Privacy and Cookie Policy
This policy explains how we collect and use personal data, and how we use cookies, on casadospedros.com. It is written to comply with Regulation (EU) 2016/679 (GDPR), Portuguese Law 58/2019, and Portuguese Law 41/2004 on privacy in electronic communications.
1. Who we are
Casa dos Pedros is a local accommodation establishment (Alojamento Local) in São Roque, São Miguel, Azores.
| Registered address | Rua Manuel de Fontes 16, 9500-714 São Roque, Azores, Portugal |
| Local accommodation registration (RNAL) | 3600/AL |
| [email protected] | |
| Phone / WhatsApp | +351 916 534 596 (call to the national mobile network) |
We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. For any privacy question, write to [email protected].
2. What this website does — and does not — do
This website is an informational site with a single form: the booking request form on the Book now page.
Submitting that form does not create a reservation. It sends us an email so we can check availability and reply to you. We do not take payments, card details, or any financial information through this website.
We do not host a comments section, we do not operate user accounts or logins for visitors, and we do not run advertising or profiling.
3. What data we collect
3.1 Data you give us through the booking request form
- Full name (required)
- Email address (required)
- Phone number (optional)
- Check-in and check-out dates (required)
- Number of guests (required)
- Any additional information or requests you choose to write in the free-text field
- Your confirmation that you have read this policy and the Terms and Conditions
Please do not include sensitive information (health details, dietary or medical conditions, and so on) in the free-text field unless it is genuinely necessary for us to answer your request. If you do, we will treat it as given with your explicit consent for the sole purpose of responding to you.
3.2 Data you give us if you contact us directly
If you email us at [email protected] or message us on WhatsApp, we receive whatever you send, including your email address or phone number and the content of your message.
3.3 Technical data
Our website is served through Cloudflare, which processes your IP address and basic request information to deliver the site securely and to filter automated traffic. Our hosting provider keeps standard server logs. This data is used for security and site availability, not to track or identify you.
We do not use Google Analytics, advertising pixels, or any other tracking tools. See Part Two below.
4. Why we use your data, and on what legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Reply to your booking request; check availability; send you a quote | Form data | Art. 6(1)(b) — steps taken at your request prior to entering into a contract |
| Manage and deliver your stay if you go on to book | Form data plus booking details | Art. 6(1)(b) — performance of a contract |
| Answer general enquiries sent by email or WhatsApp | Message content and contact details | Art. 6(1)(f) — our legitimate interest in responding to people who contact us |
| Issue invoices and keep accounting and tax records | Name, tax number, transaction data | Art. 6(1)(c) — compliance with a legal obligation |
| Report guest stays to the immigration authorities where legally required | Identification data collected at check-in | Art. 6(1)(c) — legal obligation under Portuguese law |
| Keep the site secure and prevent spam or abuse of the form | Technical data | Art. 6(1)(f) — our legitimate interest in protecting the site |
Note that the last two purposes relate to your stay, not to this website. We collect identification documents at check-in, not online.
5. How long we keep your data
| Situation | Retention period |
|---|---|
| Booking request that does not lead to a stay | 12 months from your last contact with us, then deleted |
| Booking request that leads to a stay | Duration of the stay plus 10 years, to meet Portuguese accounting and tax record-keeping obligations |
| General email or WhatsApp correspondence | 12 months, unless it relates to a booking |
| Server and security logs | Short retention set by our hosting provider and Cloudflare, typically under 12 months |
Where a period is set by law, that period prevails.
6. Who has access to your data
We do not sell your data and we do not share it for marketing purposes. Your data is accessible to:
- The owners and staff of Casa dos Pedros, to handle your request and your stay.
- Our website host and Cloudflare, as technical service providers.
- Our email provider, which delivers and stores the message generated by the form.
- Our accountant, where a booking results in an invoice.
- Public authorities, where we are legally obliged to provide information.
If you booked through Booking.com or Airbnb rather than through us directly, that platform is a separate data controller and its own privacy policy applies to the data you gave it.
7. Transfers outside the European Economic Area
Some of our service providers (such as Cloudflare) may process data outside the EEA. Where that happens, transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision. You may ask us for a copy of the safeguards in place.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Rectify data that is inaccurate or incomplete
- Erase your data (“right to be forgotten”), where we have no overriding legal reason to keep it
- Restrict how we process your data
- Portability — receive your data in a structured, machine-readable format
- Object to processing based on our legitimate interests
- Withdraw consent at any time, where processing is based on consent, without affecting what we did before you withdrew it
To exercise any of these, email [email protected]. We will respond within one month. We may ask you to confirm your identity before acting on a request, to make sure we are not disclosing your data to someone else.
If you believe we have handled your data improperly, you may complain to the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD) Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa, Portugal www.cnpd.pt
9. Security
We use HTTPS across the site and apply reasonable technical and organisational measures to protect your data. No system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.
10. Children
This website is not directed at children. We do not knowingly collect data from anyone under 18. Bookings must be made by an adult.
11. What cookies are
A cookie is a small text file that a website stores in your browser. Cookies let a site remember things between page loads — for example, that a form was submitted successfully, or that your browser has already passed a security check.
Some cookies are essential for a site to work. Others exist to measure audiences or to advertise. We only use the first kind.
12. We do not track you
We want to be straightforward about this, because most cookie policies are not:
- We do not use Google Analytics or any other analytics tool.
- We do not use advertising or social media pixels (Meta, TikTok, Google Ads, and so on).
- We do not build profiles of visitors or share browsing data with third parties.
- We do not embed third-party maps, videos, or fonts that would load tracking on your behalf.
Because the only cookies we use are strictly necessary to deliver the site and its form, we do not need to ask for your consent before setting them, under Article 5(3) of the ePrivacy Directive as transposed by Portuguese Law 41/2004. That is also why you will not see a cookie banner.
15. Local storage and similar technologies
We do not use browser local storage, session storage, fingerprinting, or tracking pixels for any analytics or marketing purpose.
16. Managing cookies in your browser
You can delete or block cookies through your browser settings. Blocking the cookies listed above may cause the booking form to fail or trigger repeated security checks, but it will not prevent you from reading the site.
Instructions: Chrome · Safari · Firefox · Edge
17. If this changes
If we ever add analytics, embedded maps or videos, or any marketing tool, those cookies would require your prior consent. We would then add a consent banner and update this page before activating them.
18. Links to other websites
Our site links out to Booking.com, Airbnb, WhatsApp, and our architect’s website. Following those links takes you to services we do not control, each with its own cookies and privacy policy. This policy does not cover them.
19. Changes to this policy
We may update this policy. The current version is always the one published on this page, with the date of the last update shown at the top. Material changes will be highlighted on the site.
19. Contact
Questions about this policy: [email protected], or write to Rua Manuel de Fontes 16, 9500-714 São Roque, Azores, Portugal.