Privacy Policy

1. Introduction
This Privacy Policy informs users about the nature, scope and purpose of the processing of personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).

2. Data Controller
The data controller responsible for data processing on this website is:

Joia da Foia Bed & Breakfast
Magicview Lda
Estrada da Foia, Belem
8550-218 Monchique / Portugal
Email: info@joia-da-foia.com
Imprint

3. Collection and Processing of Personal Data
Personal data are processed only where this is legally permitted or where users have given their consent. Personal data are all information relating to an identified or identifiable natural person.

4. Contact
When contacting us by email, telephone or via a contact form, the personal data transmitted by the user are processed for the purpose of handling the enquiry.

The legal basis for the processing is Art. 6(1)(b) GDPR where the enquiry is related to the conclusion of a contract or pre-contractual measures. In all other cases, the processing is based on Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

The data will be deleted once they are no longer required for the purpose for which they were collected and no statutory retention obligations apply.

5. Reservation Enquiries
When users submit a reservation enquiry via the contact or reservation form (Gravity Forms), the data entered (such as name, email address, requested dates and message content) are processed for the purpose of handling the enquiry.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)
The data are stored only for as long as necessary to process the enquiry and to comply with statutory retention obligations.

6. Availability Calendar
This website uses the HBook plugin exclusively to display availability in a calendar format. No personal data are collected, processed or stored through this plugin.

7. Server Log Files
The hosting provider automatically collects and stores information in server log files, which are transmitted by the browser. These include:

  • browser type and version
  • operating system
  • referrer URL
  • hostname of the accessing device
  • time of server request
  • IP address

These data are processed to ensure the security and technical stability of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

8. Cookies
This website uses only technically necessary cookies that are required for the proper operation of the website.
No tracking, analysis or marketing cookies are used.
Legal basis: Art. 6(1)(f) GDPR

9. SSL Encryption
This website uses SSL encryption for security reasons and to protect the transmission of confidential content.
Encrypted connections can be identified by “https://” in the browser address bar.

10. Rights of Data Subjects
Data subjects have the following rights under the GDPR: right of access (Art. 15 GDPR)

  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object (Art. 21 GDPR)

Requests may be addressed informally by email to the data controller.

11. Supervisory Authority
Data subjects have the right to lodge a complaint with the competent supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Portugal

12. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect legal or technical changes. The current version published on the website applies.