Who we are
Our website, cabodesagres.com (“Website”), is the online presence for Cabo de Sagres (“we”, “us”, “our”). We provide local holiday accommodation, offering two distinct apartments for rent in Sagres, Portugal. This Privacy Policy outlines our commitment to protecting your privacy and explains how we collect, use, process, and safeguard your personal information when you visit our Website, inquire about, or use our services to book and pay for your stay at one of our apartments.
Information we collect
We may collect and process the following types of personal data about you:
Comments Data (if applicable): If you leave comments on the site, we collect the data shown in the comments form, your IP address, and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Identity Data: Your first name, last name, and (if provided for invoicing) your tax identification number (NIF).
Contact Data: Your email address, phone number, billing address, and postal address (if different for communication).
Booking Data: Details of the apartment you book, dates of stay, number of guests (adults and children), special requests or preferences you communicate to us.
Transaction Data: Details about payments made by you for bookings, dates of payment, payment method (e.g., Stripe, PayPal), and amounts. Please note, we do not directly store your full credit card or bank account details. These are securely processed by our third-party payment processors.
Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Website.
Usage Data: Information about how you use our Website, including pages visited and services utilized.
Communications Data: Records of your correspondence with us via email, contact forms, or other communication channels.
How we use your information
We use the information we collect for the following purposes:
For spam detection if comments are enabled.
To process and manage your bookings and reservations for our apartments.
To process payments for your bookings securely through our payment partners, Stripe and PayPal.
To communicate with you regarding your bookings, inquiries, or any other requests.
To provide customer support and respond to your queries.
To personalize your experience on our Website.
To improve our Website, services, and customer experience.
To comply with our legal and regulatory obligations in Portugal (e.g., for invoicing, tax purposes, and reporting to authorities like SEF – Serviço de Estrangeiros e Fronteiras, if applicable).
To send you information about our services or special offers, only if you have given us explicit consent to do so.
Legal Basis for Processing Your Personal Data
We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):
Consent: For specific purposes, such as sending marketing communications, we will rely on your explicit consent. You can withdraw your consent at any time.
Performance of a Contract: When you make a booking, we process your data to fulfill our contractual obligations to provide you with accommodation services.
Legal Obligation: We process certain data to comply with Portuguese laws and regulations (e.g., financial record-keeping, tax obligations, SEF reporting).
Legitimate Interests: We may process data for our legitimate interests, such as improving our services, ensuring website security, and fraud prevention, provided these interests are not overridden by your fundamental rights and freedoms.
Cookies
Our Website uses cookies to enhance your Browse experience, remember your preferences, and facilitate the booking process.
- If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
- If you visit our login page (if applicable for registered users), we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
- When you log in (if applicable), we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
- Booking Process Cookies: We use session cookies to manage your booking selections and ensure a smooth transaction process.
- Third-Party Cookies: When you use our payment services (Stripe, PayPal), these third-party providers may set their own cookies. We also may use cookies from embedded content providers. Please review their respective cookie and privacy policies for more information.
You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of our Website, particularly the booking process.
Embedded Content from Other Websites
Articles or pages on this site may include embedded content (e.g., videos, images, maps, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who We Share Your Data With
We do not sell your personal data. We may share your personal data with the following categories of third parties for the purposes described in this policy:
Password Resets: If you request a password reset (if user accounts are enabled), your IP address will be included in the reset email.
Payment Processors: To process your payments securely, we share necessary transaction data with:
Stripe: Your payment data is processed directly by Stripe. Stripe’s Privacy Policy: https://stripe.com/en-pt/privacy
PayPal: Your payment data is processed directly by PayPal. PayPal’s Privacy Policy: https://www.paypal.com/us/legalhub/paypal/privacy-full
Legal and Regulatory Authorities: We may disclose your information to law enforcement, tax authorities (such as Autoridade Tributária e Aduaneira), SEF, or other governmental agencies if required by Portuguese law or legal process.
Service Providers: We may use third-party service providers for IT support, website hosting, or communication tools. These providers are contractually bound to protect your data.
Spam Detection Services: Visitor comments (if enabled) may be checked through an automated spam detection service.
How Long We Retain Your Data
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Booking Data: Personal data related to your bookings (identity, contact, booking, and transaction data) will be retained for a minimum period as required by Portuguese law (e.g., typically for tax and accounting purposes, this can be up to 10 years after the completion of your stay.
- Comments Data: If you leave a comment, the comment and its metadata are retained indefinitely or until you request its deletion. This is so we can recognize and approve any follow-up comments automatically.
- Registered User Data (if applicable): For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
- Other Data: Other data will be retained for as long as necessary for the purpose it was collected, or as required by our legitimate interests or legal obligations.
Data Security
We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is limited to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality. Payments are processed by Stripe and PayPal, which adhere to stringent security standards (e.g., PCI-DSS).
International Data Transfers
Your personal data, particularly in relation to processing payments, may be transferred to and processed by our third-party service providers (Stripe, PayPal) which may be located in, or operate in, countries outside of the European Economic Area (EEA). When we transfer your data outside the EEA, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, are in place, or by relying on adequacy decisions for certain countries, as applicable. Please refer to the privacy policies of Stripe and PayPal for more details on their international data transfer practices.
Your Data Protection Rights
Under the GDPR and applicable Portuguese law, you have several rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete personal data.
- Right to Erasure (‘Right to be Forgotten’): You can request that we erase your personal data, subject to certain legal obligations we may have to retain it.
- Right to Restrict Processing: You can request that we restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.
- Right to Object: You can object to the processing of your personal data where we are relying on legitimate interests, or for direct marketing purposes.
- Right to Withdraw Consent: If we are processing your personal data based on your consent, you can withdraw your consent at any time.
To exercise any of these rights, please contact us using the details provided in the “Contact Us” section below. We may need to request specific information from you to help us confirm your identity. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD) if you believe your data protection rights have been infringed.
Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. Bookings must be made by an adult. If we become aware that a child under 18 has provided us with personal information without appropriate parental consent, we will take steps to delete such information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, our data protection practices, or wish to exercise any of your rights, please contact us:
Cabo de Sagres Email: [email protected]