1. Who we are

We are the company Capítulo Rural Lda, headquartered at Rua Nossa Senhora da Saúde, nº 280, 4820-Rego, owner and manager of Casa da Fonte de Cima, a Country House located at Rua de Alijó, nº 529, 4820-840 Rego, Portugal.Email: capitulorural@gmail.com | Tel: +351 927998527

Data Controller
Controller: Capítulo Rural Lda - Casa da Fonte de Cima – Rural Tourism – Country House
Address: Rua Nossa Senhora da Saúde, nº 280, 4820-Rego, Portugal
Email: capitulorural@gmail.com
Phone: +351 927 998 527Currently, there is no Data Protection Officer (DPO), as it is not legally required.

2. what data we collect

- Name, contact, and identification details
- Booking data (check-in and check-out dates) and stay preferences
- Billing and payment information
- CCTV images (in common areas)
- Website browsing data (cookies)
- Employee data (human resources)
- Email address (for communications, if consented)

3. how we collect the data

- When you make a booking on the website
- When you contact us by phone or email
- During check-in or stay
- Through CCTV in common areas
- Through cookies and similar technologies

4. purposes and legal basis for processing

Booking and stay management – Contract performance (Art. 6(1)(b))
Legal obligations (e.g. immigration services, invoicing) – Legal obligation (Art. 6(1)(c))
CCTV – Legitimate interest (Art. 6(1)(f))
Marketing and promotions – Consent (Art. 6(1)(a))
Improving customer experience – Legitimate interest

5. Cookies and similar technologies

The website uses essential and analytical cookies. These help improve navigation and understand visitor behavior. You can accept, refuse, or configure cookies through your browser settings. Non-essential cookies are only used with your consent.

6. cctv

Casa da Fonte de Cima has a CCTV system (Securitas Direct) installed in common areas, clearly signposted. Recordings are kept for up to 30 days and are only accessed by authorized personnel or competent authorities, in accordance with the law.

7. subcontractors and service providers

We use the PMS platform from the company HOST for booking management, which acts as a data processor. We ensure that our suppliers have confidentiality and data protection agreements in compliance with the GDPR.

8. How we protect your data

- Restricted access to authorized personnel only
- Encryption and access control systems
- Regular compliance audits
- Secure storage with protection against loss, destruction, or unauthorized access

9. who we share your data with

- Legal authorities (e.g., SEF, Tax Authority), if required
- Service providers (e.g., HOST, accounting), under data protection agreements
- Marketing companies, only with your consent

10. international data transfers

We currently do not transfer data outside the European Union. Should this change, appropriate safeguards will be implemented to ensure the level of protection required by the GDPR.

11. Data retention periods

- Booking and invoicing data: 5 to 10 years (legal requirements)
- Marketing data: until consent is withdrawn
- CCTV images: 30 days
- Other data: as long as necessary or legally required

12. Data subject rights

You may exercise your rights at any time:
- Access to data
- Rectification or deletion
- Objection or restriction to processing- Data portability
- Complaint to the CNPD (www.cnpd.pt)
Contact us: capitulorural@gmail.com

13. Changes to the privacy policy

This policy may be updated periodically. The latest version will always be available upon request or on our website.

14. Applicable law

This policy is governed by Regulation (EU) 2016/679 and the applicable national data protection laws in Portugal.

Privacy Policy