Privacy Policy

How we handle your personal data

Data Controller

Casa das Ondas is the data controller for personal data collected through this website.

Contact: ingrinacasa@gmail.com · Praia da Ingrina, Vila do Bispo, Portugal · AL 134219/AL.

Data We Collect

We collect the following personal data:

Booking and contact forms: name, email address, and phone number.

Newsletter sign-up: email address only.

Purpose & Legal Basis

Booking requests: processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR).

Contact enquiries: legitimate interest in responding to your message (Art. 6(1)(f) GDPR).

Newsletter: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Third-Party Processors

We share data with the following processors, each bound by data processing agreements:

Stripe — secure card payment processing.

PayPal — secure payment processing.

Resend — transactional email delivery.

Vercel — website hosting and infrastructure.

Data Retention

Booking records are retained for 7 years in accordance with Portuguese tax law.

Newsletter subscriptions are retained until you unsubscribe.

Contact enquiries are retained for up to 2 years.

Your Rights

Under the GDPR you have the right to: access your personal data; rectify inaccurate data; request erasure; receive your data in a portable format; object to processing based on legitimate interests; withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact ingrinacasa@gmail.com.

Cookies

This website uses only technical cookies that are strictly necessary for its operation (session management provided by Next.js and Vercel).

We do not use tracking cookies, analytics cookies, or advertising cookies.

Contact & Complaints

For data-related requests, contact: ingrinacasa@gmail.com.

If you believe your rights have not been respected, you may lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados), the Portuguese data protection authority.