Privacy Policy
Who We Are
Casinha da Póvoa – Sefardita Accommodation is operated by the sole trader Paula Alexandra Alves Barreiros Carvalho, Tax Identification Number (NIF) 190 257 342 (hereinafter referred to as the Service Provider), which is responsible for processing the personal data obtained through this website, https://casinhadapovoa-sefardita.pt, through reservation enquiries, or directly at the accommodation.
The data controller may be contacted at:
Email: info@casinhadapovoa-sefardita.pt
What Personal Data We Collect and How It Is Collected
Under the General Data Protection Regulation (GDPR), Personal Data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity.
Personal data is collected and processed by the above-mentioned entity only when customers contact us directly, whether by completing the contact form available on https://casinhadapovoa-sefardita.pt, by completing the Guest Registration Form at the accommodation, or by telephone or email.
The data collected is limited to what is necessary to process accommodation reservations, complete the Accommodation Bulletin (for foreign guests), prepare quotations and financial documents, and provide the best possible service.
The personal data collected may include:
Customer’s name;
Email address;
Telephone number;
Tax Identification Number (VAT/NIF);
Payment method details;
Number of guests included in the reservation;
Type of service requested;
Any other information considered relevant by the customer or necessary for the requested service.
Purpose of the Data Collected and How It May Be Used
Personal data is collected within the framework of preparing and performing service contracts between the Service Provider and its customers. It is processed in order to fulfil contractual obligations and comply with applicable legal requirements.
Where you have given your consent for additional purposes, namely promotional activities (event invitations, promotions and marketing communications), your personal data will be stored and processed in accordance with the consent provided.
Personal data is processed electronically and stored in secure databases. The Service Provider strictly complies with all applicable data protection legislation and information security standards.
The Service Provider undertakes to maintain encrypted server backups to ensure data recovery in the event of cyberattacks, software failures, incorrect use of technological systems or accidental deletion.
Personal data is stored within the European Union. Data may only be transferred outside the European Union to countries that provide an equivalent level of data protection as required under applicable legislation.
Who Your Data Is Shared With
The Service Provider does not share your personal data with third parties and does not obtain personal data from third parties.
Subcontractors
The data subject acknowledges that the Service Provider may engage subcontractors to process personal data on its behalf.
Whenever this occurs, appropriate technical and organisational measures are implemented to ensure that subcontractors provide sufficient guarantees regarding data protection and process personal data only in accordance with the Service Provider’s instructions.
Retention of Personal Data
The period during which personal data is stored depends on the purpose for which it was collected.
Where legal obligations require data to be retained for a minimum period, such obligations will be respected.
Where no statutory retention period applies, personal data will only be retained for as long as necessary to fulfil the purposes for which it was collected and processed, after which it will be securely deleted.
Personal data provided with your consent for marketing and promotional purposes will be retained until you withdraw your consent or request its deletion, or until the data is no longer required for the purpose for which it was collected.
Your Rights Regarding Your Personal Data
We guarantee the exercise of the following rights under the GDPR:
Right of Access
You have the right to obtain confirmation as to whether or not your personal data is being processed and to access such data in accordance with Article 15 of the GDPR.
Right to Rectification
You have the right to request the correction of inaccurate personal data and the completion of incomplete data without undue delay.
Right to Erasure (“Right to be Forgotten”)
Under certain circumstances, you may request the deletion of your personal data from our records without undue delay.
Right to Object
You have the right to object to certain types of data processing, including processing for direct marketing purposes.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used and machine-readable format or to have it transferred to another organisation.
Right to Restriction of Processing
Restriction of processing means that your personal data may only be processed, apart from storage, with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest recognised by the European Union or one of its Member States.
You will be informed before any restriction of processing is lifted.
To exercise any of these rights, please send an email to:
geral@casinhadapovoa-sefardita.pt
You will receive a form to complete in order to submit your request as a data subject.
Once the completed form has been received, the Service Provider undertakes to respond within the legally established time limits.
Requests and communications will generally be provided free of charge.
However, where requests are manifestly unfounded or excessive, particularly because of their repetitive nature, the Service Provider reserves the right, under the GDPR, to:
Use of Cookies
The Service Provider uses cookies to store information such as your personal preferences when you visit this website.
This may include displaying a simple pop-up message or enabling access to certain services.
The Service Provider may also use third-party advertising to help cover the maintenance costs of the website.
Some advertising partners may use technologies such as cookies and web beacons when displaying advertisements on the Casinha da Póvoa – Sefardita website. As a result, these advertising partners (such as Google through Google AdSense) may also receive information including your IP address, Internet Service Provider (ISP), browser type and similar technical data.
This functionality is commonly used for geographic targeting (for example, displaying advertisements for Lisbon only to visitors located in Lisbon) or interest-based advertising (for example, showing accommodation advertisements to users who regularly visit travel-related websites).
You may disable cookies through your browser settings or by adjusting the settings of security software such as Norton Internet Security.
Please note that disabling cookies may affect the way you interact with this website and with other websites. Certain features, services, logins or website functionality may no longer operate correctly.
Contact
If you have any questions regarding the collection or processing of your personal data, please contact us at:
geral@casinhadapovoa-sefardita.pt
Policy Updates
We reserve the right to amend this Privacy Policy at any time without prior notice.
Whenever significant changes are made, they will be published on this website.