Last updated: September 2026<\/p>\n\n\n\n
This Privacy Policy explains how BARPOINT – CONSULTORES E SERVI\u00c7OS, LDA collects, uses, stores and shares personal data in connection with madeiraquintadapaz.com, the activities of Quinta da Paz Living and related bookings and services.<\/p>\n\n\n\n
This Policy applies to website visitors, guests, booking holders, people who contact us and other individuals whose personal data is processed in connection with our services.<\/p>\n\n\n\n
The controller of your personal data is:<\/p>\n\n\n\n
BARPOINT – CONSULTORES E SERVI\u00c7OS, LDA
Portuguese tax\/company number (NIF\/NIPC): 511 187 602
Brand\/property: Quinta da Paz Living
Local Accommodation registration: 53891\/AL
Contact address: Estrada da Ponta da Oliveira, 27, 9125-035 Cani\u00e7o, Madeira, Portugal
Email: booking@madeiraquintadapaz.com
Website: madeiraquintadapaz.com<\/p>\n\n\n\n
For privacy-related questions or to exercise your data protection rights, you may contact us at booking@madeiraquintadapaz.com.<\/p>\n\n\n\n
Personal data is processed in accordance with Regulation (EU) 2016\/679 of 27 April 2016 (General Data Protection Regulation – GDPR), Portuguese Law No. 58\/2019 of 8 August, and other applicable Portuguese and European privacy, electronic communications and data protection legislation.<\/p>\n\n\n\n
Quinta da Paz Living aims to process personal data lawfully, fairly and transparently, in accordance with the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability.<\/p>\n\n\n\n
We only collect data that is adequate, relevant and necessary for the identified purposes and implement technical and organisational measures designed to protect it.<\/p>\n\n\n\n
Depending on how you interact with us, we may process the following categories of personal data:<\/p>\n\n\n\n
\u2022 Identification data: name, date of birth, nationality and, where required to comply with legal obligations, identity document or passport details.<\/p>\n\n\n\n
\u2022 Contact data: email address, telephone number, address and other information provided for communication.<\/p>\n\n\n\n
\u2022 Booking and stay data: arrival and departure dates, booked unit, number and age of guests, special requests, additional services, booking history and communications relating to the stay.<\/p>\n\n\n\n
\u2022 Billing data: billing name or company name, tax number, billing address and information relating to accounting documents.<\/p>\n\n\n\n
\u2022 Payment and transaction data: payment method, transaction status, amounts and transaction references. Full payment card details are generally processed by the payment service provider and may not be accessible to BARPOINT.<\/p>\n\n\n\n
\u2022 Communication data: content of messages sent by email, contact form, booking engine, booking platforms or other channels used to communicate with us.<\/p>\n\n\n\n
\u2022 Technical and usage data: IP address, access date and time, browser, operating system, device, pages viewed, technical logs and cookie or similar technology identifiers, where applicable.<\/p>\n\n\n\n
\u2022 Other data that you voluntarily provide and that is necessary to respond to your request or provide the requested service.<\/p>\n\n\n\n
Data may be collected directly from you, including when you:<\/p>\n\n\n\n
\u2022 use the website or contact form;<\/p>\n\n\n\n
\u2022 make a booking through the booking engine integrated into the website;<\/p>\n\n\n\n
\u2022 contact us by email, telephone or another channel;<\/p>\n\n\n\n
\u2022 check in or provide information necessary for your stay;<\/p>\n\n\n\n
\u2022 request additional services.<\/p>\n\n\n\n
We may also receive data from third parties, including booking platforms, agencies, tour operators, payment providers or other partners used by the guest. In those cases, such third parties may act as independent controllers for processing carried out on their own platforms.<\/p>\n\n\n\n
We process personal data only where an appropriate legal basis exists. Our main purposes are:<\/p>\n\n\n\n
Enquiries and pre-contractual steps – to respond to requests for information, availability, quotations or other communications before a booking. Legal basis: steps taken at the data subject’s request prior to entering into a contract and, where applicable, legitimate interests in managing communications.<\/p>\n\n\n\n
Booking management and accommodation services – to create, confirm, amend and manage bookings, perform check-in and check-out, communicate with guests and provide contracted services. Legal basis: performance of a contract or pre-contractual steps.<\/p>\n\n\n\n
Payments, billing and accounting – to process payments, issue tax documents, manage refunds and comply with accounting and tax obligations. Legal basis: performance of a contract and compliance with legal obligations.<\/p>\n\n\n\n
Legal obligations relating to accommodation – including, where applicable, collecting and communicating legally required information concerning foreign guests and responding to lawful requests from authorities. Legal basis: compliance with a legal obligation.<\/p>\n\n\n\n
Security, fraud prevention and legal claims – to protect guests, premises, IT systems and transactions, prevent abusive or fraudulent activity, manage incidents and complaints, and establish, exercise or defend legal claims. Legal basis: legitimate interests and, where applicable, compliance with legal obligations.<\/p>\n\n\n\n
Service improvement – to proportionately assess service quality, manage feedback and improve internal processes. Legal basis: legitimate interests, provided these are not overridden by the data subject’s rights and freedoms.<\/p>\n\n\n\n
Marketing and promotional communications – to send newsletters, campaigns or offers where a lawful basis exists. Where consent is required, such communications will only be sent after valid consent, which may be withdrawn at any time.<\/p>\n\n\n\n
Website analytics – where non-essential analytics cookies or similar technologies are used, processing takes place only after the applicable consent, in accordance with the Cookie Policy.<\/p>\n\n\n\n
The Quinta da Paz Living website integrates Ynnov technology to provide and manage bookings.<\/p>\n\n\n\n
For guest data processed through the platform in connection with Quinta da Paz Living’s activities, BARPOINT – CONSULTORES E SERVI\u00c7OS, LDA acts as the data controller and Ynnov generally acts as a processor, processing personal data on behalf of and under the instructions of BARPOINT, without prejudice to processing for which Ynnov acts as an independent controller under its own Privacy Policy.<\/p>\n\n\n\n
The platform may process data such as name, contact details, booking information, information required for the stay, billing information, communications and, where legally necessary, guest identification data.<\/p>\n\n\n\n
According to information published by Ynnov, data stored on its platform is hosted in the European Union and is used for functions including booking management, guest communications, payments, invoicing and compliance with legal obligations.<\/p>\n\n\n\n
If an individual concierge\/check-in portal or link provided through Ynnov is used, guests should keep that link confidential and not share it with third parties.<\/p>\n\n\n\n
The website may provide forms through which data such as name, email address, subject and message content are collected.<\/p>\n\n\n\n
Data submitted through these forms is used to respond to the communication and follow up on the request.<\/p>\n\n\n\n
To protect forms against spam, abuse and automated access, the website uses or may use Google reCAPTCHA. This service may collect technical information about the device and interaction with the website in accordance with Google’s terms and privacy policy.<\/p>\n\n\n\n
The use of security mechanisms is based on BARPOINT’s legitimate interest in protecting the website, its systems and users, without prejudice to the rules applicable to storing or accessing information on a user’s device.<\/p>\n\n\n\n
The website uses cookies and similar technologies. Some are strictly necessary for the operation and security of the website or to provide functions expressly requested by the user.<\/p>\n\n\n\n
Analytics, advertising or other non-essential cookies will only be used where the consent required by applicable law has been obtained.<\/p>\n\n\n\n
Where Google Analytics or equivalent services are active, technical and usage information such as IP address, device, browser and website interaction may be processed to produce usage statistics. These services should be activated in accordance with the choices made by the user through the consent management mechanism.<\/p>\n\n\n\n
Detailed information about cookie categories, providers, purposes and durations should be set out in Quinta da Paz Living’s Cookie Policy.<\/p>\n\n\n\n
Payments associated with online bookings may be processed by external payment service providers integrated with the booking engine.<\/p>\n\n\n\n
These providers may process information required to authorise and execute the transaction and prevent fraud. Depending on the service used, the payment provider may act as an independent controller or as a processor for certain processing operations.<\/p>\n\n\n\n
BARPOINT aims to limit access to payment information to what is strictly necessary and generally does not need to store full payment card details.<\/p>\n\n\n\n
Personal data is not sold.<\/p>\n\n\n\n
It may be made available, to the extent strictly necessary, to the following categories of recipients:<\/p>\n\n\n\n
\u2022 Ynnov and other technology suppliers involved in managing the website, bookings and stays;<\/p>\n\n\n\n
\u2022 web hosting, IT maintenance, email and communications providers;<\/p>\n\n\n\n
\u2022 payment service providers and financial institutions;<\/p>\n\n\n\n
\u2022 accountants, consultants, insurers, lawyers or other professional service providers subject to confidentiality duties;<\/p>\n\n\n\n
\u2022 booking platforms and partners involved in a booking where necessary to manage it;<\/p>\n\n\n\n
\u2022 Google or other technology providers where reCAPTCHA, analytics, maps or similar features are used;<\/p>\n\n\n\n
\u2022 public, tax, police, judicial or other legally competent authorities where disclosure is required or permitted by law.<\/p>\n\n\n\n
Service providers processing data on BARPOINT’s behalf are subject to the contractual and legal requirements applicable to processors.<\/p>\n\n\n\n
Portuguese law requires accommodation operators to collect and communicate certain information concerning foreign guests.<\/p>\n\n\n\n
Where this obligation applies, the required data will be processed solely to comply with that legal obligation and communicated through the legally applicable system and to the competent authorities.<\/p>\n\n\n\n
Accommodation bulletins and related records subject to the relevant legal regime are retained for the statutory period currently provided for by law, which is one year calculated in accordance with the applicable legislation.<\/p>\n\n\n\n
We seek to use providers that process data within the European Economic Area (EEA). However, some technology providers may process or permit access to data from third countries.<\/p>\n\n\n\n
Where personal data is transferred outside the EEA, the safeguards required by law will be used, such as a European Commission adequacy decision, the EU-U.S. Data Privacy Framework where applicable, European Commission Standard Contractual Clauses or another valid GDPR transfer mechanism.<\/p>\n\n\n\n
You may request further information about applicable safeguards using the contact details in this Policy.<\/p>\n\n\n\n
Personal data is retained only for as long as necessary for the purposes for which it was collected and for any additional periods required or permitted by law.<\/p>\n\n\n\n
In general:<\/p>\n\n\n\n
\u2022 enquiries that do not result in a booking are retained for the time necessary to respond and manage the contact and may be kept for a reasonable additional period for follow-up and the defence of legal rights;<\/p>\n\n\n\n
\u2022 booking and stay data is retained for the contractual relationship and afterwards for the period necessary to comply with legal, tax and accounting obligations and to establish, exercise or defend legal claims;<\/p>\n\n\n\n
\u2022 tax and accounting documents are retained for the periods required by applicable law;<\/p>\n\n\n\n
\u2022 foreign guest accommodation bulletin data is retained for the applicable statutory period, currently one year under the relevant legal regime;<\/p>\n\n\n\n
\u2022 data used for consent-based marketing is processed until consent is withdrawn or the data is no longer necessary, without prejudice to the minimum retention required to demonstrate compliance with opt-out or objection requests;<\/p>\n\n\n\n
\u2022 cookie and analytics data is retained according to the periods stated in the Cookie Policy and the settings of the relevant providers.<\/p>\n\n\n\n
When data is no longer required, it will be deleted, anonymised or restricted where retention remains legally required.<\/p>\n\n\n\n
BARPOINT implements technical and organisational measures appropriate to the risk to protect personal data against destruction, loss, alteration, unauthorised disclosure or access.<\/p>\n\n\n\n
These measures may include access controls, credential management, security updates, backups, protection of communications and limiting access to data to people who need it to perform their duties.<\/p>\n\n\n\n
Despite these measures, no Internet-connected system can guarantee absolute security. Users should also follow appropriate security practices and keep any personal links or credentials provided to them confidential.<\/p>\n\n\n\n
Quinta da Paz Living does not specifically target its website or marketing activities at children.<\/p>\n\n\n\n
However, in the context of a family booking, data relating to minors may be processed, such as age and, where legally required, other identification information. Such data should be provided by a person with parental responsibility, a legal representative or the adult responsible for the booking and will only be processed to the extent necessary to manage the stay and comply with legal obligations.<\/p>\n\n\n\n
Under the GDPR, and where the relevant legal requirements are met, you may exercise the following rights:<\/p>\n\n\n\n
\u2022 the right of access to your personal data and information about its processing;<\/p>\n\n\n\n
\u2022 the right to rectification of inaccurate or incomplete data;<\/p>\n\n\n\n
\u2022 the right to erasure;<\/p>\n\n\n\n
\u2022 the right to restriction of processing;<\/p>\n\n\n\n
\u2022 the right to object to processing based on legitimate interests and, at any time, to direct marketing;<\/p>\n\n\n\n
\u2022 the right to data portability where processing is based on consent or a contract and is carried out by automated means;<\/p>\n\n\n\n
\u2022 the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;<\/p>\n\n\n\n
\u2022 the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects, in the cases provided by law.<\/p>\n\n\n\n
These rights are not absolute, and there may be situations where BARPOINT is legally permitted or required to retain or continue processing certain data.<\/p>\n\n\n\n
Requests to exercise your rights or other privacy enquiries may be sent to:<\/p>\n\n\n\n
booking@madeiraquintadapaz.com<\/p>\n\n\n\n
Your request should clearly identify the right you wish to exercise and provide sufficient information to identify the data concerned. Where there is reasonable doubt about the identity of the requester, additional information strictly necessary to confirm identity may be requested.<\/p>\n\n\n\n
Exercising your rights is generally free of charge. BARPOINT will respond within the time limits set out in the GDPR.<\/p>\n\n\n\n
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes applicable data protection law.<\/p>\n\n\n\n
In Portugal, the supervisory authority is:<\/p>\n\n\n\n
Comiss\u00e3o Nacional de Prote\u00e7\u00e3o de Dados (CNPD)
Av. D. Carlos I, 134 – 1st Floor
1200-651 Lisbon, Portugal
Email: geral@cnpd.pt
Website: www.cnpd.pt<\/p>\n\n\n\n
BARPOINT does not expect to use guest data to make decisions based solely on automated processing that produce legal or similarly significant effects on the individual.<\/p>\n\n\n\n
External providers, particularly payment providers, may use automated fraud-prevention mechanisms in accordance with their own policies and legal responsibilities.<\/p>\n\n\n\n
The website may contain links to websites, maps, social networks, booking platforms or other services operated by third parties.<\/p>\n\n\n\n
This Privacy Policy applies only to processing for which BARPOINT is responsible. Processing carried out directly by third parties is subject to their own privacy policies, which we recommend reviewing.<\/p>\n\n\n\n
This Policy may be updated when there are changes to applicable law, technology, operations, services or suppliers used by Quinta da Paz Living.<\/p>\n\n\n\n
The current version will be available at madeiraquintadapaz.com and will state the date of its latest update. Material changes may be communicated through additional means where appropriate or legally required.<\/p>\n\n\n\n
For any questions about this Policy or the processing of your personal data:<\/p>\n\n\n\n
Quinta da Paz Living
BARPOINT – CONSULTORES E SERVI\u00c7OS, LDA
Portuguese tax\/company number (NIF\/NIPC): 511 187 602
Local Accommodation registration: 53891\/AL
Estrada da Ponta da Oliveira, 27
9125-035 Cani\u00e7o, Madeira, Portugal
Email: booking@madeiraquintadapaz.com<\/p>\n","protected":false},"excerpt":{"rendered":"
Last updated: September 2026 This Privacy Policy explains how BARPOINT – CONSULTORES E SERVI\u00c7OS, LDA collects, uses, stores and shares personal data in connection with madeiraquintadapaz.com, the activities of Quinta da Paz Living and related bookings and services. This Policy applies to website visitors, guests, booking holders, people who contact us and other individuals whose … Continued<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-233","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/madeiraquintadapaz.com\/de\/wp-json\/wp\/v2\/pages\/233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/madeiraquintadapaz.com\/de\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/madeiraquintadapaz.com\/de\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/madeiraquintadapaz.com\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/madeiraquintadapaz.com\/de\/wp-json\/wp\/v2\/comments?post=233"}],"version-history":[{"count":6,"href":"https:\/\/madeiraquintadapaz.com\/de\/wp-json\/wp\/v2\/pages\/233\/revisions"}],"predecessor-version":[{"id":2063,"href":"https:\/\/madeiraquintadapaz.com\/de\/wp-json\/wp\/v2\/pages\/233\/revisions\/2063"}],"wp:attachment":[{"href":"https:\/\/madeiraquintadapaz.com\/de\/wp-json\/wp\/v2\/media?parent=233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}