Privacy and Data Protection Policy

Privacy and Data Protection Policy

– This Privacy Policy describes how we handle personal information collected, used, and shared when a visitor or customers accesses our website. –

CASA VELHA – Rural tourism unit, RNET nº 4653 – processes your personal information to ensure compliance with the rules of the new GDPR (General Data Protection Regulation), which is mandatory as of May 25, 2018.

Our identification and contact details are available on this website, which you can use to make a reservation or ask your questions. This identification data will also appear on invoices and other billing and payment documents that we send/deliver.

How does GDPR work for you?
  • Your personal data has added protection;
  • You have control over how you prefer to be contacted, by email or phone for example;
  • You have the right to change your mind and update your preferences at any time;
  • You have control and easy access to the personal information we keep about you if you want to consult it, correct it, change it or request that it be deleted;
  • If you provide us with information from third parties to make a reservation, it is your responsibility to ensure that the person or persons from whom you provide personal data are aware that you have done so. And who accept the data protection policy of CASA VELHA, RNET nº 4653, as described herein.

According to this new set of rules, we can only use your personal data for one or more of the following reasons:

  • When giving consent;
  • To comply with a contract, we have with you;
  • When it is our legal duty;
  • When it is in our legitimate interest (Our legitimate interest is when we have a business or commercial reason to use your information. If we act in accordance with our legitimate interest, we will inform you of what it is.)

Supervisory Authority: If a data subject considers his or her rights affected, he/she may also appeal to the competent supervisory authority of the Member State concerned. More information at:

The information we collect.

services, such as offering a simpler and easier check-in. This includes information you provide to us through our website, through social media channels, when you contact us by phone or email or when making a reservation through a third party (travel agent, booking website, etc.) through which we sell or advertise our products.

The main types of information we collect fall into the following categories:

  • The main types of information we collect fall into the following categories:

  • Registration data (name, postal address, e-mail address, location, mobile phone number or other);

  • Birth and gender data;

  • Identification document and nationality;

  • Business information (company name, address, e-mail address, telephone number, VAT number, other registration or identification number);

  • Customer service information, which may include comments or requests made online or through our staff;

  • Any other type of information you provide to us when making reservations;

  • Any other type of information, which includes those previously stated, that reaches us through online third parties or travel agents;

  • Questions posed and feedback forms;

  • Your credit or debit card details that you provide as a confirmation of your reservation or to make a payment for the reservation;

  • Personal information you provide about third parties.

How do we use your information?

We may use your information, as described above, for the purposes for which you have provided us and also for the following purposes:

  • Provide you with our services;
  • Create your profile on our hotel management system to manage your reservation;
  • Check your identity and the reliability of your orders and purchases;
  • Communicate with you and respond to any request/question you have, or confirm reservations, changes and cancellations;
  • Provide or allow you to participate in our services;
  • Keep a record of your preferences and habits when you visit us;
  • Communicate with you regarding matters relating to your arrival, stay, departure and payment;
  • Conduct statistical analysis of our website;
  • Analyse your interactions with our website;
  • Forecast our billing and occupancy.

Email Marketing: With your permission, we may send you emails about CASA VELHA, news and other updates.

How long do we store your personal data?

Your personal data will be stored as long as it is necessary to fulfil the purpose for which it was collected, for business requirements or for legal needs, in accordance with the applicable legislation.

The personal information of customers / potential customers/business partners provided by you is stored for the time necessary for the management of reservations made, business agreements and for any provision of accommodation services requested.

Once the data management is completed, all information that does not meet legal objectives will be retained for a maximum of fifty (50) months.

The retention of data will allow us to improve the service for repeat visitors and help to resolve any questions or discussions that may arise regarding our services.

How do you get my consent?

When you provide us with personal information to complete a transaction, verify your credit card, place an order, we imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, such as marketing, we will either ask you directly for your expressed consent or provide you with an opportunity to say no.

How do i withdraw my consent?

After you opt-in, if you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at [email protected] or mailing us at: CASA VELHA, Quinta do Maio, Escudeiros. Sertã, Portugal 6100-284.

Do you disclose my information?

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.


Our online payments are hosted by WooCOMMERCE. They provide us with an online e-commerce platform that allows us to sell our services to you.

You can read more about how WooCOMMERCE uses your Personal Information here,


Our website may contain links to external websites and our team may refer you to third-party services, operated by third parties over which we have no control.

In general, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

This Privacy and Data Protection Policy applies only to information collected by us. For this reason, we ask our visitors to be aware that when they leave our website or go to another business, they inform themselves about the applicable privacy and data protection policy. Any access to this type of website or business will be used at your own risk. We are not responsible for the privacy, content or security policies of any third-party website or business indicated.

How do we protect your data?

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

If you are a European resident, you have the right to access the personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Who hHas access to your personal data?

Your personal data is confidential, only personnel authorized by us will be able to access your data, with the exception of its possible transmission to government entities or inspection authorities in accordance with the applicable legislation.

All personnel that have access to your personal information are under a strict obligation of confidentiality.


This site uses cookies. Continuing to browse you are automatically authorizing them. For more information about cookies, and how to disable them, visit:

What are cookies?

A cookie is a set of information stored on the computers of users who visit certain web pages. Through cookies, internet sites can collect and store information about the activity and equipment of each user on the web and, depending on the type of data they contain and the way they are sent to the web browser, they can be used to recognize users individually.

You can reconfigure your browser to refuse all cookies or indicate when a cookie is being sent. However, some websites may not function properly without cookies.

The customization of cookies allows the access of web service users with some predefined elements, established through a set of criteria on the user’s computer; may include criteria such as language preferences, type of browser used to access services, regional configuration from which the service is accessed, etc.

What kind of cookies are used on this site?
Technical cookies:

Technical cookies allow the user to browse a website, platform or web application and to use the different options or services that these provide, for example, to control web traffic and data transfers, access restricted parts of the website, register the elements used in certain forms, pay for purchases, subscriptions or events online, use security features and store the content of audio or video files shared through servers and social networks.

Analytical cookies:

They are used anonymously for the purpose of creating and analysing statistics, to improve the functioning of the website.


By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.


This privacy and data protection policy is regularly reviewed. Following any changes, the policy version will be uploaded to our website and the old version will be removed. Please check back often to check for updates.

The last update was carried out in March 2021.

Any Further Questions?

Any question regarding this Privacy Policy, please send us an email to [email protected] with the information in the subject of the email “Privacy Policy”.

Our entity has no obligation to specify a Data Protection Officer, but we will be available to comply with all legal rights.

Open chat
Necessita de mais informações?
Olá 👋
Como podemos ajudar?