Privacy Policy

1. Who we are

Gerês Cascatas Residence is a short-term rental accommodation in Gerês, Portugal. This policy describes how we collect, use and protect your personal data when you interact with our website or services.

• Data controller: Gerês Cascatas Residence
• Address: Rua de Pedrogo, 5, 4845-075 Gerês
• Email: gerescascatas@gmail.com
• Phone: +351 963 478 677

2. Data we collect

We collect the following personal data through the contact form:

• Name
• Email address
• Phone number (optional)
• Check-in and check-out dates
• Number of guests
• Message or special requests (optional)

The site uses Vercel Analytics — a cookie-free, privacy-preserving traffic analysis tool that collects no personally identifiable information. The site also integrates Mapbox for interactive maps, which processes technical data (IP address, map tile requests) on Mapbox, Inc. servers (see section 5). We do not use tracking cookies or build behavioural profiles.

3. Purpose of processing

Your data is used exclusively to:

• Respond to your booking or information request
• Confirm availability of the apartments for the indicated dates
• Communicate with you during the booking process
• Comply with legal obligations (guest registration SEF/AIMA, invoicing)

4. Legal basis

Processing of your data is based on your consent (when submitting the form) and pre-contractual performance (responding to your booking request), pursuant to Article 6 of the GDPR (Regulation (EU) 2016/679).

5. Data sharing

Your data is not sold or shared with third parties for marketing purposes. We use the following processors only to support the service:

• Web3Forms — technical form submission processing (Singapore, GDPR-compliant)
• Google Gmail — receipt of the request email
• Vercel — site hosting and anonymous traffic analytics (USA / Europe, GDPR-compliant via SCCs; Vercel Analytics uses no cookies and collects no personal data)
• Mapbox, Inc. — interactive map rendering; when the map loads, your IP address and tile requests are sent to Mapbox servers in the USA under a GDPR-compatible data processing agreement (DPA). No user profile is created. See the Mapbox Privacy Policy.

In case of confirmed booking, data may be reported to SEF/AIMA as required by Portuguese law (Decree-Law 113/2021).

6. Retention period

• Requests without confirmed booking: 6 months
• Requests with confirmed booking: 5 years (Portuguese fiscal obligation)
• Registered guest data (SEF/AIMA): as required by applicable law

7. Your rights

You have the right to:

• Access — know what data we hold about you
• Rectification — correct inaccurate data
• Erasure ("right to be forgotten") — except for legal obligations
• Restriction of processing
• Portability — receive your data in a structured format
• Objection to processing
• Withdraw consent at any time

To exercise any of these rights, contact us at gerescascatas@gmail.com. We respond within a maximum of 30 days.

You may also file a complaint with the Portuguese Data Protection Authority (CNPD) .

8. Security

We apply appropriate technical measures to protect your data: HTTPS/TLS across the entire site, secure form transmission, restricted access to the accommodation email. In case of a data breach, we will notify the CNPD and affected data subjects as required by the GDPR.

9. Cookies and local storage

This site does not use tracking cookies or behavioural advertising. We use only local storage (localStorage) strictly necessary for the site to function:

• Language preference — remembers whether you chose PT or EN.
• Privacy notice — remembers that you dismissed the cookie notice so it is not shown again.

These values are stored only on your device, are never sent to our servers, and do not require consent under Portuguese Law 41/2004.

Mapbox (map integration) processes technical data (IP address, tile requests) on its own servers without using cookies — see section 5. Vercel Analytics uses no cookies and no personal identifiers.

10. Changes to this policy

This policy may be updated. The "Last updated" date at the top indicates the version in force. Significant changes will be communicated on the site.