We process information needed to fulfil your participation request and administer the challenge, and rely on legitimate interests to secure the service and manage professional relationships. You may object to marketing at any time by email. We retain your objection to respect your preference; it does not affect your entry. Commercial messages will include an unsubscribe route.

Providers and transfers

Vercel hosts the website and functions; Neon stores entries and contacts in its EU Frankfurt database region; Resend delivers verification and confirmation emails. Providers may use subprocessors or support in other countries. Where required, transfers use recognised safeguards including standard contractual clauses. Representatives’ contact details are not published in the ranking.

Assessment and publication

Public hotel details and submitted evidence help classify positioning. Research may use AI providers to evaluate hotel recommendations; representative names and emails are excluded from prompts. Public results may identify the hotel, location and recognition. Email verification confirms access to an address; eligibility is reviewed separately.

Retention

Entry and contact records are retained for up to 36 months after the last meaningful interaction, unless an active relationship or legal obligation justifies longer retention. We review and act on erasure requests. Verification links expire after 48 hours; protection counters reset hourly. Email content is cleared from the queue after sending, with delivery IDs and status retained. Public results and evidence documenting an edition may be retained as a research archive.

Your rights

You may request access, correction, erasure, restriction, portability or objection where applicable. We may verify your identity before acting. You can complain to Portugal’s CNPD or your local data protection authority, including Spain’s AEPD.

Cookies

See Cookies and preferences for storage information and optional-use controls.