Privacy Policy
Last updated: 2026-04-06
1. Data Controller
Villa Solria
Controller: Bruno Carrulo
Address: Rua do Junco 3.5B, 8800-591 Tavira, Portugal
Email: bruno@kontrolsat.com
Phone: +351 912 345 678
Villa Solria is committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and applicable Portuguese legislation (Law No. 58/2019).
2. Personal Data Collected
We collect the following personal data through our booking and contact forms:
- Full name
- Email address
- Phone number
- Intended stay dates
- Number of guests
- Messages and specific requests
We may also collect technical data automatically (IP address, browser type, pages visited) through analytics cookies, subject to your consent.
3. Purposes of Processing
- Booking management: Processing and confirming your reservation request
- Communication: Responding to inquiries and providing stay details
- Legal obligations: Compliance with tax and guest registration requirements
- Marketing: Promotional communications, only with your express consent
- Service improvement: Anonymized statistical analysis of website usage
4. Legal Basis
- Consent (Art. 6(1)(a) GDPR): For analytics cookies, marketing cookies, and promotional communications
- Contract performance (Art. 6(1)(b) GDPR): For processing bookings and managing stays
- Legal obligation (Art. 6(1)(c) GDPR): For tax and registration compliance
- Legitimate interest (Art. 6(1)(f) GDPR): For improving our website and services
5. Cookies
Necessary Cookies
Essential for website operation. Include session cookies, language preferences, and cookie consent. No consent required.
Analytics Cookies (Google Analytics 4)
Used to understand how visitors interact with the website. Only activated with your consent.
Marketing Cookies (Meta Pixel)
Used to deliver relevant advertising on social media platforms. Only activated with your consent.
You can manage your cookie preferences at any time by clicking "Manage cookies" in the website footer.
6. Data Sharing
Your personal data may be shared with:
- Portuguese Immigration and Borders Service (SEF) — mandatory guest registration
- Tax Authority — tax obligations
- Google (Analytics) — only with consent
- Meta (Pixel) — only with consent
We do not sell or share your data with third parties for commercial purposes.
7. Data Retention
- Booking data: 5 years after stay (tax obligation)
- Contact data: Up to 2 years after last contact
- Cookie data: Per cookie duration (maximum 13 months for analytics)
8. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
To exercise your rights, contact us at: bruno@kontrolsat.com
You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) — www.cnpd.pt
9. Security
We implement appropriate technical and organizational measures to protect your personal data, including SSL/TLS encryption for all communications.
10. Changes to this Policy
We reserve the right to update this privacy policy. Significant changes will be communicated through the website.