PRIVACY AND DATA PROTECTION POLICY
Last updated: July 2026
1. Introduction
MINHO FERRAGE TURISMO UNIPESSOAL LDA, the entity that operates Quinta dos Ferrage (hereinafter “Quinta dos Ferrage”), with registered office at Rua dos Ferrage, n.º 5, 4720-126 Ferreiros, Amares, is committed to protecting the privacy and personal data of the users of its website and of all those who interact with it, ensuring full compliance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and with Law No. 58/2019 of 8 August.
This Privacy Policy clearly explains how users’ personal data is collected, used, stored and protected.
2. Data controller
The data controller is MINHO FERRAGE TURISMO UNIPESSOAL LDA (NIPC 519 004 906), with address at Rua dos Ferrage, n.º 5, 4720-126 Ferreiros, Amares. It can be contacted by email at info@ferrage.pt or by telephone at +351 915 561 352.
3. Personal data collected
-
Identification data, such as full name, address, telephone number and email;
-
Identification data required by law for the reporting of guests, such as the number and type of identification document (citizen card, passport or equivalent), nationality, date of birth and dates of arrival and departure;
-
Payment data, such as IBAN and credit/debit card information (processed securely through Wix Payments and PayPal, without direct access by Quinta dos Ferrage);
-
Website usage data, such as IP address, cookies, browsing history and preferences;
-
Data provided in forms, such as bookings, purchase of gift vouchers, event registrations or creation of a member account.
4. Purposes of processing
The personal data collected is used exclusively for the following purposes:
-
Management of bookings and accommodation;
-
Sale and issuance of gift vouchers;
-
Management of event registrations;
-
Management of the member area and communication with registered users;
-
Sending information and communications related to Quinta dos Ferrage, where the user has given consent, which may be withdrawn at any time;
-
Reporting of guests to the competent authorities for foreign nationals and borders, by means of accommodation reporting forms, in accordance with applicable law;
-
Compliance with other applicable legal and tax obligations.
5. Legal grounds
The processing of personal data is based on:
-
The performance of a contract or pre-contractual steps at the request of the data subject;
-
Compliance with legal obligations to which the controller is subject;
-
The consent of the data subject;
-
The legitimate interest of Quinta dos Ferrage, in particular to improve its services
6. Data retention
Personal data is kept only for the period strictly necessary for the purposes for which it was collected and for the applicable legal periods, in particular in tax, accounting and employment matters. By way of guidance:
-
Tax and accounting data is kept for 10 years, in accordance with the legislation in force;
-
Data relating to the accommodation reporting forms is kept for the period legally required for that reporting;
-
Booking and member account data is kept for as long as the relationship with the user continues and during the applicable limitation periods.
7. Data of minors
Whenever data of minors is collected in the context of a booking or registration, its processing is carried out under the responsibility of the adult holder of the booking, who declares to be authorised to provide such data.
8. Sharing of data with third parties
Quinta dos Ferrage only shares personal data with entities strictly necessary for the performance of the contracted services or for compliance with legal obligations, in particular:
-
Competent public authorities, namely for foreign nationals and borders, as well as tax authorities;
-
Wix.com, Ltd. (hosting and management of the online platform);
-
Wix Payments and PayPal (payment processing);
-
Providers of technical support or accounting services, bound by confidentiality.
Under no circumstances is data sold or transferred to third parties for commercial purposes.
9. International transfers
There may be transfers of personal data outside the European Economic Area (EEA) through platforms such as Wix, always ensuring that such entities offer adequate protection guarantees, namely by means of Standard Contractual Clauses approved by the European Commission.
10. Rights of data subjects
The data subject may, at any time, exercise the following rights:
-
Access to their personal data;
-
Rectification of inaccurate or incomplete data;
-
Erasure of data (“right to be forgotten”);
-
Restriction of or objection to processing;
-
Data portability;
-
Withdrawal of consent (where applicable).
To exercise these rights, the data subject should contact Quinta dos Ferrage by email at info@ferrage.pt.
The data subject also has the right to lodge a complaint with the Portuguese Data Protection Authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
11. Data security
Quinta dos Ferrage adopts appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorised access, including encryption, firewalls and access control.
12. Cookies
The use of cookies and similar technologies is governed by the Cookie Policy of Quinta dos Ferrage, available in a dedicated section of the website.
13. Changes to this Privacy Policy
Quinta dos Ferrage reserves the right to change or update this Privacy Policy at any time. Changes will be published on the website with an indication of the update date.