Privacy Policy
1. Data controller
The controller of personal data collected through this website is Júlia Maria Carrega Fernandes, sole trader (empresária em nome individual), tax number (NIF) 210196653, with tax domicile at Quinta Ponte da Meimoa, Estrada Municipal do Salgueiro, 6230-145 Capinha, Portugal, operator of the accommodation Quinta Ponte da Capinha (RNET 6004), marketed under the brand Nomadland Capinha.
Property address: Estrada Municipal do Salgueiro, Capinha, 6230-145 Fundão, Portugal. Tourism registration RNET 6004.
Privacy contact: geral@nomadlandgroup.com · +351 962 812 497. No data protection officer has been appointed, as one is not required for our activity; privacy questions can be sent to the contact above.
2. What we collect and why
Accommodation booking: name, email address, phone number, stay dates, number of guests and any notes you send us. We use these to manage the booking, communicate with you and prepare your arrival.
Payment: card details are entered and handled directly by Stripe. We never receive or store card numbers. We keep only the payment session reference, amount and payment status.
Technical data: the site's hosting logs requests to the server (including IP address, date and time, requested address and response); the database logs the technical access made by the site; and, when an error occurs in your browser, an error report is sent to Lovable (see section 4). This data is used only for the security, operation and diagnosis of the site. We use no traffic analytics or advertising tools.
3. Legal basis
Performance of a contract (GDPR art. 6(1)(b)) to manage your booking and payment.
Legal obligation (art. 6(1)(c)) for tax, invoicing and guest registration duties in Portugal.
Legitimate interest (art. 6(1)(f)) in the security and operation of the website, as described in section 2 regarding technical data.
Consent (art. 6(1)(a)) when you contact us on your own initiative and when you choose to load the Google map (section 5). We do not send promotional communications and the site has no marketing sign-up; should that change, we will ask for your consent beforehand.
4. Processors acting on our behalf
These providers process personal data on our instructions and under a data processing agreement.
NOMADLAND, LDA, tax number (NIPC) 519366972, Rua Tierno Galvan, Torre 3, Sala 206A, 1070-274 Lisboa, Portugal — management of bookings, the back office and guest communications on the operator's behalf.
Stripe Payments Europe, Limited (Ireland) — payment processing.
Supabase — hosting of the bookings database, in the EU Frankfurt region (Germany). Where the provider accesses data from outside the EU, those transfers rely on the mechanisms provided for in the GDPR (EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework).
Lovable — website hosting and delivery, through a global delivery network. Any transfers outside the EU rely on the mechanisms provided for in the GDPR (EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework).
Application error reporting: when an error occurs in your browser, the site sends the technical details of that error to Lovable, the platform hosting the site, for diagnosis. The error message and technical trace, the address of the page where it occurred and technical request data (such as IP address and browser type) are sent. Retention follows Lovable's policy.
Resend — sending booking confirmation emails (sender reservas@portugalhomebase.com). Any transfers outside the EU rely on the mechanisms provided for in the GDPR (EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework).
We do not sell or share personal data with third parties for marketing purposes.
5. Third parties whose content the site loads
These providers do not process data on our behalf. When your browser fetches content from their servers, it contacts those servers directly, so they receive your IP address and other technical request data (such as browser type and referring page) and process it as controllers in their own right, under their own privacy policies.
Google Fonts (fonts.googleapis.com and fonts.gstatic.com) — the site's typefaces.
Google Maps — the location map. It loads only after you click "Show map (Google Maps)"; until then, no data is sent to Google this way.
Google Search Console — the site carries an ownership verification tag; it loads no further content through it.
Squarespace CDN (images.squarespace-cdn.com) — gallery photographs.
Legal basis: legitimate interest (GDPR art. 6(1)(f)) in presenting the website, for Google Fonts and the Squarespace CDN; consent (art. 6(1)(a)), given by that click, for Google Maps.
6. Retention periods
Booking data and invoicing documents: 10 years, to meet legal tax and accounting obligations.
Enquiries with no booking attached: 12 months.
Data used for marketing emails (name and email): for as long as your consent lasts, or until you unsubscribe; after that we keep only the record of the unsubscribe, so that we do not email you again.
Technical website logs: for the periods set by the hosting providers, only for security and diagnosis.
7. Your rights
You may request access to, correction, erasure, restriction or portability of your data, and object to certain processing.
To exercise these rights, write to geral@nomadlandgroup.com. We reply within one month at the latest.
You also have the right to lodge a complaint with the Portuguese supervisory authority, CNPD (www.cnpd.pt).
8. Cookies and local storage
First-party cookie "tof_lang": stores only your language choice (value "pt" or "en"), so the page is served in the right language from the very first load. Duration: 1 year. It is strictly necessary for the operation of the site and is not used for analytics or advertising.
The same language value is also kept in your browser's local storage, for the same purpose. You can delete both at any time in your browser settings.
The site uses no analytics or marketing cookies. Google Maps may set its own cookies, but only after you choose to load the map.
9. Marketing emails
We only send offers and news by email to people who agreed to it by ticking the option (unticked by default) on the booking form. Legal basis: consent (GDPR art. 6(1)(a)).
We may also send past guests information about services similar to those they used, under Portuguese Law 41/2004, always with a simple, free way to refuse.
Every marketing email includes a one-click unsubscribe link. You can also unsubscribe at any time by writing to geral@nomadlandgroup.com. Unsubscribing does not affect the emails needed for your booking.
10. Changes
This policy may be updated. The version in force is the one published on this page. Last updated: 16 October 2026.