Legal

Privacy Policy

Last updated: June 1, 2026

1. Who we are

Gerês Cascatas Residence is a short-term rental accommodation in Gerês, Portugal. This policy describes how we collect, use and protect your personal data when you interact with our website or services.

  • Data controller: Gerês Cascatas Residence
  • Address: Rua de Pedrogo, 5, 4845-075 Gerês
  • Email: gerescascatas@gmail.com
  • Phone: +351 963 478 677

2. Data we collect

We collect the following personal data through the contact form:

  • Name
  • Email address
  • Phone number (optional)
  • Check-in and check-out dates
  • Number of guests
  • Message or special requests (optional)

We do not collect browsing data, tracking cookies, IP addresses or any information automatically. The site is static and uses no analytics tools.

3. Purpose of processing

Your data is used exclusively to:

  • Respond to your booking or information request
  • Confirm availability of the apartments for the indicated dates
  • Communicate with you during the booking process
  • Comply with legal obligations (guest registration SEF/AIMA, invoicing)

4. Legal basis

Processing of your data is based on your consent (when submitting the form) and pre-contractual performance (responding to your booking request), pursuant to Article 6 of the GDPR (Regulation (EU) 2016/679).

5. Data sharing

Your data is not sold or shared with third parties for marketing purposes. We use the following processors only to support the service:

  • Web3Forms — technical form submission processing (Singapore, GDPR-compliant)
  • Google Gmail — receipt of the request email
  • Vercel — site hosting (USA / Europe, GDPR-compliant via SCCs)

In case of confirmed booking, data may be reported to SEF/AIMA as required by Portuguese law (Decree-Law 113/2021).

6. Retention period

  • Requests without confirmed booking: 6 months
  • Requests with confirmed booking: 5 years (Portuguese fiscal obligation)
  • Registered guest data (SEF/AIMA): as required by applicable law

7. Your rights

You have the right to:

  • Access — know what data we hold about you
  • Rectification — correct inaccurate data
  • Erasure ("right to be forgotten") — except for legal obligations
  • Restriction of processing
  • Portability — receive your data in a structured format
  • Objection to processing
  • Withdraw consent at any time

To exercise any of these rights, contact us at gerescascatas@gmail.com. We respond within a maximum of 30 days.

You may also file a complaint with the Portuguese Data Protection Authority (CNPD) .

8. Security

We apply appropriate technical measures to protect your data: HTTPS/TLS across the entire site, secure form transmission, restricted access to the accommodation email. In case of a data breach, we will notify the CNPD and affected data subjects as required by the GDPR.

9. Cookies

This site does not use tracking cookies. We only use technical storage strictly necessary for the page to function (e.g. remembering the chosen language). These do not require consent.

10. Changes to this policy

This policy may be updated. The "Last updated" date at the top indicates the version in force. Significant changes will be communicated on the site.