LEGAL
Privacy Policy
Última atualização: July 28, 2026
Quinta dos Manteiros respects the privacy of its customers and visitors and is committed to protecting the personal data entrusted to it. This Privacy Policy explains what data we collect, for what purposes, on what basis and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Portuguese Law no. 58/2019 of 8 August.
1. Data controller
- Name: QUINTA DOS MANTEIROS - SOCIEDADE AGRÍCOLA E TURÍSTICA, LDA
- Tax ID (NIF): 516148419
- Address: Rua da Fonte, 25 - Póvoa de Lisboa - 3430-570 Beijós - Portugal
- Email: quintadosmanteiros@gmail.com
- Phone: +351 966 868 060
2. What data we collect
- Identification and contact data: name, email, phone and address.
- Booking and purchase data: dates, accommodation/experience, products, vouchers and order history.
- Payment data: processed by payment providers; we do not store full card details.
- Browsing data: technical and usage information collected through cookies (see point 8).
- Communications: messages sent through the contact form.
3. Purposes and legal bases
- Managing bookings, orders and vouchers — performance of the contract (Art. 6(1)(b)).
- Invoicing and legal obligations — compliance with a legal obligation (Art. 6(1)(c)).
- Responding to contact requests — pre-contractual steps / legitimate interest (Art. 6(1)(b)/(f)).
- Marketing communications — only with your consent (Art. 6(1)(a)), which you may withdraw at any time.
- Security and improvement of the website — legitimate interest (Art. 6(1)(f)).
4. Retention periods
We retain data only for as long as necessary for the purposes above and to comply with legal obligations (in particular tax and accounting obligations, generally 10 years). Data processed on the basis of consent is retained until consent is withdrawn.
5. Data sharing and processors
Your data may be shared with service providers acting on our behalf (for example, payment processing, website hosting and email delivery), subject to confidentiality and security obligations. It may also be disclosed to authorities where required by law.
6. International transfers
Whenever a processor handles data outside the European Economic Area, we ensure appropriate safeguards under the GDPR (for example, standard contractual clauses).
7. Your rights
As a data subject, you have the right to: access, rectification, erasure, restriction of processing, portability, objection, and withdrawal of consent at any time. To exercise these rights, contact us using the details in point 1.
8. Cookies
The website uses cookies that are essential to its operation and, subject to consent, analytics cookies. You can manage your preferences through your browser settings and the website's cookie banner.
9. Security
We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction.
10. Complaints
Without prejudice to other remedies, you may lodge a complaint with the competent supervisory authority, the Portuguese Data Protection Authority (CNPD) — www.cnpd.pt.
11. Changes to this policy
This Policy may be updated. The version in force is the one published on this page, with the date of the last update.