Privacy Policy
How we handle your personal data
Data Controller
Casa das Ondas is the data controller for personal data collected through this website.
Contact: ingrinacasa@gmail.com · Praia da Ingrina, Vila do Bispo, Portugal · AL 134219/AL.
Data We Collect
We collect the following personal data:
Booking and contact forms: name, email address, and phone number.
Newsletter sign-up: email address only.
Purpose & Legal Basis
Booking requests: processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR).
Contact enquiries: legitimate interest in responding to your message (Art. 6(1)(f) GDPR).
Newsletter: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
Third-Party Processors
We share data with the following processors, each bound by data processing agreements:
Stripe — secure card payment processing.
PayPal — secure payment processing.
Resend — transactional email delivery.
Vercel — website hosting and infrastructure.
Data Retention
Booking records are retained for 7 years in accordance with Portuguese tax law.
Newsletter subscriptions are retained until you unsubscribe.
Contact enquiries are retained for up to 2 years.
Your Rights
Under the GDPR you have the right to: access your personal data; rectify inaccurate data; request erasure; receive your data in a portable format; object to processing based on legitimate interests; withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact ingrinacasa@gmail.com.
Cookies
This website uses only technical cookies that are strictly necessary for its operation (session management provided by Next.js and Vercel).
We do not use tracking cookies, analytics cookies, or advertising cookies.
Contact & Complaints
For data-related requests, contact: ingrinacasa@gmail.com.
If you believe your rights have not been respected, you may lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados), the Portuguese data protection authority.