Privacy Policy

Last update: 2026-04-24

1. Data Controller

Refúgio da Azinheira is the controller for personal data processed through this website and local accommodation operations.

Privacy contact: refugiodaazinheira@outlook.pt.

Address: Rua da Azinheira nº22, 7595-116 Torrão, Portugal.

2. Legal Framework

Processing is carried out under Regulation (EU) 2016/679 (GDPR), Portuguese Law no. 58/2019 and applicable local accommodation rules.

Where relevant, cookie/electronic communications rules (ePrivacy) are also observed.

3. Categories of Data

Identification and contact data: name, email, phone, nationality and ID details where legally required.

Stay data: check-in/check-out, number of guests and data needed for legal obligations.

Technical website data: IP address, access logs and technical cookies.

4. Purposes

To handle booking requests, confirm stays, communicate with guests and provide support.

To comply with legal obligations, including mandatory reporting to competent authorities.

Operational security, fraud prevention and legal claims management.

5. Legal Bases

Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).

Compliance with legal obligations (Art. 6(1)(c) GDPR).

Legitimate interests (Art. 6(1)(f) GDPR).

Consent, where specifically required (Art. 6(1)(a) GDPR).

6. Recipients and Processors

Data may be processed by service providers needed for operations (hosting, email, technical support, accounting), under confidentiality and security obligations.

If the user accepts loading Google Maps, Google may process technical data linked to that external content, including IP address, browser/device identifiers and map-related requests.

Data may be disclosed to public authorities when legally required.

We do not sell personal data or share it for third-party marketing.

7. International Transfers

If data is transferred outside the EEA, appropriate GDPR safeguards are applied, including standard contractual clauses where applicable.

Using Google Maps may involve international data processing under Google's own terms.

You may request additional information about these safeguards.

8. Retention

Data is retained only for the period necessary for the stated purposes and legal obligations.

Tax/accounting records are retained for legally required periods.

After retention periods, data is securely deleted or anonymized.

9. Data Subject Rights

You may exercise rights of access, rectification, erasure, restriction, objection and portability, where applicable.

You may withdraw consent where consent is the legal basis.

You may lodge a complaint with the competent supervisory authority.

10. Cookies

This website only uses cookies and technical storage that are strictly necessary for security and operation, including the .QuintaAzinheira.Auth authentication cookie in the admin area and technical form protection mechanisms.

Acceptance of the legal notice is stored locally in the browser to avoid showing the same notice on every visit.

Google Maps is treated as optional third-party content and is only loaded after explicit acceptance. More details are provided in the Cookie Policy.

11. Security

Appropriate technical and organizational measures are implemented, including access controls and data minimization.

No system is fully risk-free; incident notification duties will be fulfilled when legally required.

12. Policy Changes

This policy may be updated for legal, technical or operational reasons.

The current version is the one published on this page with its update date.