Privacy and cookie policy

Updated October 17, 2026

1. Data controller

• Trading name: Casas Paulinha
• Email: geral@casaspaulinha.com
• WhatsApp and phone: +351 920 030 534

For any question about your personal data, email us.

2. What data we process and why

• Bookings: name, email, phone, country, dates, number of guests and any requests you send us. Used to make and manage the booking and to talk to you about it (performance of the contract).
• Payments: handled by Stripe. We receive the payment confirmation and the amount, not your full card details (performance of the contract).
• Guest registration: identification details requested at online check-in, to comply with the obligation to report foreign guests to the authorities (SIBA/AIMA) and to keep the guest book (legal obligation).
• Invoicing: name, tax number if provided and amounts, to issue and keep invoices (legal obligation).
• Digital guide and extra services: requests made in the house guide and related messages (performance of the contract).
• Contacts: messages you send us by email or WhatsApp, so we can reply (legitimate interest and steps taken at your request).
• Owners and cleaning clients: the contact details you give us to request a visit, a quote or a simulation, used only to reply to you.

We do not sell personal data or use it for third-party advertising.

3. Who we share data with

We use service providers that process data on our behalf and according to our instructions:

• Hostify (booking management), Hostkit (online check-in and invoicing) and Stripe (payments);
• Google (business email and digital guide database) and Cloudflare (website hosting);
• WhatsApp, when you choose to contact us that way;
• Airbnb or Booking.com, when the booking was made through those platforms.

We share data with the authorities when required by law, in particular with AIMA through the SIBA system. Some of these providers may process data outside the European Economic Area. In those cases, the transfer is made with the safeguards provided for in the GDPR, such as adequacy decisions (for example the EU-US Data Privacy Framework) or standard contractual clauses.

4. How long we keep it

We keep booking data for as long as needed to manage it and, after that, for the period required by law, for example the retention periods for tax documents and guest registration. Contacts without a booking are deleted when they are no longer needed to reply to you.

5. Your rights

You can request access to, rectification, erasure or portability of your data, restriction of processing, or object to it, under the GDPR. Just email us.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD):

cnpd.pt

6. Cookies

This website does not use advertising or analytics cookies. We only use what is technically necessary for the site to work. The digital guide stores a few preferences on your phone, such as the chosen language.

To display fonts and maps, the site loads resources from Google Fonts, jsDelivr and OpenStreetMap, which receive your device's IP address. Payment opens on Stripe's secure page, which uses its own cookies to prevent fraud.