Privacy Policy

Data controller

The controller responsible for processing personal data is:

• Legal name or business name: [LEGAL NAME OR BUSINESS NAME]
• Trading name: Casas da Ougueira
• Contact address: Rua do Cruzeiro no. 22, 5100-606 Matança / Magueija, Lamego, Portugal
• Email: [email protected]

For any questions concerning privacy or data protection, please use the contact details provided above.

Personal data we may collect

Depending on how you use the website or communicate with us, we may collect the following categories of data:

• Identification and contact details, such as your name, email address and phone number.
• Booking-related information, including preferred dates, number of guests, special requests and information required to organise your stay.
• Billing and payment information required to process your booking and comply with legal obligations.
• The content of messages sent through forms, email, telephone or other contact channels.
• Technical data, such as IP address, browser type, device, pages visited, access date and time and security logs.
• Preferences relating to cookies and similar technologies.

We only request data that is appropriate and necessary for the purposes described in this Policy.

Purposes and legal bases

Personal data may be processed for the following purposes:

• Responding to information requests, questions and messages submitted through the website.
• Checking availability, preparing offers and taking pre-contractual steps requested by the user.
• Managing bookings, payments, amendments, cancellations, check-in, check-out and communications relating to the stay.
• Issuing accounting documents and complying with tax, legal and regulatory obligations applicable to local accommodation.
• Ensuring the operation, maintenance and security of the website and preventing misuse.
• Measuring website usage and displaying external content where the user has provided the required consent through the cookie settings.

Depending on the purpose, processing may be based on the performance of a contract or pre-contractual steps, compliance with a legal obligation, the controller's legitimate interests or the data subject's consent.

Contact forms and booking enquiries

When you submit a form, use the contact details provided or start a booking enquiry, the information you provide is used to respond to your request and, where applicable, prepare, confirm and manage your booking.

Fields marked as required are necessary for us to respond or provide the requested service. Failure to provide this information may prevent the form from being submitted, the request from being answered or the booking from being completed.

Data provided for the purpose of responding to an enquiry will not be used for promotional communications without an appropriate legal basis.

Bookings and payments

Booking management may involve technical booking systems and payment service providers. These providers process the information required to perform their services in accordance with their own legal obligations and privacy policies.

Casas da Ougueira does not receive or store full bank card details where payment is processed directly by an external payment provider.

Information concerning the status, amount, reference and method of a transaction may be retained where necessary to manage the booking, support the guest and comply with accounting or legal obligations.

Cookies and similar technologies

The website may use cookies that are strictly necessary for its operation and, subject to consent, analytics, personalisation or external-content cookies.

Non-essential cookies will only be activated after the user has made a choice through the cookie banner or preferences panel. Consent may be changed or withdrawn at any time through the cookie settings available on the website.

Some embedded content, such as maps or other external services, may result in technical data being transmitted to the relevant provider when the content is loaded.

Recipients and service providers

Personal data may be shared, only where necessary, with entities providing services relating to:

• Website hosting, technical maintenance and security.
• Booking management and guest communications.
• Payment processing.
• Accounting, invoicing and legal support.
• Authorised analytics and external content.
• Public authorities, courts or regulatory bodies where disclosure is required by law.

These recipients may only process data for the contracted or legally permitted purposes and must implement appropriate security and confidentiality measures.

International data transfers

Some technology providers may process data outside the European Economic Area. Where this occurs, the legally required safeguards will be used, such as adequacy decisions, standard contractual clauses or other mechanisms provided for by the GDPR.

Data retention

Personal data will only be retained for as long as is necessary to fulfil the purpose for which it was collected.

Contact enquiries will be retained for the period required to respond and follow up on the matter raised. Information relating to bookings, payments, invoicing and legal obligations may be retained for the periods required by applicable law.

Data may also be retained for the period required to establish, exercise or defend legal claims in judicial or extrajudicial proceedings.

Data security

Appropriate technical and organisational measures are implemented to protect personal data against loss, destruction, alteration, unauthorised access, disclosure or use.

Despite the measures adopted, no electronic transmission or storage system can guarantee absolute security. If you notice any suspicious situation involving your data, please contact us using the email address stated in this Policy.

Your data protection rights

Subject to applicable law, you may request:

• Access to your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure of data where legally applicable.
• Restriction of processing.
• Data portability where applicable.
• Objection to processing based on legitimate interests, where permitted by law.
• Withdrawal of consent without affecting the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, send a request to [email protected]. We may need to request additional information to verify the identity of the person making the request.

Complaints

If you believe that your personal data is not being processed in accordance with applicable law, you may contact us so that we can review the matter.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority, Comissão Nacional de Proteção de Dados (CNPD).

Automated decision-making

No decisions producing legal or similarly significant effects are made solely through automated processing of personal data collected through this website.

Changes to this Policy

This Privacy Policy may be updated to reflect changes to the website, the services used or applicable legal requirements.

The current version will always be published on this page together with the date of the most recent update.