The following Privacy Policy governs the processing of personal data carried out on the website and digital platforms associated with the accommodation Villa Ria Alvor – Swimming pool & Jacuzzi (hereinafter referred to as “Villa Ria Alvor” or “accommodation”).
The user should read this Policy carefully whenever using the website or making a reservation, as it may be updated without prior notice.
1. Definition of Personal Data
1.1 Personal data is considered to be any information relating to an identified or identifiable natural person, including name, contact details, online identifiers, booking data or elements associated with the use of the accommodation.
2. Data Controller
2.1 The controller responsible for the processing of personal data is Villa Ria Alvor, the entity that owns and manages the tourist accommodation located in Alvor, Portugal.
2.2 Villa Ria Alvor determines the categories of data collected, how they are processed and the respective purposes, in accordance with the GDPR.
3. Types of Data Collected and Purposes
3.1 Website access and browsing
When accessing the website, technical data is automatically collected to ensure functionality, security and optimisation:
• IP adress
• Date and time of access
• Accessed URL
• Volume of data transferred
• Information on transfer success
• Browser and operating system data
• Referring website
• Internet service provider
• These data are used exclusively for security and performance.
3.2 Contact form
When using the booking or contact form, data such as name, email and message are collected solely to respond to the enquiry and provide the requested information.
3.3 Bookings and stay management
To make direct bookings, the following data may be collected:
• Name
• Adress
• Country
• Tax Identification number (when applicable)
• Payment data (processed by secure external entities)
• Stay information (dates, number of guests, preferences)
Purposes:
• Booking management
• Check‑in and check‑out
• Compliance with legal obligations (e.g., communication to SEF/AIMA)
• Invoicing
• Guarantees and customer support
3.4 Accuracy of data
The user guarantees that the data provided are accurate and undertakes to communicate any changes.
3.5 Retention period
Data are retained for up to 12 months after the last interaction, unless a longer legal obligation applies (e.g., invoicing or mandatory guest records).
4. Data Sharing with Third Parties
4.1 Personal data are not disclosed to third parties without consent, except when necessary for the provision of services.
4.2 Data may be shared with service providers supporting Villa Ria Alvor’s activity, such as:
• Booking platforms (e.g., Booking.com)
• Website hosting and maintenance
• Email services
• Payment processing
• Cleaning, maintenance and logistics
• Marketing or campaign management entities
All entities operate in compliance with the GDPR and only access strictly necessary data.
4.3 Data may also be communicated for:
• Compliance with legal obligations
• Response to competent authorities
• Protection of rights in legal proceedings
• Fraud prevention or security incidents
5. Data Storage
Data are stored on secure servers with limited and controlled access by Villa Ria Alvor.
No external cloud services are used without adequate protection guarantees.
6. International Transfers
If any service requires data transfer outside Portugal/EU, Villa Ria Alvor will ensure:
• Technical and organisational security measures
• Verification of an adequate level of protection
• Existence of standard contractual clauses
7. Security Measures
Villa Ria Alvor implements measures to protect data against unauthorised access:
• Restricted access to authorised staff bound by confidentiality
• HTTPS protocol with SSL/TLS encryption
• Authentication and access control systems
• Firewalls and intrusion monitoring
8. Cookies
The Villa Ria Alvor website uses different categories of cookies, each with specific purposes.
8.1 Essential Cookies
Necessary for the functioning of the website and to enable basic features, such as:
• Page navigation
• Access to secure areas
• Session management
Without these cookies, the website may not function properly.
8.2 Performance and Statistics Cookies
Collect anonymous information on how the website is used, allowing:
• Traffic analysis
• Identification of most visited pages
• Improvement of content and functionalities
Examples: Google Analytics, Matomo, similar analysis tools.
8.3 Functionality Cookies
Allow the website to remember user preferences, such as:
• Language
• Region
• Custom settings
They improve the browsing experience.
8.4 Marketing and Advertising Cookies
Used only when applicable (e.g., campaigns, remarketing). They allow:
• Display of relevant ads
• Measurement of campaign effectiveness
• Personalisation of promotional content
8.5 Cookie Management
The user may, at any time:
• Block cookies
• Delete stored cookies
• Configure the browser to alert before accepting cookies
9. Rights of Data Subjects
The user may exercise their rights:
• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection (including direct marketing)
10. Links to Social Networks
The website may include links to social networks. Each platform has its own privacy policy, for which Villa Ria Alvor is not responsible.
11. Children
Villa Ria Alvor does not intentionally collect data from minors under 18 years of age.
If such data is collected, it will be deleted.
12. Applicable Law and Dispute Resolution
Portuguese law applies. In case of dispute, Portuguese courts have jurisdiction. Consumers may resort to an Alternative Dispute Resolution Entity (ADR): https://www.consumidor.gov.pt/parceiros/sistema-de-defesa-do-consumidor/entidades-de-resolucao-alternativa-de-litigios-de-consumo
Or to the European Online Dispute Resolution Platform (ODR).
13. Updates
The Privacy Policy may be updated at any time.
