Privacy Policy

The controller of your personal data is Manuel Fernandes Dias (“Casa da Eira”), tax number 192182552, with tax domicile at Albitelhe, Calçada da Póvoa, Travessa do Cabeço n.º 9, 3670-054 Campia, Portugal.

For any question relating to data protection, you can contact us at:

• geral@casadaeiracaramulo.pt
• +351 968 109 466

Data you provide directly

• Name, email address and phone number;
• Desired stay dates and property of interest;
• The content of messages sent through the contact form, the chat concierge or by email;
• Data required for guest registration and check-in: full name, date of birth, nationality, country of residence, type and number of your ID document or passport and its issue and expiry dates;
• Billing data (name, tax number and address) when you request an invoice.

Data collected automatically

• IP address, device type and browser;
• Pages visited, interactions and website usage data;
• Information collected through cookies and similar technologies (see the “Cookies” section).

We do not collect or store payment card data. Payments for direct bookings by Multibanco reference or MB WAY are processed by our payment service provider, Easypay, and bank transfers by the banks involved; bookings made through platforms (Booking.com, Airbnb) are processed by those platforms in accordance with their own privacy policies.

We process your personal data for the following purposes and on the following legal bases:

• Managing bookings, enquiries and the provision of the accommodation service — performance of a contract (Art. 6(1)(b) GDPR);
• Complying with the mandatory registration of guests with the competent authorities (SEF/AIMA, via SIBA) and with invoicing and other tax and accounting obligations — compliance with a legal obligation (Art. 6(1)(c));
• Responding to enquiries and communicating with you about your stay — performance of a contract and/or legitimate interest (Art. 6(1)(b) and (f));
• Analysing and improving the use of the website through analytics cookies — only with your consent (Art. 6(1)(a)), which you can withdraw at any time;
• Ensuring the security of the website and preventing fraud — legitimate interest (Art. 6(1)(f)).

Our website uses cookies and similar technologies that are strictly necessary for it to work — for example, to remember in your browser your light/dark theme preference and your cookie choice — and, only if you consent, analytics cookies (Google Analytics) that help us understand, in aggregate, how visitors use the site.

On your first visit we ask whether you accept analytics cookies. Until you do, Google Analytics runs in restricted mode (Consent Mode): it neither stores nor reads cookies on your device and can only receive cookieless signals without identifiers, which cannot recognise you across visits. You can change your choice at any time through the “Cookies” link in the footer of every page, and you can also manage or delete cookies in your browser settings. Disabling essential cookies may affect how the site works.

We do not sell your personal data. We may share it with the following categories of recipients and processors, only to the extent necessary:

• Booking platforms (Booking.com, Airbnb), when you book through them;
• Booking management system / channel manager (Beds24), for availability and reservation synchronisation;
• Invoicing software (Moloni), to issue invoices and comply with tax obligations;
• Payment service provider (Easypay), to process payments for direct bookings by Multibanco reference and MB WAY;
• Artificial-intelligence provider that generates the chat assistant’s replies (OpenAI, via Cloudflare AI Gateway), which receives the messages you write in the chat;
• Web hosting, storage and email providers that support the operation of the website and our communication with you;
• Analytics tools (Google Analytics);
• Competent public authorities, where there is a legal obligation — in particular the registration of guests with SEF/AIMA (SIBA) and the Tax Authority.

Some of our service providers (for example, analytics, artificial-intelligence or infrastructure providers) may process data outside the European Economic Area. In such cases, we ensure that appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission or adequacy decisions.

• Booking and guest data: for the duration of the contractual relationship and for the legal periods applicable to guest registration;
• Billing and accounting data: 10 years, as required by Portuguese tax law;
• Enquiries and communications: for as long as needed to respond and, where applicable, for the duration of the customer relationship;
• Analytics and cookie data: for the periods defined for each cookie.

Once these periods elapse, the data is deleted or anonymised.

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or improper disclosure, including restricted access to information and the use of secure connections (HTTPS).

As a data subject, you have the following rights:

• Access to your personal data;
• Rectification of inaccurate or incomplete data;
• Erasure of data (the “right to be forgotten”);
• Restriction of processing;
• Data portability;
• Objection to processing;
• Withdrawal of consent at any time, without affecting the lawfulness of processing already carried out.

To exercise these rights, contact us at geral@casadaeiracaramulo.pt. You also have the right to lodge a complaint with the supervisory authority, the Portuguese Data Protection Authority (CNPD — www.cnpd.pt).

Our services are intended for adults. Data relating to minors is only processed as part of a booking made by a responsible adult.

We may update this Privacy Policy from time to time. The version in force is always available on this page, with the date of the last update.

For any question about this Policy or about the processing of your personal data, contact us:

• geral@casadaeiracaramulo.pt
• +351 968 109 466