Privacy Policy

1. Framework and Controller

Quintã – Turismo no Douro Lda (hereinafter “Quinta dos Moinhos”), located at Av. José Joaquim Ferreira, n.º 2000, 4515-462 Melres, is committed to ensuring the privacy and protection of personal data for all guests and website users. Quinta dos Moinhos is the entity responsible for processing your personal data.

2. Personal Data Collected

We collect and process only personal data strictly necessary for managing your booking and stay:

• Identification Data: Full name, date of birth, nationality, ID/passport document, and tax identification number (NIF).
• Contact Data: Email address, phone number, and physical address.
• Payment Data: Credit/debit card information or bank details (processed securely through payment gateways).
• Communications and Preferences: Records of messages exchanged with us and information regarding pets.

3. Purposes and Lawful Basis for Processing

Your personal data is collected and processed for the following purposes:

• Booking and Accommodation Management: Execution of the accommodation contract, payment processing, and stay management (Legal basis: Performance of contract).
• Compliance with Legal Obligations: Mandatory reporting of foreign guests to immigration authorities (AIMA/SEF) and invoice generation (Legal basis: Legal obligation).
• Guest Support: Responding to inquiries, direct communication, or managing special requests for events (Legal basis: Legitimate interest / Performance of contract).

4. Data Sharing with Third Parties

Quinta dos Moinhos does not sell or transfer your personal data to third parties for marketing purposes. Your data will only be shared with:

• Official Authorities: Immigration authorities (AIMA/SEF) and Tax Authorities, in strict compliance with Portuguese law.
• Service Providers: Booking platforms and payment processors acting as data processors with equivalent security protocols.

5. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as well as to comply with mandatory tax and accounting retention periods (typically 10 years for financial records).

6. Rights of Data Subjects

Under GDPR, you have the right to access, rectify, erase, restrict, oppose, or request portability of your personal data. To exercise any of these rights, please contact us via the official email provided on the website. You also have the right to lodge a complaint with the national supervisory authority (CNPD).