Privacy Policy

1. Data Controller

The entity responsible for processing personal data collected through this website is Quinta dos Pilotos. For privacy-related matters, please contact us at info@quintadospilotos.com.

2. Legal Framework

This policy is prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR), applicable national law, and internationally recognized privacy best practices.

3. Data We Collect

• Identification and contact data (name, email, mobile phone).
• Optional tax data (tax number), when provided by the user.
• Reservation details (check-in/check-out dates and notes).
• Technical data required for website operation (cookies and technical logs).

4. Purposes and Legal Bases

• Availability and reservation management: pre-contractual steps and contract performance.
• Communication with guests and potential guests: legitimate interest and/or contract performance.
• Compliance with legal and tax obligations: legal obligation.
• Security and abuse prevention: legitimate interest.

5. Data Retention

Data is retained only for as long as necessary for the purposes for which it was collected, without prejudice to mandatory legal retention periods (including tax, accounting, and legal defense requirements).

6. Data Sharing

We do not sell personal data. Data may be shared only with strictly necessary service providers (such as hosting, email, and technical maintenance), under confidentiality and security obligations, and with competent authorities when legally required.

7. International Transfers

Whenever data is transferred outside the European Economic Area, appropriate safeguards will be implemented, such as Standard Contractual Clauses approved by the European Commission or legally equivalent mechanisms.

8. Data Subject Rights

Under the GDPR, you may exercise your rights of access, rectification, erasure, restriction, objection, and portability, as well as withdraw consent when applicable. You may also lodge a complaint with the competent supervisory authority.

9. Security

We implement technical and organizational measures appropriate to protect personal data against unauthorized access, alteration, disclosure, loss, or unlawful destruction.

10. Updates

This policy may be updated periodically to reflect legal, technical, or operational changes. We recommend reviewing this page regularly.

Last update: 2026-11-02