1. Data Controller

2. Personal Data CollectedPessoais Recolhidos

2.1 Data provided by the user (Online Bookings)

2.2 Payment Data

Os pagamentos online são processados através de plataformas seguras certificadas.
Quinta Cova do Milho does not store full bank card details.

2.3 Browsing Data (Website)

While browsing the website, the following may be collected:

• IP address
• Approximate location data
• Device and browser type
• Usage statistics
• Cookies (see Cookies Policy)

3. Purposes of Processing

Personal data is processed for:

• Management and confirmation of online bookings
• Fulfilment of the accommodation contract
• Payment processing
• Issuing invoices
• Compliance with legal obligations (including reporting to the competent authorities)
• Communication before, during and after your stay
• Managing special requests
• Sending promotional communications (where authorised)
• Improving the user experience on the website

4. Compliance with Legal Obligations

Under Portuguese legislation applicable to Rural Tourism, guests’ data may be disclosed to the competent authorities for the purposes of entry control and security.

5. Legal Basis for Processing

Processing is based on:

• Performance of a contract (accommodation booking)
• Compliance with a legal obligation
• Consent of the data subject (e.g. newsletter)
• Legitimate interests of the organisation (e.g. security and service improvement)

6. Data Retention

Personal data will be retained:

• For the period necessary to provide the service
• For the periods required by law for tax and administrative purposes
• Until consent is withdrawn, in the case of marketing communications

7. Data Sharing

Data may be shared with:

• Technology service providers (online booking platform)
• Payment processors
• Certified accounting and invoicing software
• Public authorities, where legally required

Quinta Cova do Milho does not sell or trade personal data.

8. Data Subject Rights

Under the GDPR, the data subject has the right to:

• Access their data
• Rectification of incorrect data
• Erasure of data
• Restriction of processing
• Objection to processing
• Data portability
• Withdraw consent at any time

The data subject may exercise their rights via the email address provided.

They may also lodge a complaint with the National Data Protection Commission.

9. Information Security

Quinta Cova do Milho implements appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or improper disclosure, including:

• SSL certificate on the website
• Restricted access to personal data
• Systems to protect against unauthorised access

10. Cookies

The website uses cookies that are essential for the functioning of the online booking platform, as well as statistical cookies and, where applicable, marketing cookies.
You can manage your preferences via the cookie banner available on the website.

11. Changes to the Privacy Policy

Quinta Cova do Milho reserves the right to update this Policy whenever necessary, with any changes being published on the website.