Privacy & Cookie Policy

Last updated: 29 October 2026

Vinte – Quinta da Boavista respects your privacy. This policy explains what personal data we collect through this website, why we collect it, who we share it with and what rights you have.

1. Who we are

The data controller is BonusEventus, Lda. (VAT no. 514735686), which operates Vinte – Quinta da Boavista (tourism registration RNET no. 13388), Rua de Parada 20, 4990-673 Ponte de Lima, Portugal.

For any question about your data, contact us at info@vintequinta.com or +351 913 902 020.

2. What data we collect and why

WhenDataPurposeLegal basis
You book a stayName, email, phone, address, number of guests, dates, special requestsManaging your booking and stay; communicating with you about itPerformance of a contract
You pay onlinePayment confirmation and transaction reference (we never see or store your full card details)Processing payments and refundsPerformance of a contract
You order from our shopName, contact details, order detailsProcessing and delivering your orderPerformance of a contract
You book a table at our restaurantThe details you enter in the reservation widgetManaging your table reservationPerformance of a contract
You email or call usYour contact details and the content of your messageAnswering your requestLegitimate interest / pre-contractual steps
InvoicingName, VAT number, addressIssuing invoices and complying with tax lawLegal obligation
You browse the websiteCookies and similar technologies (see section 6)Making the site work; with your consent, measuring visits and showing relevant adsLegitimate interest (necessary cookies) / your consent (all others)

Guests' data collected at check-in (identification and registration card) is processed as described in our General Rules, section 12.

3. Who we share your data with

We only share your data when it is needed for the purposes above, with:

  • Payment provider — EuPago (Portugal), which processes card payments.
  • Restaurant reservations — UMAI (letsumai.com), the platform behind our table reservation widget, and its payment processor Stripe.
  • Website hosting and maintenance — the companies that host and maintain this website, acting on our instructions.
  • Google — the map on our Contacts page is provided by Google Maps.
  • Advertising partners — Meta (Facebook/Instagram) and Google, only if you accept advertising cookies (see section 6).
  • Public authorities — when required by law (for example, guest registration with the immigration authorities, or tax authorities).

Some of these providers may process data outside the European Economic Area. When that happens, the transfer is protected by the safeguards required by the GDPR, such as the European Commission's standard contractual clauses.

4. How long we keep your data

We keep booking and order data for as long as needed to provide the service and then for the periods required by law (for example, 10 years for invoicing records). Data used on the basis of your consent is kept until you withdraw it.

5. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time (without affecting processing carried out before). To exercise any of these rights, email info@vintequinta.com.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

6. Cookies

Cookies are small files stored on your device when you visit a website. We use the following:

CookieProviderPurposeDurationType
cookieyes-consentThis websiteRemembers your cookie choices1 yearNecessary
WP_SESSION_COOKIEThis websiteKeeps your booking session while you choose dates and accommodationSessionNecessary
woocommerce_*, wp_woocommerce_session_*This websiteKeeps the items in your shop cartSession / 2 daysNecessary
__stripe_mid, __stripe_sidStripe (via UMAI)Fraud prevention for restaurant reservation payments; only on the restaurant pages1 year / 30 minNecessary for that service
_fbpMeta (Facebook/Instagram)Measuring the results of our ads and showing you relevant ads3 monthsAdvertising — only with your consent
_gcl_auGoogle AdsMeasuring the results of our ads and showing you relevant ads3 monthsAdvertising — only with your consent

When you first visit the site, a banner asks for your consent. Necessary cookies are always active; all other categories are only used if you accept them. You can change your choice at any time using the cookie icon at the bottom of the page, or delete cookies in your browser settings.

7. Changes to this policy

We may update this policy. The date at the top shows when it was last changed.