Privacy and Data Policy
Privacy Policy
1. Data Controller
This website is operated by Letras e Borboletas - Ecoturismo, Lda., with registered office at Rua Dom Fuas Roupinho, 194, 2480-032 Alvados, corporate entity number 508 905 311, hereinafter referred to as “Cooking Hotel”.
This entity is responsible for processing the personal data collected through the website.
2. Data Collected
Cooking Hotel may collect the following types of personal data:
- Booking and stay: name, email, phone number, address, tax identification number (NIF), credit/debit card details, dates of stay and preferences;
- Online payments: billing and transaction details;
- Communication: information provided when filling out contact forms or subscribing to newsletters;
- Recruitment: identification details, contact information, qualifications, professional experience and other elements included in the CV;
- Website navigation: cookies and anonymous statistical data (see Cookie Policy).
3. Purposes of Treatment
The personal data collected is intended for:
- Management of reservations, stays and associated services;
Payment processing and invoicing;
- Compliance with legal obligations (tax, accounting and security);
- Managing contacts, information requests, and complaints;
- Sending promotional communications, subject to express consent;
- Recruitment and selection processes for job applicants.
4. Foundations of Lawfulness
The processing of personal data by the Hotel is based on:
- Contract execution (e.g., booking accommodation);
- Compliance with legal obligations (e.g., tax and authority communications);
- Legitimate interest (e.g., service improvement, network security);
- Consent of the data subject (e.g., sending newsletters, marketing communications).
5. Data Preservation
- Reservations and invoicing: kept for the legally required period (10 years for tax and accounting purposes);
- Job applications: up to 2 years after receipt, in accordance with the terms defined in the Cooking Hotel's internal Data Protection regulations section;
- Marketing: until consent is revoked;
Other cases: only for the time strictly necessary for the purpose for which they were collected.
6. Data Sharing
The hotel may share personal data only with:
- Service providers acting as subcontractors, namely Guestcentric Systems SA, responsible for managing the booking platform and website, and Social Mente, Lda., responsible for institutional communication, digital campaigns and sending newsletters.
Guestcentric processes personal data exclusively on behalf of and for the Hotel, and is contractually obligated to guarantee confidentiality, security, and compliance with the GDPR.
- Social Mente, Lda., handles institutional communication, namely through the sending of newsletters that are only sent to recipients who have given valid consent and with a double opt-in mechanism, contractually obligated to guarantee confidentiality, security and compliance with the GDPR.
Other service providers (e.g., payment processors, hotel management software) are also subject to data protection obligations.
- Public authorities, when legally required.
The data will never be shared with third parties for commercial purposes without the owner's consent.
7. International Transfers
Cooking Hotel does not, as a rule, transfer personal data outside the European Economic Area.
Should you use service providers established in third countries or international organizations, the respective transfers of personal data will only be carried out in compliance with the requirements of Chapter V of the GDPR, ensuring, in particular, the existence of an adequacy decision, standard contractual clauses or other appropriate transfer mechanism.
8. Rights of Data Subjects
The user has the right to:
- Access, correct or delete your personal data;
- To limit or oppose treatment;
- Request the portability of your data;
- Withdraw consent, when applicable;
- File a complaint with the National Data Protection Commission (CNPD).
These rights can be exercised by sending a request to the email address info@cookinghotel.com or by mail to the Cooking Hotel's address.
9. Data Security
Cooking Hotel and its subcontractors, including Guestcentric, adopt appropriate technical and organizational measures to protect personal data against loss, alteration, unauthorized access, or improper disclosure.
10. Policy Changes
Cooking Hotel may update this Privacy Policy at any time. Changes will be published on the website indicating the date of the last update.
Cookie Policy
What are cookies?
Cookies are small text files stored on a user's device when they visit a website. They allow the website to recognize the user, save preferences, and improve the browsing experience.
Types of Cookies Used
The website https://www.cookinghotel.com/ uses:
Essential cookies: necessary for the website to function (e.g., session management, online bookings, security).
- Performance and analytics cookies: allow us to collect anonymous statistical data about website usage (e.g., Google Analytics) to improve services and content.
- Functionality cookies: store user preferences (e.g., language, login details).
- Advertising/remarketing: used to display relevant ads on external platforms, based on the user's browsing history.
Cookie Management
When accessing the website for the first time, the user can configure their preferences in the cookie banner.
Users can manage or disable cookies at any time through their browser settings. Disabling some cookies may affect certain functionalities (e.g., online bookings).
Storage Period
Session cookies: automatically deleted when you close your browser;
- Persistent cookies: remain on the device until their expiration date or until manually deleted by the user.
Consent
The use of non-essential cookies only occurs after the user's explicit consent.
Updated on 12/18/2026