Privacy and Cookie Policy

PRIVACY POLICY

1. Controller of Personal Data

This Privacy Policy governs the processing of personal data carried out by Grupo Morgado, property of Rodrigo Varanda, VAT number 233166181, with registered office at Urbanização Quinta do Morgado, 8800-209 Tavira, Portugal, in the context of the use of the website, the making of reservations, the provision of accommodation services, and any commercial or operational interactions with clients, users, or third parties.

Grupo Morgado is committed to ensuring the protection, confidentiality, integrity, and security of personal data, in compliance with Regulation (EU) 2016/679 (GDPR) and applicable legislation.

2. Data Controller

The data controller is:

  • Rodrigo Varanda
  • VAT: 233166181
  • Address: Urbanização Quinta do Morgado, 8800-209 Tavira, Portugal

 

Within the scope of its activity, Grupo Morgado may engage subcontractors to support service provision, ensuring that they act under documented instructions and provide adequate data protection guarantees.

3. Definition of Personal Data

Personal data means any information, of any nature and regardless of its format, relating to an identified or identifiable natural person, including direct or indirect identifiers.

4. Personal Data Processed

Grupo Morgado may process the following categories of data:

4.1 Identification Data

  • Full name
  • Tax identification number
  • Identification document (when legally required)

4.2 Contact Data

  • Email address
  • Telephone number
  • Address

4.3 Contractual and Booking Data

  • Stay dates
  • Number of guests
  • Stated preferences
  • Booking history
  • Communication related to the stay

 

 

4.4 Financial Data

  • Billing details
  • Payment-related information
  • Transaction records

4.5 Communication Data

  • Emails sent and received
  • Call records
  • Messages and requests

4.6 Technical and Browsing Data

  • IP address
  • Device type
  • Operating system
  • Browser
  • Website access data
  • Pages visited and interactions

5. Methods of Data Collection

Personal data may be collected through:

  • Forms available on the website
  • Email communications
  • Telephone contacts
  • Booking platforms
  • In-person communications
  • Commercial or operational interactions
  • Website usage and navigation

6. Purposes of Processing

  • Management, confirmation, and execution of bookings
  • Provision of accommodation services
  • Communication before, during, and after the stay
  • Compliance with legal and tax obligations
  • Billing and accounting
  • Administrative and operational management
  • Fraud prevention and security
  • Continuous service improvement
  • Complaint handling
  • Sending commercial and promotional communications

7. Legal Basis for Processing

Personal data is processed based on:

  • Performance of a contract or pre-contractual measures
  • Compliance with legal obligations
    Legitimate interests of the controller, namely in business management, security, and promotion of similar services
  • Consent of the data subject, where legally required

8. Data of Minors

We do not intentionally collect data from minors under 18 years old. Should this occur, the data will be deleted immediately.

9. Commercial Communications and Marketing

Contact data provided in the context of reservations, inquiries, or interactions may be used to send commercial, promotional, and informational communications related to Grupo Morgado services.


These communications may include:

  • Promotional campaigns
  • Offers and discounts
  • News and updates
  • Service-related content

Such communications are based on:

  • Existing contractual relationship
  • Legitimate interest
  • Or consent of the data subject, where applicable


The data subject may object at any time, easily, free of charge, and without justification.

10. Data Sharing

Personal data may be shared with third parties when necessary, namely:

  • Public authorities and regulatory bodies
  • Tax authorities
  • Technology service providers
  • Booking platforms
  • Payment processing entities
  • Administrative, accounting, or legal service providers

Data sharing will always be limited to what is strictly necessary and subject to confidentiality obligations.

11. Profiling and Behavioral Analysis

Personal data may be used for statistical analysis, segmentation, and service improvement, including adapting communications and offers to usage profiles.

These operations do not produce significant legal effects nor involve solely automated decision-making with relevant impact.

12. Data Retention Periods

PURPOSE PERIOD
Bookings / Invoicing
10 years
Marketing / Newsletter
Until consent is withdrawn
Recruitment
1 year after the process is closed
Contacts
Until the request is resolved

13. Data Security

Grupo Morgado implements appropriate technical and organizational measures to protect personal data against:

  • Unauthorized access
  • Loss or destruction
  • Alteration
  • Improper disclosure

Despite these measures, no data transmission is entirely secure, and all reasonable efforts are made to minimize risks.

14. International Transfers

Transfers outside the EU/EEE will only take place to countries with adequate data protection safeguards (Articles 45 and following of the GDPR).

15. Data Subject Rights

Under applicable law, the data subject has the right to:

  • Access their data
  • Rectify inaccurate data
  • Erase data
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent

16. Exercise of Rights

Rights may be exercised by submitting a request to the data controller, and proof of identity may be required.

17. Complaints

The data subject may lodge a complaint with the Portuguese Data Protection Authority (CNPD).

18. Staff Protection

For security, privacy, and data protection reasons, staff identification is limited to first name and/or function.
The collection, disclosure, or misuse of staff personal data — including full names, images, contacts, or recordings — outside the necessary context of service provision or legal obligations is strictly prohibited.

19. Amendments

This policy may be updated at any time and becomes effective upon publication.

Cookies Policy

What are cookies?

Small text files stored on your device that improve website navigation and performance.

Types of Cookies

  • Essentials — website functionality and secure areas.
  • Analytical — performance measurement.
  • Functional — user preferences.
  • Advertising — content and ad personalization.

Can be session(temporary) or permanent.

Consentment

Cookies not essencial are only installed with previous consentment through the cookie banner. Preferences can be changed at any time.

How to Turn Off

Browser Settings: Chrome · Edge · Firefox · Safari.

CONTACTS

Grupo Morgado – Tavira

Urbanização Quinta do Morgado, 8800-209 Tavira, Portugal

Phone: +351 933 727 995

Website: www.grupomorgado.pt

Email: geral@grupomorgado.pt

Owner: Rodrigo Varanda (VAT: 233166181)