Find Your Peace.
Check availability

Privacy Policy

Monte Loureiro · Last updated: 12 October 2026 This is a translation. In case of discrepancy, the Portuguese version prevails.

1. Controller

Roberta Romanato, sole trader, tax no. (NIF) 319508226, operator of the local accommodation Monte Loureiro (RNAL no. 155706/AL) Monte Loureiro, Vila do Bispo, 8650-298 Raposeira, Portugal Email: monteloureiro.ccca@gmail.com · Phone: +351 920 330 021

No data protection officer has been appointed, as this is not legally required.

2. What data we process, for what purposes and on what legal basis

2.1 Visiting the website

When you access the website, the hosting provider's server automatically logs technical data: IP address, date and time of access, page viewed, browser and operating system. Purpose: to provide the website and keep it secure. Legal basis: legitimate interest (Article 6(1)(f) GDPR). Retention: the hosting provider keeps the logs only for as long as necessary to operate and secure the website and, in the event of a security incident, for as long as needed to investigate it.

2.2 Group enquiry (form)

Data: name, email, type of group, preferred dates, number of nights, group size, use of the group room, catering request and message. Purpose: to answer the enquiry and prepare an offer. Legal basis: pre-contractual steps at the request of the data subject (Article 6(1)(b) GDPR). Please do not include health data, such as allergies, in the form. If needed, we will ask for it later. Retention: 12 months after the last contact. If the enquiry leads to a contract, section 2.3 applies.

2.3 Bookings

The booking engine on the website is provided by Lodgify. When you click "Check availability", you are taken to Lodgify's booking page, where you enter the booking data (name, contact details, dates, number of guests and the other data requested in the booking form). Purposes and legal bases:

  • performance of the accommodation contract (Article 6(1)(b) GDPR);
  • compliance with legal obligations, in particular invoicing and reporting the stay of foreign nationals to the authorities under Article 15 of Law no. 23/2007 of 4 July (Article 6(1)(c) GDPR). Retention: for the duration of the contract and thereafter for the statutory retention periods for accounting and tax records.

2.4 Contact by email, phone or WhatsApp

We process the data you send us in order to reply. Legal basis: pre-contractual steps or performance of the contract (Article 6(1)(b) GDPR); otherwise our legitimate interest in replying (point (f)). Retention: 12 months after the last contact, unless a longer statutory retention period applies.

2.5 Links to other websites

The website contains links to WhatsApp, Instagram, Facebook, Google Maps and the electronic Complaints Book. Data is only transmitted to the respective provider when you click a link. From then on, that provider's privacy policy applies.

3. Cookies

The website does not use any analytics, advertising or tracking tools. Only the following cookies are used; they are strictly necessary for the website and for the service requested by the user and do not require consent (Article 5(2) of Portuguese Law no. 41/2004 of 18 August):

| Cookie | Source | Purpose | Duration | |---|---|---|---| | __dpl | hosting provider (Lovable) | technical operation of the website hosting | 24 hours | | _ldgfy_c6y | booking engine (Lodgify) | operation of the availability search; only set when you use the booking engine | session | | session-id | booking engine (Lodgify) | operation of the availability search; only set when you use the booking engine | session |

Lodgify's cookie policy applies on Lodgify's booking page.

4. Recipients and service providers

We use the following service providers, which receive data in the course of their services:

  • Lovable Labs Incorporated, United States — website hosting and form database. The database is hosted in Canada; the website is delivered through an international server network;
  • Codebay Solutions Limited (Lodgify), United Kingdom — booking engine and booking management;
  • Google LLC / Google Ireland Limited — receipt of notifications and email (Gmail).

Data may also be disclosed to public authorities where required by law. Transfers to Canada and the United Kingdom are based on adequacy decisions of the European Commission. Transfers to the United States are based on the EU-US Data Privacy Framework, where the recipient is certified, or on standard contractual clauses. We do not sell data, do not create profiles and do not make automated decisions.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Articles 15 to 21 GDPR). Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To exercise these rights, contact us at monteloureiro.ccca@gmail.com. We reply within one month.

6. Complaints

You have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt, or with the supervisory authority of the Member State where you live.

7. Provision of data

The data marked in the form is required to answer the enquiry. Booking data is required to conclude and perform the contract and to comply with legal obligations. Without it, a booking is not possible.

8. Changes

We may update this policy. The version published on this page applies.

+351 920 330 021