Privacy Policy

How we handle your personal data

Last updated: 4 May 2026

1. Data Controller

The entity responsible for processing your personal data ("data controller") is:

Montanha Vaporosa, Lda.
NIPC / NIF: 518444625
Registered office: Sítio da Caliças, 8600-304 Lagos, Portugal
Establishment: Rua José Estevão 2, 8300-165 Silves, Portugal
Email: reservas@ocais-silves.pt
Phone: +351 916 647 041

This Policy is provided in compliance with Regulation (EU) 2016/679 (GDPR) and Portuguese Law no. 58/2019 of 8 August.

2. What data we collect

We only collect data that is strictly necessary for the purposes described below.

  • Reservation form: name, email, phone number, date, time, party size and any notes you provide.
  • Contact form: name, email, subject and the content of your message.
  • Newsletter / WhatsApp list: name, email and (optionally) phone number, plus the channels you consent to.
  • Technical data: anonymised, aggregated usage statistics (page views, performance) provided by Vercel Analytics and Vercel Speed Insights. These services do not use cookies and do not track individuals.
  • Server logs: IP address and basic request data may be retained briefly for security and error monitoring.

3. Purposes and legal basis

  • Managing reservations and answering enquiries — performance of a contract / pre-contractual measures (Art. 6(1)(b) GDPR).
  • Sending the newsletter or WhatsApp updates — your explicit consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
  • Site security, prevention of abuse and bookkeeping — our legitimate interest and legal obligations (Art. 6(1)(c) and (f) GDPR).

4. Recipients and processors

We do not sell your data. We share it only with service providers acting on our behalf:

  • Hosting and analytics: Vercel Inc.
  • Email and operational tooling used to manage reservations and the mailing list.
  • Payment processors (in person, at the establishment, when applicable).
  • Public authorities, when legally required.

Some providers may be located outside the European Economic Area. Where that is the case, transfers are based on adequacy decisions or the European Commission's Standard Contractual Clauses.

5. Retention

  • Reservation data: kept for the period strictly needed to provide the service and for legal/accounting obligations (up to 10 years for invoicing data, when applicable).
  • Contact form messages: up to 24 months after the last contact.
  • Newsletter data: until you unsubscribe.
  • Server and security logs: a few weeks at most.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, the right to data portability, and the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at reservas@ocais-silves.pt. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

7. Cookies

This website does not set advertising or tracking cookies. We use only strictly necessary functional storage and the privacy-friendly Vercel Analytics / Speed Insights services, which do not rely on cookies and do not identify individual visitors.

8. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration. Connections to this site are encrypted via HTTPS.

9. Changes

We may update this Policy to reflect legal or operational changes. The current version is always available on this page, with the date of the latest update.