Privacy Policy

Data controller: Refúgiopalaciano, Turismo Rural, Lda., taxpayer no. 515 943 134, Rua Conde Vilar Seco, nº 4, 3520-225 Vilar Seco, Nelas, Portugal. Privacy contact: info@vilarseco.com.

Bookings, important note: the booking engine is operated by Heytravel. When you click "Book", you are redirected to Heytravel's site, which collects and processes your booking data as an independent data controller. Please consult Heytravel's privacy policy on their website.

Data collected directly on this site: only data voluntarily provided through the contact form (name, email and message) and technical data related to cookies (see Cookie Policy). Form submissions are processed on the basis of consent and our legitimate interest in answering you.

Purposes: to respond to enquiries, manage commercial contacts and comply with legal obligations. Data is not used for marketing without prior consent.

Retention: contact form data is kept only for the time strictly necessary to handle the request and for up to 24 months, unless legal obligations require a longer period.

Processors and transfers: the site is hosted by cloud providers that may involve transfers outside the EEA, always under adequate safeguards (European Commission standard contractual clauses).

Your rights: you may access, rectify, erase, restrict, object to processing and port your data, and withdraw consent at any time without affecting prior lawfulness. To exercise these rights contact info@vilarseco.com.

You also have the right to lodge a complaint with the competent supervisory authority, Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

We are not required to appoint a Data Protection Officer (DPO) as we do not meet the criteria of art. 37 GDPR.