Your privacy matters to us. This policy explains what personal data we collect, for what purposes, and your rights under the GDPR.
The data controller is [ENTITY], tax no. [NIF], registered at [REGISTERED ADDRESS], reachable at geral@victoriaproject-porto.com.
Contact form: your name, email and message.
Browsing data: technical information and cookies, as described in the Cookie Policy.
We process contact-form data to respond to your request and pre-contractual steps (Art. 6(1)(b) GDPR).
Third-party content and non-essential cookies rely on your consent (Art. 6(1)(a)).
We use processors acting on our behalf: Supabase (content hosting), Resend (email delivery), Lodgify (booking engine and payment), Vercel (site hosting) and Google Maps (maps).
We do not sell personal data.
Some providers may process data outside the European Economic Area, under Standard Contractual Clauses approved by the European Commission or adequacy decisions.
We keep contact-form data for [RETENTION PERIOD] or as long as needed to handle your request and meet legal obligations.
You have the right of access, rectification, erasure, restriction, portability and objection. To exercise them, contact geral@victoriaproject-porto.com.
You may also lodge a complaint with the Portuguese supervisory authority, CNPD (www.cnpd.pt).
Bookings and payments are processed by Lodgify; that processing is also governed by Lodgify's privacy policy.
We may update this policy. The current version is always available on this page.
