Book

Privacy Policy

Last updated ·

How we handle your personal data - Villa Vale Flores

Data controller

Villa Vale Flores (Carolina Torres Barbosa), Rua Vale Flores n.º 12, 4925-127 Santa Marta de Portuzelo, Viana do Castelo, Portugal - is the controller of your personal data. Contact: carolinaaitunes@hotmail.com / villavaleflores@outlook.com.

Data we collect

  • Contact form: name, email and message. Collected only when you submit the form on /contactos or the booking widget.
  • Technical cookie: vvf_lang stores your language preference. Does not identify you personally.
  • Google Analytics 4: aggregate visit data (pages viewed, duration, device) - only fires after explicit consent in the cookie banner.
  • Server logs: our host (Hostinger) keeps technical logs for up to 30 days, including IP - for abuse detection and diagnostics.

Purpose

To answer booking and information requests (legal basis: pre-contractual measures, Art. 6(1)(b) GDPR); to improve the site through aggregate statistics (legal basis: consent, Art. 6(1)(a) GDPR).

Retention

Contact messages are kept in the email inbox for 24 months, then deleted. Google Analytics data is retained for 14 months. Cookies expire automatically - vvf_lang after 12 months; consent cookie after 6 months.

Processors

We rely on: Hostinger International Ltd. (web hosting, EU), Google Ireland Ltd. (Analytics 4, EU), Booking.com (booking management - read-only on our site, no user data sharing). We do not sell or share your data with third parties for commercial purposes.

Your rights

You have the right to access, rectify, erase, restrict processing, port, and object to processing of your data (Art. 15–22 GDPR). To exercise these rights: carolinaaitunes@hotmail.com / villavaleflores@outlook.com. You may also lodge a complaint with the Portuguese Data Protection Authority CNPD: www.cnpd.pt.

Security

The site uses HTTPS (TLS) on all connections. Passwords are not stored on the server - only the SMTP credential, with restricted permissions. Backups are handled by the hosting provider.

Changes to this policy

This policy may be updated to reflect changes to the site or legislation. The last-updated date is at the top of this page.