Privacy Policy
This page explains what data we receive when you contact us, how it is used and how you can exercise your rights.
Last updated: 14 July 2026
1. Data controller
Casa da Ribeira, local accommodation registration 110649/AL, is responsible for data handled directly to answer enquiries and manage bookings.
Privacy contact: [email protected]
2. Data we handle
The availability form only calculates an estimate in your browser. When you choose WhatsApp or email, the enquiry is sent through the selected application: dates, guest count and any information you add to the message.
If the booking proceeds, we may handle identification, contact, invoicing, payment and stay details needed for the booking and applicable legal duties. The server may also record basic technical data such as IP address, date, browser and requests made for security and operation.
The site only stores your language preference in the browser's local storage. We do not use advertising or analytics cookies on this site.
3. Purposes and legal basis
We use the data to answer the enquiry, confirm availability, prepare and perform the booking, communicate during the stay, comply with tax and legal duties and protect the service against abuse. Depending on the situation, the legal basis is pre-contractual action or performance of the contract, compliance with legal obligations and legitimate interests in service security.
4. Providers and external links
Technical hosting and network protection may be provided by Cloudflare. Fonts and the calendar use resources from Google Fonts and jsDelivr. When you follow a link or send an enquiry, the relevant service's policy also applies, including WhatsApp/Meta, Airbnb, Booking.com, Google Maps and your email provider.
5. Retention and security
We retain enquiries that do not become bookings only for as long as needed to answer and follow up. Data for confirmed bookings is kept for the time needed to provide the service and meet applicable tax, accounting or legal periods. We apply appropriate technical and organisational measures, although no Internet communication can be guaranteed to be risk-free.
6. Your rights
Where applicable, you may request access, correction, erasure, restriction, portability or object to processing. You may also lodge a complaint with the Portuguese Data Protection Authority. To exercise a right, write to the contact above and identify your request clearly.