Privacy notice

Data controller

Responsibility for what this website does with personal information lies with:

What we collect

• Connection details any browser hands over: IP address, user agent string, device and browser family, the referring page, the moment of the visit.
• Approximate geolocation, a coarse country-or-region guess derived from the IP, never a street.
• Form data you decide to email us: name, reply address, subject area and note.
• Your cookie answer, kept inside your own browser.

Purposes and legal bases

• Hosting, uptime and defence of the Palácio review against misuse: legitimate interest.
• Analytics, meaning anonymous tallies of reading: consent.
• Marketing, meaning commission attribution for bookings: consent.
• Replying to your emails: legitimate interest, or pre-contract steps you request.
• Record keeping that the law imposes: legal obligation.

Sharing

Hosting and measurement contractors act for Estoril Sol under written instructions only. With advertising/affiliate cookies switched on, affiliate and partner networks receive a click identifier so that a booking can be credited to the publisher. The hotel's website and any booking platform act under their own notices once you arrive there. Messages you send are never sold.

Retention

Raw request logs are purged within 90 days. Analytics tallies are kept for 26 months at the outside. Email threads stay while the topic is live, plus a further two years. Your cookie answer lasts 12 months, then the banner returns.

Your rights under the GDPR

The General Data Protection Regulation entitles you to see what Estoril Sol holds on you, to fix inaccuracies, to request deletion or restriction, to receive the data in a machine-readable file, and to challenge processing that rests on legitimate interest. To pull back a consent, use Manage cookies or write to privacy@rivercanyongroup.com. Complaints can go to the Comissão Nacional de Proteção de Dados (CNPD), Portugal's data protection authority, or to the supervisory body of the EU state you live in.

California residents (CCPA/CPRA)

Californians reading the Palácio review may ask Estoril Sol which categories of personal information it gathers and for what ends, demand correction or deletion, restrict use of anything sensitive, and opt out of the information being sold or shared for advertising across other sites and services. A browser broadcasting Global Privacy Control triggers that opt-out by itself. Exercising a right never downgrades your experience here.

Transfers outside the EEA

Should any contractor keep data outside the EEA, Estoril Sol relies on an EU adequacy finding or on the Commission's model clauses.

Minors

The Palácio review is written for adults. If you believe a child under 18 has sent us details, a short email to the privacy address gets them removed.

Changes

When our handling of data changes, this notice changes with it and the new text replaces the old one here.