Skip to content
Back to home

Privacy Policy

Last updated July 9, 2026

This policy explains how the owner of Casa da Avó ("we") collects and uses your personal data when you use this website and book Casa da Avó, in line with the General Data Protection Regulation (GDPR) and applicable Portuguese law.

1. Data controller

The controller of your data is the owner of Casa da Avó.

Address: Rua Hermano M. Seromenho 4, 8600-160 Praia da Luz, Portugal.

Contact: reservas@casadaavo.online · +351 965 445 213.

2. What data we collect

We only collect the data needed to manage your booking and answer your requests:

  • Booking details: name, email, phone, stay dates, number of guests, country and any message.
  • Messages sent through the contact form.
  • Payment data: processed securely by Stripe. We never receive or store your full card details.
  • Website usage data (see the Cookie Policy), only with your consent.

3. Purposes and legal bases

  • Managing and confirming your booking — performance of the contract (Art. 6(1)(b) GDPR).
  • Meeting legal, tax and accounting obligations — legal obligation (Art. 6(1)(c)).
  • Keeping the website secure and working properly — legitimate interest (Art. 6(1)(f)).
  • Measuring website audience through statistics — consent (Art. 6(1)(a)).

4. Who we share your data with

We use service providers (processors) that handle data on our behalf, only as far as necessary:

  • Stripe — payment processing.
  • Google — storing and managing bookings (Sheets and Calendar) and audience statistics (Google Analytics).
  • Resend — sending confirmation emails and contact messages.
  • Vercel — website hosting.

5. International transfers

Some of these providers are based outside the European Economic Area, notably in the United States. Where that is the case, transfers rely on appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission.

6. How long we keep your data

Booking and invoicing data is kept for the period required by Portuguese tax and accounting law (generally 10 years). Analytics data is kept for a limited period. Other data is deleted once it is no longer needed.

7. Your rights

Under the GDPR you have the right to:

  • Access, rectify or erase your data.
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time, without affecting the lawfulness of earlier processing.

8. Exercising your rights and complaints

To exercise any of these rights, contact us at reservas@casadaavo.online. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD).

9. Cookies

This website uses a minimal number of cookies. See our Cookie Policy for details.

10. Changes to this policy

We may update this policy. The current version is always available on this page. For any question, contact reservas@casadaavo.online.