Privacy Policy

1. Data controller

The controller of the personal data collected in the context of the local lodging activity and the management of the website is:

• Rosario Vilares Sociedade Unipessoal, Lda.
• Portuguese tax number (NIPC) 516 808 222
• Calçada da Retorta, 100, 4910-055 Argela, Caminha, Portugal
• Email: quintadosocalco@gmail.com · Phone: +351 930 476 215

2. Personal data collected

Depending on the interaction concerned, we may collect and process the following categories of personal data:

• Identification data, such as name, date of birth, nationality and identification document number/type.
• Contact data, such as address, email and phone number.
• Booking data, such as stay dates, booked unit, number of guests and special requests.
• Payment data, where necessary to process the booking, with payment handled by an external provider.
• Communication data, such as messages exchanged by email, WhatsApp or the contact form.
• Browsing data, such as IP address, device type and cookies, under the terms of the Cookie Policy.

3. Purposes and legal bases

We process personal data for the following purposes:

• Management of bookings, check-in, check-out and provision of the lodging service, on the basis of performance of the contract.
• Compliance with legal obligations, namely legally required communications to the competent authorities and invoicing, on the basis of compliance with a legal obligation.
• Payment processing, where necessary for the performance of the booking or the contract.
• Replies to information requests and pre-contractual contacts, on the basis of pre-contractual steps and/or legitimate interest, as the case may be.
• Sending of commercial communications or newsletters, where applicable, on the basis of the data subject’s consent, which may be withdrawn at any time.
• Website security, fraud prevention and technical management of the service, on the basis of legitimate interest.

4. Data retention

We keep personal data only for the period necessary for the purposes for which it was collected and for the time required by law.

• Accounting and invoicing data: 10 years, under the applicable legal terms.
• Data relating to communications or contact requests: for the period necessary to handle the request and, as a rule, up to 2 years after the last interaction, unless a contractual relationship results from it.
• Booking and contract data: for the duration of the contractual relationship and for the period necessary to exercise or defend rights in court.
• Data processed on the basis of consent: until consent is withdrawn, without prejudice to retention on other legal grounds.

5. Recipients and processors

We may use third parties that process personal data on our behalf, namely:

• Payment service providers.
• Providers of technical hosting, maintenance and website infrastructure.
• Booking platforms and distribution channels, where used.
• Public authorities, where there is a legal duty to communicate.

In such cases, we only use entities that offer sufficient guarantees and with which adequate processing agreements are in place.

6. International transfers

Some processors may involve transfers of data outside the European Economic Area. In such cases, we ensure that adequate safeguards are in place, such as an adequacy decision, standard contractual clauses or another legally admissible mechanism.

7. Data subject rights

Under the law, you may exercise the following rights:

• Right of access.
• Right to rectification.
• Right to erasure, in the legally admissible cases.
• Right to restriction of processing.
• Right to object, where processing is based on legitimate interest.
• Right to data portability, where applicable.
• Right to withdraw consent, where processing is based on that ground.
• Right to lodge a complaint with the CNPD.

8. Exercising your rights

To exercise your rights or clarify any question about the processing of your data, contact us by email at quintadosocalco@gmail.com or by post to the address indicated in section 1. Confirmation of your identity may be required.

9. Cookies and browsing

The website may use cookies and similar technologies. Cookies that are not strictly necessary will only be used with consent, where legally required, under the terms of the Cookie Policy.

10. Security

We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or improper disclosure.

11. Changes to this Policy

We may update this Policy at any time. The version in force will always be available on this page, with the date of the last update.