Privacy Policy
Privacy Policy
Last updated: May 2025
Who we are
MyGem is a boutique holiday apartment in Olhos de Água, Albufeira, Portugal, operated directly by the owner. We are the data controller for any personal data collected through this website.
You can contact us at any time: mygemstayalbufeira@gmail.com.
You can contact us at any time: mygemstayalbufeira@gmail.com.
What personal data we collect
We only collect the data you provide voluntarily through our enquiry form:
- First name and last name
- Email address
- Phone number (optional)
- Check-in and check-out dates
- Number of guests
- Special requests (if provided)
preferred_locale — a functional cookie that remembers your language preference (no personal data).Why we process your data
We process your enquiry data in order to:
- Respond to your enquiry and, if agreed, confirm a reservation (legal basis: pre-contractual steps — Article 6(1)(b) GDPR)
- Keep a record of guest correspondence (legal basis: legitimate interests — Article 6(1)(f) GDPR)
Third parties
We use the following third-party services to operate this website:
- Resend (resend.com) — receives enquiry details to deliver your message to us by email. Resend is an EU-compliant email provider. Only the data you submit in the form is shared.
- Cloudflare — our hosting and CDN provider. Cloudflare processes web traffic on our behalf and may log IP addresses for security and performance purposes.
- OpenStreetMap — map tiles are loaded from OpenStreetMap servers. No personal data is sent to OpenStreetMap.
How long we keep your data
Enquiry messages and associated personal data are retained for a maximum of 12 months, unless a booking is confirmed. Data relating to confirmed bookings (guest name, contact details, and stay dates) is retained for 7 years as required by Portuguese tax and commercial law.
Your rights under GDPR
As a resident of the European Economic Area, you have the following rights:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — ask us to delete your data, subject to legal retention obligations
- Right to restriction — ask us to limit how we process your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
Complaints
If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Portuguese data protection authority:
CNPD — Comissão Nacional de Proteção de Dados
Rua de São Bento 148-3°, 1200-821 Lisboa
www.cnpd.pt
CNPD — Comissão Nacional de Proteção de Dados
Rua de São Bento 148-3°, 1200-821 Lisboa
www.cnpd.pt
Questions about this policy? Email us at mygemstayalbufeira@gmail.com.