Privacy Policy
Last updated: 02/07/2026
1. Introduction
This Privacy Policy describes how the White Walls Country Stays website (hereinafter referred to as the "Website") collects, uses, stores and protects the personal data of its users, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), Portuguese Law no. 58/2019 of 8 August, and all other applicable national and European legislation.
White Walls Country Stays respects the privacy of its visitors and is committed to ensuring that all personal data is processed lawfully, fairly, transparently and only for the purposes for which it is collected.
By using this Website, users acknowledge that they have read and accepted this Privacy Policy.
2. Data Controller
The controller responsible for processing personal data is:
Entity: Espiga Exemplar Lda
Portuguese Tax Identification Number (NIF): 518127460
Address: Rua da Moinheta 88 – 8365-062 Algoz, Portugal
Email: info@whitewallscountrystays.com
Whenever this Privacy Policy refers to "White Walls Country Stays", it refers to the entity identified above.
3. Data Protection Officer
At present, no Data Protection Officer (DPO) has been appointed, as there is no legal obligation to do so.
Any questions relating to data protection may be addressed to:
info@whitewallscountrystays.com
4. Scope
This Privacy Policy applies exclusively to personal data collected through this Website.
It does not apply to the processing of personal data carried out by third-party websites, platforms or services to which this Website may provide links.
5. What Personal Data We Collect
Depending on how the Website is used, we may collect the following personal data:
5.1 Availability Enquiries
When users submit an enquiry through the contact form, we may collect:
- Name;
- Email address;
- Telephone number (where provided);
- Preferred stay dates;
- Number of guests;
- Message content.
5.2 Email Communications
Where users contact White Walls Country Stays directly by email, we may process:
- Name;
- Email address;
- Content of the communication;
- Any additional information voluntarily provided by the user.
5.3 Technical Data
While browsing the Website, certain technical information may be collected automatically, including:
- IP address;
- Browser type;
- Operating system;
- Browser language;
- Date and time of access;
- Pages visited;
- Duration of the visit;
- Traffic source;
- Website usage statistics.
Most of this information is collected in an aggregated form and does not directly identify individual users.
6. Purposes of Processing
Personal data is processed solely for legitimate purposes, including:
- Responding to contact enquiries;
- Responding to availability enquiries;
- Providing information about the accommodation;
- Managing communications with prospective guests;
- Improving the operation of the Website;
- Producing website usage statistics;
- Maintaining Website security;
- Complying with legal obligations.
Personal data will not be processed for purposes incompatible with those for which it was originally collected.
7. Legal Bases for Processing
In accordance with Article 6 of the GDPR, personal data may be processed on the basis of:
Consent
Where users voluntarily submit a form or consent to the use of certain cookies.
Pre-contractual Measures
Where users request information or availability regarding a prospective stay.
Legitimate Interests
Including:
- IT security;
- fraud prevention;
- continuous improvement of the Website;
- statistical analysis of Website usage.
Legal Obligation
Where processing is required by applicable law or regulatory obligations.
8. Availability Enquiries
The Website provides a form through which users may request information regarding accommodation availability.
This form does not constitute a booking and does not establish any accommodation contract.
Its sole purpose is to enable White Walls Country Stays to respond to availability enquiries and provide any additional information requested.
9. Bookings Made Through External Platforms
White Walls Country Stays does not process accommodation bookings directly through this Website.
Whenever users choose to make a booking, they may be redirected to external platforms specialising in accommodation booking management.
These platforms may include, among others:
- MTP Homes;
- Booking.com;
- Airbnb;
- other booking platforms that may be used in the future.
These platforms operate independently from this Website.
Each platform has its own:
- Terms and Conditions;
- Privacy Policy;
- Cookie Policy.
The processing of personal data required to complete a booking is carried out by the relevant platform acting as the data controller for the personal data collected through its services.
White Walls Country Stays does not control the internal data processing procedures adopted by these platforms. Users are therefore encouraged to read the relevant policies before completing any booking.
10. Sharing Booking Information
Following confirmation of a booking made through an external platform, that platform may communicate to White Walls Country Stays the information strictly necessary for the management of the stay.
This information may include:
- guest identification details;
- contact information;
- booking dates;
- number of guests;
- information relevant to the provision of accommodation services.
White Walls Country Stays will process such information exclusively in order to:
- prepare the guest's stay;
- communicate with the guest;
- comply with legal obligations;
- provide accommodation-related services.
Each party remains responsible for processing personal data within the scope of its own purposes and legal obligations.
11. Data Recipients
Personal data may only be disclosed where necessary for the purposes described above, including to:
- IT service providers;
- web hosting providers;
- email service providers;
- Website maintenance providers;
- public authorities where disclosure is required by law;
- cybersecurity service providers.
All processors acting on behalf of White Walls Country Stays are contractually bound to comply with the obligations established under the GDPR.
12. Technologies Used on the Website
The Website may use third-party technologies to ensure its proper operation and improve the user experience.
These technologies may include:
Google Analytics 4
Used to produce aggregated statistics regarding Website usage.
Where required by law, its use depends upon the user's consent obtained through the Website's cookie management platform.
Google Tag Manager
Google Tag Manager acts solely as a technical tag management system and does not itself collect personal data or create user profiles.
It enables the loading of other services, which may require the user's consent where applicable.
Google Maps
Certain pages may embed maps provided by Google in order to help users locate the accommodation.
The display of these maps may involve technical communications between the user's browser and Google's servers.
Google reCAPTCHA
The Website uses Google reCAPTCHA to protect its forms against spam, automated abuse and fraudulent activity.
The use of this service is subject to Google's own Terms of Service and Privacy Policy.
Cookiebot
The Website uses Cookiebot to manage cookie consent, allowing users to accept, reject or customise their cookie preferences.
13. Data Retention
Personal data will only be retained for as long as necessary to fulfil the purposes for which it was collected or while there is a legal basis for its processing.
Without prejudice to any specific legal retention periods, the following retention periods generally apply:
| Purpose | Indicative Retention Period |
|---|---|
| Contact enquiries | Up to 24 months after the last communication |
| Availability enquiries without a booking | Up to 24 months after the last contact |
| Communications relating to future stays | For the period necessary to manage the enquiry |
| Anonymised statistical data | For as long as it remains relevant for statistical analysis |
| Technical and security logs | Up to 12 months, unless a longer retention period is required to prevent fraud or comply with legal obligations |
Once the applicable retention periods have expired, personal data will be securely deleted or anonymised, unless a longer retention period is required by law.
14. International Data Transfers
Some of the service providers used by the Website may be established outside the European Economic Area (EEA) or may use infrastructure located in third countries.
Where this occurs, White Walls Country Stays will ensure that such transfers are carried out in accordance with the GDPR, including through the use of:
- adequacy decisions adopted by the European Commission;
- Standard Contractual Clauses approved by the European Commission;
- or any other safeguards recognised under applicable law.
15. Information Security
White Walls Country Stays implements appropriate technical and organisational measures to protect personal data against:
- unauthorised access;
- accidental or unlawful destruction;
- loss;
- alteration;
- unauthorised disclosure;
- misuse;
- or any other form of unlawful processing.
Such measures may include, among others:
- the use of secure connections (HTTPS);
- protection of servers and IT infrastructure;
- authentication and access control mechanisms;
- security monitoring;
- protection against malware, intrusion attempts and automated attacks;
- regular updating of the systems in use;
- restricted access policies for personal data.
Although appropriate security measures are implemented, no electronic transmission or storage system can guarantee absolute security. Nevertheless, White Walls Country Stays is committed to applying industry best practices appropriate to the nature of the personal data processed.
16. Data Subject Rights
In accordance with the GDPR, data subjects may exercise, where applicable, the following rights:
Right to Information
To receive clear and transparent information regarding the processing of their personal data.
Right of Access
To obtain confirmation as to whether personal data concerning them is being processed and, where applicable, to access such data.
Right to Rectification
To request the correction of inaccurate or incomplete personal data.
Right to Erasure
To request the deletion of personal data where the conditions set out in Article 17 of the GDPR are met.
Right to Restriction of Processing
To request the restriction of processing in the circumstances provided for by applicable legislation.
Right to Object
To object to the processing of personal data where such processing is based on the legitimate interests of the data controller.
Right to Data Portability
To receive the personal data provided in a structured, commonly used and machine-readable format, where technically feasible and legally applicable.
Right to Withdraw Consent
Where processing is based on consent, users may withdraw their consent at any time without affecting the lawfulness of processing carried out before such withdrawal.
The exercise of these rights may be subject to the limitations established by applicable law, particularly where processing is necessary to comply with legal obligations or for the establishment, exercise or defence of legal claims.
17. Exercising Your Rights
The rights described above may be exercised by submitting a written request to:
info@whitewallscountrystays.com
White Walls Country Stays may request additional information in order to verify the identity of the applicant where necessary to protect personal data.
Requests will be assessed and answered within the time limits established by applicable law.
18. Complaints
Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the competent supervisory authority.
In Portugal, the competent supervisory authority is:
Portuguese Data Protection Authority (CNPD)
Address: Av. D. Carlos I, 134, 1.º
1200-651 Lisbon
Portugal
Telephone: +351 213 928 400
Email: geral@cnpd.pt
Website: www.cnpd.pt
19. Links to Third-Party Websites
The Website may contain links to third-party websites.
These websites operate independently from White Walls Country Stays and have their own Privacy Policies, Cookie Policies and Terms of Use.
White Walls Country Stays accepts no responsibility for the privacy practices, content or services provided by third-party websites. Users are encouraged to read the relevant documentation before using such websites.