Privacy Policy

Last updated: 22 July 2026

Villa Aurora respects the privacy of its guests and website users and processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese legislation.

1. Data Controller

Lara Vicente de Almeida
Tax Identification Number (NIF): 270 218 645
Rua das Pimenteiras, Lote C19
8500-135 Mexilhoeira Grande, Portimão, Portugal
Local Accommodation Registration Number: 167132/AL
Email: [email protected]

2. Personal Data We Process

We may process:

Names, contact details and identification data;
Stay dates, number of guests and preferences;
Information required for reservations, payments, invoicing and compliance with legal obligations;
Messages sent through forms, email or WhatsApp;
Technical browsing data, such as IP address, device, browser and pages visited.

3. Purposes and Legal Bases

Personal data is processed to:

Respond to enquiries and reservation requests;
Manage reservations, payments and stays;
Issue invoices and comply with legal obligations;
Ensure the security of the property;
Analyse and improve the website;
Measure advertising campaigns.

Depending on the circumstances, processing is based on the performance of a contract or pre-contractual steps, compliance with legal obligations, legitimate interests or consent.

4. Service Providers and Recipients

Personal data may be processed or received by:

Lodgify, for website and reservation management;
Stripe, for secure payment processing;
Google, through Google Analytics, Google Ads and reCAPTCHA;
Microsoft, through Microsoft Clarity;
Meta/WhatsApp, when a user chooses to communicate through WhatsApp;
Accounting, IT and other service providers necessary for the stay;
Public authorities, where required by law.

Villa Aurora does not sell personal data.

5. Cookies and International Transfers

Google Analytics, Microsoft Clarity and Google Ads should only be used after consent has been given for non-essential cookies.

Some service providers may process data outside the European Economic Area. In such cases, the safeguards required by law are applied, including adequacy decisions or Standard Contractual Clauses.

6. Data Retention

Personal data is retained only for as long as necessary:

Enquiries that do not result in a reservation: up to 12 months;
Reservation and invoicing data: for the applicable statutory retention periods;
Analytics and advertising data: in accordance with the user’s consent and the settings of the relevant platforms;
Data required for complaints or legal proceedings: until their resolution and the expiry of the applicable statutory limitation periods.

7. Video Surveillance

The exterior entrance to Villa Aurora is monitored by clearly signposted video surveillance, used exclusively for the protection of people and property. There are no cameras inside the accommodation.

8. Your Rights

Data subjects may request access to, rectification or erasure of their personal data, restriction of processing, data portability or object to processing. They may also withdraw consent where processing is based on consent.

Requests should be sent to [email protected].

Data subjects may also lodge a complaint with the Portuguese Data Protection Authority — Comissão Nacional de Proteção de Dados (CNPD).

9. Changes to This Policy

This Privacy Policy may be updated whenever necessary. The current version will remain available on this website.