Privacy Policy

Data controller

The controller is the company that operates the property.

Company

ALICIANTE LAZER, LDA.

Tax number

515723894

Address

Rua das Veigas 143, 4850-212 Cela, Vieira do Minho

Email

villacella.al@gmail.com

Local accommodation registration

RNAL 134374/AL

No Data Protection Officer has been appointed. The processing carried out involves neither large-scale regular and systematic monitoring nor special categories of data, so article 37 of the GDPR does not require one.

What data is processed, and on what basis

Each purpose has its own legal basis, and only the data that purpose requires is collected.

Booking enquiries and contact

Name, contact details, requested dates and number of guests, received by WhatsApp, telephone or email. Basis: steps prior to a contract and performance of that contract, article 6(1)(b) GDPR.

Guest registration

Identification data needed to register guests and to report that registration to the authorities where the law requires it. Basis: compliance with a legal obligation, article 6(1)(c).

Invoicing and accounts

Name, address and tax number, where an invoice is issued. Basis: compliance with a legal obligation, article 6(1)(c).

Server logs

IP address, date and time, requested address and browser type, recorded automatically by the site's hosting to keep it available and secure. Basis: legitimate interests, article 6(1)(f).

Visitor statistics

Page visited, referring site, country, browser and device type and loading times, collected in aggregate by Cloudflare Web Analytics, without cookies and without identifying individual visitors. Nothing is collected from visitors in the European Union. Basis: legitimate interests in understanding how the site is used and keeping it fast, article 6(1)(f).

Cookies and storage on your device

This site uses no cookies and stores no identifier on your device. There are no advertising pixels, embedded maps or advertising services. Visits are counted in aggregate with Cloudflare Web Analytics, which uses no cookies and is not loaded for visitors in the European Union. Everything else a page requests comes from this same address, fonts included.

During your visit, and only inside your own browser, the page position is kept so it can be restored if you go back. It does not identify you, it is sent nowhere, and it disappears when you close the tab.

Because no cookies requiring consent are used, this site shows no cookie notice. Should services that require them ever be introduced, consent will be asked for before anything is collected.

Who the data is shared with

Data is neither sold nor passed on for advertising. It is available only to those needed for the purposes above.

Cloudflare, Inc.

Website hosting, technical logs and aggregate visitor statistics, acting as a processor.

Meta Platforms

If you choose to contact us on WhatsApp, that conversation is handled by Meta under its own terms. Email or telephone are always available instead.

Accountants and the tax authority

Invoicing records, in compliance with tax obligations.

Competent authorities

Reporting of guest registration, as the law requires.

Booking platforms

Where a booking arrives through a platform, that platform handles the data as an independent controller, under its own policy.

Transfers outside the European Union

Cloudflare and Meta are based in the United States. Transfers rely on the mechanisms in chapter V of the GDPR, namely certification under the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses approved by the European Commission.

How long data is kept

Enquiries that do not lead to a stay

Up to twelve months after the last contact, after which they are deleted.

Invoicing records

Ten years, the period Portuguese tax law imposes.

Guest registration

For the period set by the law governing local accommodation and guest registration.

Technical logs and statistics

For the hosting provider's retention period, and used only for diagnostics, security and aggregate statistics.

Your rights

You may request access to your data, its correction, its erasure, restriction of processing and portability, and you may object to processing that rests on legitimate interests. Requests go to the email address given above and are answered within one month.

No automated decisions are taken and no profiling is carried out.

If you believe your data is not being handled lawfully, you have the right to lodge a complaint with the supervisory authority. CNPD — Comissão Nacional de Proteção de Dados

Security

The site is served only over an encrypted connection and collects no data through forms: there is no field anywhere on these pages where your data could be submitted. Access to correspondence and stay records is limited to those who run the property.

Changes to this policy

This policy is revised whenever the processing of data changes. The date of the last revision appears at the top of this page.