Privacy Policy

Last updated: September 2026

This Privacy Policy explains how Vila Milho collects, uses and protects the personal data of users who visit this website or contact us through the means provided.

1. Data controller

Controller: João Carlos Gaspar de Jesus Milho
Tax ID (NIF): 165 537 280
Email: jcmilho@gmail.com
Telephone: +351 964 644 247
Address: Belo Romão, Caixa Postal 353Z, 8700-065 Moncarapacho, Portugal
National Register of Local Accommodation (RNAL): 33312/AL

2. What data may we collect?

Depending on how you use the website, we may collect:

  • Name;
  • Email address;
  • Telephone number;
  • Intended dates of stay;
  • Number of guests;
  • Information voluntarily included in messages sent through the forms;
  • Technical data needed for the website to work securely.

We do not request personal data that is not necessary for the purpose for which it is collected.

3. What do we use your data for?

Data may be used to:

  • Reply to requests for information;
  • Reply to availability requests;
  • Manage booking requests;
  • Communicate with potential or current guests;
  • Provide information related to the stay;
  • Comply with applicable legal obligations;
  • Ensure the security and proper functioning of the website.

The legal basis for processing will depend on the specific purpose. Where processing is necessary to prepare or perform a contract, that may be the applicable legal basis; consent will be used where legally appropriate. The CNPD (Portuguese Data Protection Authority) points out that consent is not the appropriate legal basis for all processing. 

4. Data retention

Personal data will be kept only for as long as necessary to fulfil the purposes for which it was collected, or for the periods required by law.

5. Data sharing

Data may be processed by service providers that support the operation of the website, hosting, email, forms or other services necessary for the business.

Where applicable, appropriate measures will be taken to ensure the protection of personal data.

6. Data subject rights

Under applicable law, namely the GDPR, you may exercise the rights that apply to you, including:

  • Right of access;
  • Right to rectification;
  • Right to erasure;
  • Right to restriction of processing;
  • Right to object;
  • Right to data portability, where applicable.

These rights should be exercised with the data controller by email:

jcmilho@gmail.com

The CNPD confirms these rights and that data subjects should exercise them with the data controller. 

7. Security

Vila Milho seeks to adopt appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.

8. Complaints

If you believe that the processing of your personal data breaches applicable law, you may lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese Data Protection Authority.