General Data Protection Regulation (GDPR)
1. Introduction
Protecting your privacy is important to us. This Personal Data Protection Policy informs you about how we collect, use, store and protect the personal data of our guests and potential guests, in accordance with the General Data Protection Regulation (GDPR) and applicable national legislation.
2. Identification of the controller
The controller of personal data is:
Sobrado Countryside House
Sobrado street 156 Barros – Vila Verde
E-mail: takeyourtime.site@gmail.com
3. Personal data collected
We collect the following types of personal data:
Identification data: First name, last name, date of birth, nationality;
Contact details: Address, email, telephone number;
Booking data: Check-in and check-out dates, accommodation preferences;
Financial data: Payment information (credit/debit card number, expiration date, security code) to process reservations and payments;
Identity documents: Copies of documents when duly authorized (citizen card, passport) required for check-in, as required by local legislation;
Browsing data: Information about how you use our website, cookies, IP address.
4. Purposes of data processing
4.1. Reservation management: Processing and confirming reservations and communicating details of the stay;
4.2. Check-in and Check-out: Procedures associated with guest registration and identity verification.
3. Legal compliance:
3.1. Compliance with legal obligations, including reporting to the Tax Authority and procedures for complying with tourism regulations.
4. Guest relationship management:
4.1. Responding to requests for information, complaints and suggestions;
4.2. Personalizing the guest experience based on preferences.
5. Marketing and Promotions:
5.1 Sending newsletters and information about promotions, if you have given your consent.
6. Legal Basis for Processing
6.1. Execution of a Contract: To manage the reservation and provide the accommodation service;
6.2. Compliance with a legal obligation: To comply with tax obligations;
6.3. Consent: For marketing purposes and sending promotional communications.
7. Data retention
7.1. Personal data will be retained for the period necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal obligations, namely:
7.1.1. Identification and reservation data: the data will be retained only for the minimum period necessary to pursue the purposes that motivated its collection or subsequent processing, under the terms defined by law.
7.1.2. Marketing data: as long as the guest maintains consent.
8. Data subject rights
8.1. Right of access: Right to request a copy of your personal data;
8.2. Right to rectification: Right to request the correction of incorrect or incomplete personal data;
8.3. Right to restriction of processing: Right to request the restriction of the processing of your data in certain circumstances;
8.4. Right to object: Right to object to the processing of your personal data, where applicable;
6.5. Right to portability: Right to request that personal data be transmitted to another data controller;
8.6. Right to be forgotten: Right to request the deletion of your personal data, when they are no longer necessary for the purpose for which they were collected.
8.7. Requests should be sent to takeyourtime.site@gmail.com
9. Data Security
9.1. As our website is hosted on the Wix platform, Wix implements and maintains technical and organizational security measures to protect our website data and assets. The Wix Security Team leads the facilitation and development of procedures, processes, and controls that govern the security and integrity of Wix and our website.
9.2. An overview of the key measures Wix uses to keep our website and users safe can be found on the support page.
For more information on Wix’s security and compliance policies, please see the Wix Security Whitepaper.
10. Sharing data with third parties
10.1. Our website is hosted on the Wix.com platform. Wix.com provides us with an online platform that allows us to sell products and/or services to our customers. Your information may be stored in Wix.com’s databases. Wix.com stores your information on secure servers behind a firewall.
10.2. All direct payment records used by Wix.com and used by our website comply with the standards set by PCI-DSS, as managed by the PCI Security Standards Council, which is a joint effort of credit card companies such as Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our website and its service providers.
11. Cookies and similar technologies
11.1. Our website may use cookies and similar technologies. Cookies are small files that are stored on your device to help improve your browsing experience. For more information about the cookies we use, see our Cookie Policy.
12. Changes to the data protection policy
12.1. We reserve the right to change this data protection policy at any time. Any changes will be published on this page. We recommend that you regularly review this policy to stay up to date with any updates.
13. Contact
13.1. For questions relating to this data protection policy, to exercise your rights or for any questions about how we process your personal data, please contact us via the following email address takeyourtime.site@gmail.com
Effective Date: May 2025