Only the Portuguese version of the Privacy Policy is legally binding. Translations are provided for user convenience. In case of any discrepancy between the translation and the original Portuguese version, the original Portuguese version shall prevail.

On May 25, 2018, the General Data Protection Regulation (GDPR) – Regulation No. 2016/679 of the European Parliament and the Council, dated April 27, 2016 – came into effect. It establishes rules regarding the protection, processing, and free movement of personal data of individuals and applies directly to all entities processing such data in any EU member state, including Portugal.

This privacy policy describes the practices of Quinta de Lourosa concerning personal information and data that can identify individuals (“Personal Data”). This privacy policy applies to this Website, email and text messages, and social media accounts (the “Platforms”). By using the Platforms, you agree to the terms of this policy.

Categories of Personal Data Collected

The new GDPR regulation provides a broader definition of personal data. Personal data refers to any information, regardless of its nature or format, that can identify an individual. Examples of personal data categories processed by Quinta de Lourosa include:

• Platform Data: When you visit our Website, we may collect data about you. Some of this data may be personal information. This information may include your search history, IP address, screen resolution, browser used, operating system and its settings, access times, and the URL you used to reach us. If you use a mobile device, we may also collect data identifying your device, its settings, and location.
• Reservation Data: If you make a reservation through our Website, we may need additional data from you. This information may include your name, identification document number, tax identification number (TIN), age, date of birth, phone contact, email, address, payment details, credit card data, and billing address.

Data Processing Responsibility

The entity responsible for processing your personal data is Quinta de Lourosa.

Purpose of Processing Your Personal Data

Quinta de Lourosa ensures that your personal data is processed only for the purposes communicated to you and is not used for any other purpose. We process your personal data to ensure the quality of the service we provide and to better respond to your needs. Some examples of purposes for which we may use your data (non-exhaustive list):

• Direct Marketing: To inform you about news, opportunities, and promotions that may interest you.
• Customer Management: To send you all confirmations and/or requests for any reservations you make with us.

Legal Basis for Processing Your Personal Data

Your express consent: whether in writing or orally, for example, for direct marketing purposes, so that you receive emails or SMS messages from Quinta de Lourosa.

• Execution of a reservation or contract: that you entered into with Quinta de Lourosa, such as a lodging reservation or an experience at Quinta de Lourosa.
• Compliance with a legal obligation.
• Quinta de Lourosa’s legitimate interest: for example, to improve the quality of the service provided.

Situations in Which Your Personal Data is Used

At Quinta de Lourosa, we process your personal data with your consent, when you make a purchase, contract a service, or use our website. This processing may be done orally, in writing, or through our website.
Customer Support: If you choose to contact our customer support services, we will collect any questions, complaints, or other information you provide to our support team.
Promotional Data: If you choose to participate in a giveaway, contest, or similar campaign, we will collect any information you provide in relation to such activity, such as photos, images, captions, or other content, in accordance with the terms provided at that time.
When you provide us with personal data, you confirm that it is true, current, complete, and correct. You also confirm that you are authorized to share it.

How We Collect Your Personal Data

• Personal data provided by you: We collect your personal data directly from you. For example, when you provide your personal data by contacting us through the form on this Website, making a reservation, contacting our customer support, or participating in a contest or giveaway.
• Personal data collected passively: We also collect your personal data passively. For example, we collect data about you over time and across different websites through advertisements. We also use tracking tools such as cookies.

How Long We Retain Your Personal Data

Quinta de Lourosa retains your personal data only for the strictly necessary period to execute the purpose for which it was collected, or, where applicable, until you exercise your right to object or request deletion. After this retention period, Quinta de Lourosa deletes your personal data.

Who We Share Your Personal Data With

Whenever necessary, Quinta de Lourosa may share your personal data with third parties – partner companies of Quinta de Lourosa, such as transportation companies – solely and exclusively for the purpose of executing a service you have contracted, such as travel arrangements to the service location. Your personal data may also be communicated to government authorities, such as the Tax Authority, in compliance with the law.

Your Data Protection Rights and How to Exercise Them

• Right to Access Information: You can obtain confirmation of which of your personal data is processed by Quinta de Lourosa, as well as information about the purposes of processing and data retention periods.
• Right to Rectification: You can request corrections to your personal data if they are incorrect or incomplete.
• Right to Deletion: You can request the deletion of your personal data, provided there are no legal obligations requiring their retention.
• Right to Data Portability: You can receive the personal data you provided in a structured, machine-readable digital format.
• Right to Object: You can oppose or withdraw your previously given consent for the processing of your personal data.
• Right to Restrict Processing: You can request the restriction of your personal data processing, in the form of:
  - Suspension of processing;
  - Limiting processing to certain data categories or processing purposes.
• Right to Not Be Subject to Automated Decisions: You can request not to be subject to any decisions made solely based on automated processing. These decisions may involve consumer profile definitions based on preferences, search history, and purchases to provide a better service and tailor marketing communications.

You can exercise these rights in writing by sending an email.