Villa San Antonio: Privacy Policy
Villa San Antonio is committed to protecting your privacy and ensuring that your personal information is handled safely, securely, and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, make an enquiry, or communicate with us.1. Information We Collect
We may collect the following personal information:A. Information You Provide Directly
- Name
- Email address
- Phone number
- Message or enquiry details
- Booking or event-related information
- Preferences and special requests
- Dietary requirements (optional and only for service coordination)
B. Information Collected Automatically
When you browse our website, we may collect:- IP address
- Browser type and version
- Device information
- Pages visited
- Time spent on the site
- Cookies and tracking data
C. Cookies
We use cookies to:- Improve website functionality
- Analyse website performance
- Understand visitor behaviour
- Support marketing and retargeting campaigns
2. How We Use Your Information
We may use your information for the following purposes:- Responding to enquiries or contact form submissions
- Providing information about availability, pricing, or event options
- Managing bookings and communication
- Coordinating services such as catering or breakfast offerings
- Improving our website and user experience
- Marketing and promotional communication (only with explicit consent)
- Ensuring website security and performance
- Complying with legal obligations
3. Legal Basis for Processing (GDPR)
We process your information under the following legal bases:- Consent – when you submit a contact form or opt in to marketing
- Contract – when handling booking requests or service coordination
- Legitimate Interests – for website analytics and improving our services
- Legal Obligation – where applicable under EU/Portuguese law
4. How We Store and Protect Your Data
We use technical and organisational measures to protect your data, including:- Encrypted servers
- Secure access controls
- Limited access to authorised personnel
- Regular monitoring and website security practices
5. Sharing Your Information
We do not sell, rent, or trade your personal information. We may share your information only with:- Trusted service providers (e.g., catering, wellness practitioners, transport providers)
- IT and website support teams
- Legal or regulatory authorities if required by law
6. International Data Transfers
If your information is transferred outside the European Economic Area (EEA), we ensure it is protected through:- Standard Contractual Clauses (SCCs)
- GDPR-compliant safeguards
7. Your Rights Under GDPR
You have the right to:- Access your personal information
- Request corrections or updates
- Request deletion (“right to be forgotten”)
- Restrict or object to processing
- Withdraw consent at any time
- Request data portability
- Lodge a complaint with a data protection authority