Privacy
Privacy & Cookies
Last updated: 7 July 2026
Your privacy matters to us as much as your rest. This policy explains, plainly, which personal data we collect when you visit our website or write to us, why we collect it, and the rights the General Data Protection Regulation (GDPR) guarantees you.
Who is responsible for your data
Convento de Cabanas — Actividades Turísticas e Serviços, Unipessoal, Lda, registered under NIPC (tax no.) 516237799, with registered office at Caminho do Barroso 63, 4900-012 Afife, Viana do Castelo, Portugal, is the data controller.
For any question about your personal data, write to [email protected] or call +351 939 951 525.
What data we collect
Enquiry form: name, email address, telephone (optional) and the content of your message.
Reservations and stays: the identification and contact details needed to manage your booking, invoicing and legal guest records.
Newsletter (only if you subscribe): name and email address.
Technical data: our servers keep minimal security logs (IP address, date and time). We do not profile visitors.
Why we use it, and on what legal basis
To answer your enquiries and prepare proposals — steps taken at your request prior to a contract (art. 6(1)(b) GDPR).
To manage your reservation, stay and invoicing — performance of a contract and legal obligations (art. 6(1)(b) and (c)).
To send our newsletter — only with your consent, which you may withdraw at any time (art. 6(1)(a)).
To keep our website and services secure and improve them — our legitimate interest (art. 6(1)(f)).
Enquiries received by email may be processed with the help of AI tools to prepare a draft reply. A member of our team always reviews and decides before anything is sent — no decision about you is ever automated.
Who we share it with
Only with the service providers strictly needed to run our website, email and reservations (hosting and booking-engine partners), bound by data-processing agreements. When you complete a booking through our booking partner, its own privacy policy also applies.
We never sell your data. If any provider processes data outside the European Economic Area, we require adequate safeguards under the GDPR.
How long we keep it
Enquiries: up to two years after our last contact, so we can follow up on your plans.
Reservation and invoicing records: for the periods required by Portuguese law.
Newsletter: until you unsubscribe — every email includes a link to do so.
Your rights
You may at any time request access to your data, its correction or erasure, the restriction of or objection to its processing, and its portability, and you may withdraw any consent given — simply write to [email protected].
You also have the right to lodge a complaint with the Portuguese supervisory authority, the CNPD — Comissão Nacional de Proteção de Dados (www.cnpd.pt).
How we protect it
Your data is stored on servers in the European Union, protected by encryption in transit, access controls and regular backups. Access is limited to the team members who need it to serve you.
Changes to this policy
We will update this page whenever our practices change, and revise the date at the top. Significant changes will be highlighted on the site.
What cookies are
Cookies are small text files that a website places on your device when you visit it. They allow the site to remember your actions and preferences for a period of time, so you do not have to set them again on every page.
Why we use them
We use cookies to enhance the experience of visiting our website: to keep the site working as it should, to remember your choices, and to understand in general terms how our pages are used, so that we may improve them.
The cookies we use
Session cookies allow you to navigate the site efficiently; they last only for the duration of your visit and disappear when you close the browser.
Functionality cookies remember information you have already given us — such as entries in a form or your language preference — so you are not asked for it twice.
Analytics cookies help us see, in aggregate and never individually, which pages are most useful to our guests.
Third-party tools
This website uses third-party analytics tools, such as Google Analytics, which may place their own cookies on your device. Those cookies are governed by the privacy policies of the providers concerned.
Managing cookies
You may accept, refuse or delete cookies at any time through your browser settings. Please note that refusing certain cookies may affect how parts of this website work.
The help pages of the most common browsers explain how:
Your consent
By continuing to use this website, you consent to this cookies policy.