Quinta do Boiro

Privacy & Cookie Policy

Last updated: 28 May 2026

This policy explains how Quinta do Boiro ("we", "us") collects, uses and protects the personal data of visitors to this website, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and Portuguese Law no. 58/2019 of 8 August, which implements it in Portugal.

1. Data controller

The controller responsible for processing your personal data is:

Quinta do Boiro Lda, VAT no. (NIF) 517569361, registered office in Pereiro de Palhacana, 2580-258 Alenquer, Lisbon District, Portugal.

For any privacy matter or to exercise your rights, please use the contact form on our website.

2. What data we collect

• Data you provide: name, email address, phone number, enquiry type and the message you send us through the contact form or the chat widget.
• Data collected automatically: browsing and usage statistics (pages visited, device type, browser, date and time), collected via cookies and analytics tools, always subject to your consent.

3. Purposes and legal basis

Purpose	Legal basis (GDPR)
Responding to enquiries, quotes and bookings	Pre-contractual steps and legitimate interest (Art. 6(1)(b) and (f))
Statistical analysis and website improvement	Consent (Art. 6(1)(a))
Compliance with legal obligations (e.g. tax)	Legal obligation (Art. 6(1)(c))

4. Cookies

Cookies are small files stored on your device. We use the following categories:

Category	Purpose	Consent
Essential	Ensure the site works and remember your preferences (e.g. language, cookie choice)	Not required
Analytics	Understand how the site is used (e.g. Google Analytics)	Required

You can manage or withdraw your consent at any time via the cookie banner or your browser settings. Refusing non-essential cookies does not affect access to the website's content.

5. Sharing data with third parties

We do not sell your personal data. Data may be processed by service providers acting on our behalf, namely our website hosting provider and our analytics service (Google Analytics). Where this involves transferring data outside the European Economic Area, the appropriate safeguards required by the GDPR will be ensured.

6. Retention period

We keep contact data only for as long as necessary to respond to your enquiry and manage any resulting contractual relationship, and for the periods required by law. Analytics data is retained in aggregated form according to the analytics service settings.

7. Your rights

Under the GDPR you have the rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability and objection, as well as the right to withdraw consent at any time.

To exercise any of these rights, please use our contact form. You also have the right to lodge a complaint with the competent supervisory authority, the Portuguese Data Protection Authority (CNPD) — www.cnpd.pt.

Exercise my rights

8. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

9. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date of the last update.