Privacy Policy & Cookies

Last updated: 5 July 2026

1. Data controller

Sara Silveira da Bernarda, owner and operator of the "Casa das Mouriscas" local accommodation establishment (RNAL 120037/AL).

Tax number (NIF): 187343977 · Address: Rua do Machado, 1, 2200-697 Mouriscas, Abrantes · Email: casadasmouriscas@gmail.com · Phone: 926 989 702.

2. What data we collect

Through the availability request form: name, email, check-in and check-out dates, number of guests, and the message you write.

The site also stores a language preference in your browser (see section 11, Cookies).

3. Purposes of the processing

The personal data collected through the availability request form on the website casadasmouriscas.pt are processed exclusively for the following purposes:

• a) To respond to information and availability requests submitted by users;
• b) To frame and manage any steps necessary for the conclusion of accommodation booking contracts at the "Casa das Mouriscas" establishment;
• c) To ensure the management of communications with users, namely to clarify queries related to availability requests or possible bookings.

The data collected are not used for marketing purposes, newsletters or other promotional communications, unless, in the future, express and specific consent is obtained for that purpose.

4. Legal basis

The processing of personal data carried out via the availability request form is based on the necessity of taking pre-contractual steps at the request of the data subject, pursuant to Article 6(1)(b) of Regulation (EU) 2016/679 (GDPR).

By filling in and submitting the form, the user requests information and/or submits an availability request with a view, potentially, to concluding an accommodation contract. The processing of the data is therefore necessary to analyse the request, check availability, present conditions and reply to the user.

5. Recipients and processors

The controller uses the service provider Formspark (formspark.io / submit-form.com), operated by Trampoline Software SRL, established in Belgium, to ensure the proper functioning of the availability request form. Formspark acts as a data processor and processes personal data only in accordance with the documented instructions of the controller.

Formspark provides a service for forwarding the forms submitted on the casadasmouriscas.pt website, sending the content of the form to the controller's email address. A data processing agreement is entered into or accepted with this service provider, which sets out, in particular, obligations regarding confidentiality, information security, compliance with the GDPR and the regime applicable to any sub-processors.

6. International transfers

According to the information provided by Formspark/Trampoline Software SRL, the processing and storage of personal data collected via the form take place only on servers located within the European Union, currently in Ireland, and there are no data transfers to third countries outside the European Economic Area.

7. Retention periods

The personal data collected through the availability request form are stored only for the period strictly necessary to fulfil the purposes for which they were collected, namely to:

• a) Analyse and respond to the availability request;
• b) Carry out any steps required for the conclusion of an accommodation booking;
• c) Comply with any legal obligations or limitation periods applicable to rights or liabilities related to the booking.

As a rule, the data will be deleted or anonymised within a maximum period of 12 (twelve) months after the last relevant interaction with the user concerning the request in question, unless their retention for a longer period proves necessary for compliance with legal obligations or for the establishment, exercise or defence of legal claims in judicial, administrative or regulatory proceedings.

8. Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and data portability by contacting casadasmouriscas@gmail.com.

9. Complaints

You may lodge a complaint with the supervisory authority — the CNPD (Portuguese Data Protection Authority), at www.cnpd.pt.

10. Security

The controller adopts appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to them. These measures include, in particular, the use of encrypted communications (HTTPS) on the casadasmouriscas.pt website, restricting access to personal data to those persons who need it in order to fulfil the above-mentioned purposes and the use of secure credentials to access the email accounts associated with the service. Notwithstanding these measures, the user acknowledges that no security system is impenetrable and that, when using the Internet, there are residual risks of unauthorised access to or misuse of personal data.

11. Cookies and local storage

This site does not use tracking, analytics or advertising cookies. It only uses local storage ("cdm_lang") to remember the chosen language — strictly necessary to present the site in your language. For this reason, no cookie consent banner is required.