This Privacy Policy describes how users’ personal data is collected, used and protected in connection with the use of this website and reservations made at Ilha Hostel and Suites, in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
The person responsible for the processing of personal data is the company Garway, Lda, with NIF 513902180 and registered office at Canada dos Areeiros 22, 9500-026 Fajã de Cima – Ponta Delgada.
For any questions related to the protection of personal data, you can contact us via email geral@ilhaazores.com
2. Personal Data Collected
In the context of the use of the website and the making of reservations, the following personal data may be collected:
- Name
- Email address
- Phone Number
- Booking details (dates of stay, number of guests, preferences)
- Data required for billing
- Guest identification data, where legally required
- IP address and browsing data through cookies
3. How Data Is Collected
Personal data is collected directly from customers – in person, by email, telephone, online booking forms, use of the website (cookies) or through partners (e.g. travel agencies).
4. Purpose of Data Processing
The personal data collected is intended for the following purposes:
- Reservation management and processing
- Communicating with guests before, during, and after their stay
- Compliance with legal obligations, namely with AIMA/SEF and the Tax Authority
- Issuing invoices
- Ensuring the proper functioning and improvement of the website
The data is not used to send newsletters or marketing communications.
5. Legal Basis for Processing
The processing of personal data is based on:
- In the performance of a contract (booking accommodation)
- In compliance with legal obligations
- The consent of the data subject, where applicable (namely in the use of cookies)
6. Data Retention
Personal data is kept only for the period necessary to fulfill the purposes for which they were collected, namely:
- For the time required by legal and tax obligations
- As long as liabilities arising from the contractual relationship remain
After this period, the data will be deleted or anonymized.
7. Sharing Data with Third Parties
Personal data may only be shared with:
- Public authorities, when legally required
- Providers of services necessary for the activity (e.g. accountant, payment services, web hosting)
Under no circumstances will personal data be sold or used for commercial purposes unrelated to the activity of the accommodation.
8. Transfer of Data Outside the European Union
Some services used on the website (such as analysis tools or third-party cookies) may involve the transfer of data outside the European Union. In such cases, adequate data protection guarantees are ensured, in accordance with the applicable legislation.
9. Rights of Data Subjects
Under the GDPR, the data subject has the right to:
- Accessing your personal data
- Request rectification of inaccurate or incomplete data
- Request deletion of data
- Request restrictions or objection to processing
- Request data portability
- Withdraw consent, where applicable
The exercise of these rights can be done by contacting geral@ilhaazores.com.
10. Complaints
Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with the competent supervisory authority:
National Data Protection Commission (CNPD)
www.cnpd.pt
11. Cookies
The website uses cookies to improve browsing experience and analyze the use of the site. Cookies can be their own or third-party cookies and do not collect information that directly identifies the user.
What are they?
Cookies are small text files that are stored on a user’s device when they visit a website. These files allow us to recognize the device and collect information about the use of the website.
What do we use cookies for?
The cookies used on this website are intended to:
- Ensure the proper functioning of the website
- Improve the browsing experience
- To collect statistical and anonymous information about the use of the website
Cookies do not collect information that personally identifies the user.
Types of cookies used
This website may use:
- Necessary cookies, essential for the operation of the website
- Analytical cookies, which allow us to analyze how the website is used
Analytics cookies are only used with the user’s consent, where applicable.
Cookie management
The user can, at any time, configure or deactivate cookies through their browser settings. Disabling cookies may affect the correct functioning of some features of the website.
12. Changes to the Privacy Policy
This Privacy and Cookie Policy may be updated at any time. Any changes will be posted on the website.
Last updated: 05/02/2026