1. Data controller
The controller of the personal data collected on this website is , VAT no. 503969052, with premises at Avenida Infante D. Henrique 734, 3880-355 Ovar. Contacts: +351 256 590 090 · spa@furadourohotel.com.
2. Data collected and purposes
When booking a treatment we collect: first name, last name, email address, phone number, tax number (optional — if not provided, the invoice is issued as a final consumer) and, optionally, any notes you choose to share (for example preferences, allergies, pregnancy or medical restrictions). From hotel guests we may also collect the room number and payment preference. For use of the wet circuit by external clients we record the name, a contact and the associated treatment, for capacity and access management. This data is processed exclusively for: managing the booking and its payment; communicating with you about the booking (confirmations, changes, reminders); invoicing and compliance with legal obligations, namely tax obligations; and the safe delivery of the booked treatment.
3. Legal basis
Processing is necessary for the performance of the service contract you request (article 6(1)(b) GDPR) and for compliance with legal obligations (article 6(1)(c)). Health information you voluntarily share in the notes is processed under article 9(2)(a) GDPR, with the utmost confidentiality, and used solely to adapt the treatment to your condition. In everything not provided for here, Regulation (EU) 2016/679 (GDPR) and Portuguese Law no. 58/2019 of 8 August, which implements it in Portugal, apply.
4. Retention
Booking data is kept for the period necessary to manage the booking and for 3 years thereafter for customer support purposes. Invoicing data is kept for the periods required by tax law (in general, 10 years).
5. Disclosure to third parties
Data is not sold or shared for marketing purposes. It may be disclosed only to: the payment service provider (Reduniq/UNICRE) for payment processing; the web hosting provider that supports the site; and public authorities where legally required.
6. Your rights
Under the GDPR you may exercise, at any time, the rights of access, rectification, erasure, restriction, portability and objection by contacting spa@furadourohotel.com. You also have the right to lodge a complaint with the supervisory authority: CNPD — Comissão Nacional de Proteção de Dados (www.cnpd.pt).
7. Cookies
This site uses only the cookies strictly necessary for its operation (session and language preference), which do not require consent. No advertising or third-party analytics cookies are used.
8. Security
We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted access to the management area and storage of passwords in irreversible (hashed) form.
9. Updates
This policy may be updated; the current version is always available on this page.