Privacy Policy
Draft. Review and complete this text before publishing the site — in particular the data controller, the data collected and the contact details.
Data controller
The operator of Quinta do Valinho is responsible for the personal data collected through this website.
For privacy matters, including exercising your rights, write to contacto@quintadovalinho.pt.
What data is collected
This website has no booking form and no guest account area, and collects no data through any form.
Your personal data reaches us only if you choose to contact us by email, telephone or WhatsApp. In that case it is limited to what you decide to share — typically your name, a contact detail, the dates you have in mind and the number of guests.
If you allow usage statistics, aggregated data about how the site is browsed is also collected.
We do not ask for, and you should not send through these channels, identity documents, health data or bank details.
Purposes and legal basis
Replying to your enquiry and preparing a possible stay: pre-contractual steps taken at your request (Article 6(1)(b) GDPR).
Compliance with legal obligations, in particular tax and guest-registration duties once a stay takes place (Article 6(1)(c) GDPR).
Website usage statistics: only with your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
Marketing communications
This website has no newsletter and no marketing subscription. We do not use the contact details we receive to send promotions.
Processors and services used
The site is hosted by Vercel, which processes the technical data needed to operate and secure the service, including access logs.
The domain uses Cloudflare DNS services. Site traffic is not routed through the Cloudflare network.
The map on the location page is provided by OpenStreetMap, which sets no advertising or profiling cookies.
If usage statistics are enabled and you consent to them, the corresponding data is processed by Google.
Contact by email, telephone or WhatsApp takes place on the respective providers' platforms, subject to those platforms' own privacy policies.
International transfers
Some of the providers above are established outside the European Economic Area. Where that is the case, transfers rely on the mechanisms provided for in the GDPR, in particular standard contractual clauses approved by the European Commission or adequacy decisions.
Retention
Enquiries that do not lead to a booking: kept only for as long as needed to reply and deal with the request.
Data relating to stays that take place: kept for the periods required by tax legislation and by the obligations applicable to local accommodation.
Technical and security logs from the hosting provider: kept for short periods set by that provider.
Cookie consent: kept in your browser until you change or clear it.
Your rights
You may request access to, correction, erasure, restriction and portability of your data, and object to processing. Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.
You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.
Security
The site is served exclusively over an encrypted connection (HTTPS). Access to the enquiries we receive is limited to those who need it in order to reply.