Privacy Policy
Casa Cedo respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website, contact us, make a reservation, stay with us, purchase products, attend an event, or use our services.
Who is responsible for your personal data?
The data controller is:
Casa Cedo, Lda.
Rua de Cedofeita 334, Porto, Portugal
NIF 515689599
Email: house@casacedo.com
Casa Cedo is responsible for the personal data collected and processed in connection with our website, reservations, guest services, events, shop, communications and hospitality operations.
What personal data do we collect?
We may collect and process the following types of personal data:
Name, surname and contact details, including email address and telephone number.
Reservation details, including stay dates, room preferences, special requests, arrival information and payment status.
Billing and payment information, including invoice details and transaction records. We do not store full card details unless required and permitted through our payment providers.
Guest preferences, including breakfast preferences, dietary requirements, allergies, accessibility needs, concierge requests and any information you choose to share with us before or during your stay.
Identification information where required by law, including information necessary for guest registration and communication with the relevant authorities.
Communication records, including emails, messages, phone calls and enquiries.
Website usage information, including pages visited, browsing behaviour and cookie preferences.
Why do we use your personal data?
We use your personal data for the following purposes:
To respond to enquiries and manage communications with you.
To process and manage reservations, check in, check out, payments, deposits, cancellations and refunds.
To provide our hospitality services, including breakfast, concierge support, guest preferences, transfers, parking, restaurant bookings, private experiences and special requests.
To issue invoices and comply with accounting, tax and legal obligations.
To manage events, private bookings, workshops and house reservations.
To improve our services, website, guest experience and internal operations.
To send marketing communications, news, invitations or offers where you have given consent or where we are legally allowed to do so.
To protect the safety, security and integrity of Casa Cedo, our guests, staff, property and systems.
Legal basis for processing
Depending on the purpose, we process your personal data on one or more of the following legal bases:
Performance of a contract, when processing is necessary to manage your reservation, stay, purchase, event booking or service request.
Legal obligation, when we need to comply with tax, accounting, registration, reporting or other legal requirements.
Legitimate interest, when necessary for the normal operation of our business, service improvement, communication with guests, fraud prevention, security, or the management of claims, provided your rights do not override those interests.
Consent, where required, for example for certain marketing communications or non essential cookies.
Who do we share your data with?
We do not sell your personal data.
We may share your data only when necessary with trusted service providers and partners, including:
Booking engine and property management providers.
Payment processors and banking partners.
Accounting, tax, legal and insurance advisers.
Website hosting, analytics, email and communication providers.
Concierge partners, transfer providers, restaurants, guides, event partners or other suppliers, only where needed to fulfil your request.
Public authorities, where required by law.
All third parties are expected to process personal data securely and only for the purpose for which the data was shared.
International transfers
Some of our service providers may process data outside the European Economic Area. Where this happens, we aim to ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses or equivalent protection mechanisms required by applicable law.
How long do we keep your data?
We keep personal data only for as long as necessary for the purpose for which it was collected.
Reservation, billing and accounting information may be kept for the period required by Portuguese tax and accounting law.
Guest communication and preference information may be kept for a reasonable period to support future stays and improve service, unless you ask us to delete it and we are legally able to do so.
Marketing data is kept until you unsubscribe or withdraw your consent.
Website and cookie data is kept according to the duration of each cookie or tracking technology, as described in this policy or in the cookie banner.
Your rights
Under data protection law, you may have the right to:
Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data, where legally possible.
Request restriction of processing.
Object to certain types of processing.
Request data portability.
Withdraw consent at any time, where processing is based on consent.
Object to direct marketing at any time.
To exercise your rights, please contact us at [insert email].
You also have the right to lodge a complaint with the Portuguese Data Protection Authority, the Comissão Nacional de Proteção de Dados.
Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. Access to personal data is limited to those who need it for legitimate business or legal purposes.
Cookies Policy
What are cookies?
Cookies are small text files placed on your device when you visit a website. They help websites function properly, remember preferences, understand how visitors use the site and, where applicable, support marketing or advertising activity.
We may also use similar technologies, such as pixels, tags, local storage or analytics tools.
How do we use cookies?
Casa Cedo may use cookies for the following purposes:
Strictly necessary cookies, which are required for the website, booking engine, security functions and forms to work properly.
Preference cookies, which remember choices such as language, region or cookie settings.
Analytics cookies, which help us understand how visitors use the website and how we can improve it.
Marketing cookies, which may be used to measure campaigns or show relevant content, only where applicable and with consent.
Third party cookies
Some cookies may be provided by trusted third parties, such as:
Google Analytics or similar analytics providers.
Booking engine or payment technology providers.
Social media or advertising platforms, where these tools are active on the website.
These providers may process data according to their own privacy policies. Non essential cookies should only be activated after you have given consent through our cookie banner.
Managing cookies
When you first visit our website, you may be asked to accept, reject or manage non essential cookies.
You can change or withdraw your cookie consent at any time through the cookie settings on our website, where available. You can also block or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website or booking engine.
Marketing communications
We may send you updates, offers, invitations or news about Casa Cedo only where we have a valid legal basis to do so. You may unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly.
Updates to this policy
We may update this Privacy & Cookies Policy from time to time to reflect changes in our services, website, legal requirements or data processing practices.