Privacy Policy
What data we process, why, who we share it with, how long we keep it, and how you can have it deleted.
Last updated:
1. Who is responsible for your data
WORLDOUBTS, LDA., company number (NIPC) 517 407 213 and registered office at Rua da Madeira, n.º 150, 4000-330 Porto, Portugal, is the controller of the personal data collected through this website.
For any privacy question, or to exercise your rights, write to info@fadonoporto.pt or by post to the registered office address.
2. What data we may process
Depending on how you use the website:
- Booking and contact data: name, phone, email, date, time, number of people and whatever you write in the booking request.
- Communication data: whatever you include in emails, WhatsApp messages or phone contacts.
- Technical and browsing data: IP address, online identifiers, device and browser information, language, pages visited, campaign source, navigation events and your privacy preferences.
- Special requests you tell us in the context of a booking, such as accessibility needs.
Through this website we do not ask for health data, allergies, beliefs or other special categories of data. Please do not write that kind of information into free-text fields. If you have an allergy or a specific need, talk to us by phone.
3. For what purposes, and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Answering contacts and information requests | Contact details and message | Pre-contractual steps, or legitimate interest in replying |
| Managing, confirming or changing bookings | Booking and contact details | Pre-contractual steps and performance of the customer relationship |
| Security, fraud prevention and technical operation | Strictly necessary technical data | Legitimate interest and legal obligations |
| Loading the booking module, when you ask for it | Technical data, IP address | Consent, given by pressing “Book now” |
| Measuring how the website is used | Navigation and events | Consent |
| Measuring conversions from Google Ads Search and Meta campaigns | Online identifiers, navigation and campaign events | Consent |
| Meeting legal obligations and responding to authorities | Whatever the case requires | Legal obligation |
Consent is optional and can be withdrawn at any time through , in the footer of every page. Withdrawal does not affect what was done before.
4. Who we share it with
This website was built from scratch, with no content management system and no third-party components on the page. Until you allow something, your browser contacts no other domain. The photographs, the typefaces and the code are all served from this site’s own address. Delivery goes through Cloudflare, which we describe in the table below.
Depending on your choices, the following may be involved:
| Who | What for | When |
|---|---|---|
| Hostinger | Website hosting and server logs | Always. It is what lets the site exist |
| Cloudflare | Website delivery network and security. It receives your IP address and the address you requested, because all traffic to this site passes through it before reaching our server | Always. It is the path the site reaches you by |
| CoverManager, as processor | Booking requests and management, on our behalf and on our instructions | Only after you load the booking module |
| Google (Analytics, Ads, Tag Manager) | Measuring visits, campaigns and conversions | Only with analytics or marketing consent |
| Microsoft (Clarity) | Session recording, to see where people get lost | Only with analytics consent |
| Meta (Facebook, Instagram, WhatsApp) | Campaign measurement; and WhatsApp when you choose to talk to us there | Only with marketing consent, or when you click WhatsApp |
| Public bodies and authorities | Where disclosure is required by law | Where applicable |
Microsoft Clarity records your browsing session: mouse movements, clicks and page scrolling. It does not record what you type into form fields. This recording only happens if you allow the analytics cookie category.
5. Transfers outside Europe
Cloudflare is a United States company and is the route by which this website is delivered to you, so it processes your IP address and the address you requested every time you visit the site, whatever you allow. Google, Microsoft and Meta may process data, or allow access to data, outside the European Economic Area, but only according to your choices. In every case we ensure that legally valid mechanisms are used, such as adequacy decisions, standard contractual clauses approved by the European Commission and, where necessary, supplementary measures.
You can ask for information about the applicable transfers through info@fadonoporto.pt.
6. Direct marketing
We do not send you marketing communications. The data we collect on the website, in contacts and in bookings is not used for campaigns, customer lists, custom audiences, lookalike audiences or remarketing.
We have no newsletter and no form of subscription. Should that change, we will publish information about it and collect the proper legal basis before sending anything at all.
7. How long we keep it
- Contacts without a booking: up to 12 months after the last interaction.
- Booking data: as long as needed to manage it and up to 24 months after the date of the booking.
- Measurement and campaigns based on consent: the period set in each tool and stated in the Cookie Policy, or until you withdraw consent, whichever comes first.
- The record of your privacy preferences: as long as needed for us to show that we respected your choice.
- Data subject to a legal obligation: the applicable legal term.
These periods may be extended where necessary to establish, exercise or defend a right in legal or equivalent proceedings.
8. Your rights
Under the GDPR you may request access, rectification, erasure, restriction, objection and portability of your data, on the terms the law allows. You may also withdraw consent wherever consent is the basis.
To exercise any of these rights, write to info@fadonoporto.pt. We may ask you for reasonable information to confirm your identity.
You also have the right to complain to the Comissão Nacional de Proteção de Dados, the Portuguese data protection authority, at cnpd.pt.
10. Security
We apply technical and organisational measures appropriate to the risk, to protect data against destruction, loss, alteration, disclosure or unauthorised access. No transmission over the internet is entirely free of risk, so you should avoid sending sensitive information by email.
11. Changes to this policy
We may update this policy to reflect legal, technical or operational changes. The version in force is always on this page, with its date. If we add providers or materially different purposes, we will ask for your consent again.