Privacy Statement

Last updated: October 2026

Introduction

Casa Outeiro 99 is committed to respecting and protecting your privacy. This Privacy Statement describes how we collect, use, disclose and protect your personal information when you interact with our site www.casaouteiro99.com (hereinafter, “the Site”). By using our Site, you accept the practices described in this statement.

1. Data controllers

Casa Outeiro 99, belonging to Winnerchoice SA, is responsible for processing the personal data collected through this Site. If you have any questions, you can contact us at the following address:

Company name: Winnerchoice SA
Address: Rua de São Pedro 573, 4940-441 Paredes de Coura, Portugal
Email: [email protected]

2. Consent and information

By browsing our Site and providing your personal data, you freely and expressly consent to Casa Outeiro 99 processing your data in accordance with this Privacy Statement. We invite you to read this document carefully to understand how your data will be used.

3. Collection of your personal data

We collect your personal data in different ways:

• Direct interactions: when you fill in forms, make bookings or contact us directly.
• Automated interactions: through cookies and other technologies when you browse our Site.
• Third parties and public sources: we may also receive information from trusted partners and other public sources.

4. Types of data collected

The types of personal data we collect include:

• Contact details (email, phone number, address).
• Booking and stay information.
• Customer preferences and feedback.
• Information about the use of the Site (IP address, browsing history).

5. Purposes of data processing

We use your personal data to:

• Manage your bookings and stays.
• Improve and personalise our services.
• Send commercial communications, if you have given your consent.
• Ensure the safety and protection of our customers and our facilities.

6. Sharing of personal data

We share your personal data only with:

• Our service partners and suppliers to manage and optimise the services offered.
• Public authorities if required by law.

Service providers (processors)

To run the service we use the following providers, who process your data only on our instructions:

• Beds24 — booking and calendar management;
• Stripe — secure online payment;
• Cloudflare — website hosting and security;
• UpMarket — online check-in and guest messaging;
• YCloud and WhatsApp (Meta) — WhatsApp messaging;
• Anthropic (Claude), OpenAI (ChatGPT) and Google (Gemini) — automated assistant that helps answer your messages; a team member can take over the conversation at any time;
• Booking.com, Airbnb and Expedia — if you book through these platforms, they also process your data as controllers of their own processing.

Transfers outside the European Economic Area

Some of these providers may process data outside the European Economic Area, in particular in the United States. These transfers rely on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on the Commission's standard contractual clauses (Article 46 GDPR).

7. Data retention

We retain your personal data only for as long as necessary to achieve the purposes for which it was collected, or to meet legal obligations.

8. Your rights

In accordance with applicable laws, you have the following rights regarding your personal data:

• Access to your data.
• Correction of your information.
• Erasure of your data in certain cases.
• Restriction or objection to processing.

To exercise these rights, please contact us at the email address provided above.

You may also request the portability of your data. If you believe that the processing of your data does not comply with the law, you have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

This processing is governed by the General Data Protection Regulation (Regulation (EU) 2016/679) and by Portuguese Law no. 58/2019 of 8 August, which implements it in Portugal.

9. Data security

We implement technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. However, no data transmission over the Internet is entirely secure.

10. Changes to the Privacy Statement

This Privacy Statement may be updated periodically to reflect changes in our data processing practices or to comply with legal obligations. We encourage you to consult this page regularly to stay informed of updates.

Date of last update: October 2026

Winnerchoice SA · NIF 514131098 · AL n.º 136045/AL · Rua de São Pedro 573, 4940-441 Paredes de Coura · [email protected] · +351 961 665 455