Template — Privacy policy for Caravel Sites customer websites
Privacy policy template for Caravel Sites customer websites, with the information required by Article 13 GDPR. The fields in braces, such as {nome_empresa} (business name), {nif} (tax number), {morada} (address), {email} and {retencao_dias} (retention days), are filled in with each customer's details. Parts marked only on websites with bookings apply only to websites with a booking form. This template is under review: points marked under review are still being confirmed.
Information required by Article 13 GDPR (Regulation (EU) 2016/679 — https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679). Plain-language reference: Article 29 Working Party Guidelines on transparency under Regulation 2016/679 (WP260 rev.01, endorsed by the EDPB on 25 May 2018): https://www.edpb.europa.eu/our-work-tools/our-documents/article-29-working-party-guidelines-transparency-under-regulation_en
Privacy policy
Last updated: {data_atualizacao}
Who is the controller
The controller of your personal data on this website is {nome_empresa}, tax number {nif}, address {morada}. For any question about your data, write to {email}.
What data we process
We only process the data you send us through this website's forms:
- Contact form: name, email, telephone (if you provide it) and your message.
- Booking request: name, email, telephone, date, time, number of people and your message. only on websites with bookings
We also store the date and time of submission. Please do not include in your message data we do not need, especially health data. If you want to mention, for example, an allergy or an accessibility need, share only what is necessary for us to welcome you properly.
Why we use the data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your contact request | Steps taken at your request prior to entering into a contract (Art. 6(1)(b)) or, if the request is unrelated to a contract, our legitimate interest in answering those who contact us (Art. 6(1)(f)) |
| Managing your booking request (confirming, changing, cancelling) only on websites with bookings | Pre-contractual steps and performance of the contract (Art. 6(1)(b)) |
| Keeping the minimum necessary to evidence what was requested and answered and to keep the site secure | Legitimate interest (Art. 6(1)(f)) |
We do not use your data for advertising or profiling, and we do not sell it. There is no automated decision-making about you.
Your name and email (or telephone) are necessary for us to reply; without them we cannot handle your request.
How long we keep it
Messages sent through the forms are automatically deleted {retencao_dias} days after receipt. Backups are cleared at the end of their cycle, up to under review weeks later. If your message leads to a contract or an invoice, the necessary data is kept for the period required by law.
Who receives the data
- Jardim Idílico Unipessoal Lda (Caravel Suite), Póvoa de Varzim, Portugal, which hosts and maintains this website and stores the messages on our behalf as a processor (Art. 28 GDPR), under a data processing agreement.
- Caravel Suite's hosting and email providers, also as processors, with servers in the European Union. under review
- Public authorities, only where required by law.
Cookies
This website does not use third-party cookies or trackers and does not use analytics tools that identify visitors. under review
Your rights
You may ask us at any time, free of charge, for access to your data, its rectification, erasure, restriction of processing, portability, and to object to processing based on legitimate interest (Arts. 15–21 GDPR). Write to {email}. We reply within one month (Art. 12(3) GDPR).
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt — or with the supervisory authority of the country where you live or work (Art. 77 GDPR).
Changes
If we change this policy, we will publish the new version here with the update date.