Legal
Privacy policy
This site sets no cookies, runs no analytics and does not track you. This page explains the little data that does exist, why, and what you can demand about it.
- 01
Who is responsible for your data
The data controller is Joana Pinto & João Pinto, Lda, tax number 514442344, established at Rua Nova da Areia 24, 2450-257 Nazaré, Portugal, which operates Nazaré Hostel.
For any question about personal data, write to info@nazarehostel.pt or call +351 915 538 385 (call to a national mobile network).
- 02
Cookies: there are none
We set no cookies, use neither Google Analytics nor any other measurement tool, and do not track you across sites. Typefaces are served by us rather than by Google, so not even your visit to this page is reported to a third party.
The only thing stored in your browser is your answer to the privacy notice, so that we do not ask again on every page. It is not a cookie — it is never sent to any server — and it is strictly necessary, so it does not depend on consent.
The notice exists for one reason: the map on the contact page comes from OpenStreetMap, and loading it passes them your IP address. Until you allow it, the map does not load. You can change your mind at any time, under “privacy preferences” in the footer.
- 03
What data exists at all
Server logs. Whoever hosts the site keeps technical logs, for security and diagnostics, including IP address, date and time, page requested and browser. They are deleted automatically after a short period and are not used to identify you. Basis: legitimate interest in keeping the site up and secure (Article 6(1)(f) GDPR).
Contact form. If you write to us through the form, we process your name, email and message — only in order to reply. Basis: steps taken at your request prior to entering into a contract (Article 6(1)(b)).
- 04
When you book, the data goes elsewhere
Bookings are not made on this site. When you click to book, you are taken to the BananaDesk booking engine, a third-party company, where you enter your booking and, where applicable, payment details. That data is processed there, under BananaDesk’s own privacy policy.
We also receive bookings through Booking.com and Hostelworld. In those cases, those platforms collect your data and pass it to us so that we can prepare your stay.
Once a booking reaches us, we process the data needed to accommodate you — name, contact details, dates, identity document where the law requires it — on the basis of performing the contract (Article 6(1)(b)) and complying with legal obligations (Article 6(1)(c)).
- 05
Legal obligations we cannot waive
As an accommodation business in Portugal, we are required to report foreign guests to the immigration authority and to keep invoicing records for the period set by tax law. These processing activities do not depend on your consent and we cannot decline to carry them out.
- 06
Who we share with
Website hosting. The pages are served by web hosting infrastructure which, by its nature, processes the requests that reach it. TO CONFIRM: name the provider in use here.
Booking engine. BananaDesk, to manage availability and reservations.
Map. The contact page shows an OpenStreetMap map, and only once you allow it. Loading it makes your browser talk to OpenStreetMap’s servers, which therefore learn your IP address. It is the only third-party element embedded in the site.
WhatsApp. If you contact us through the WhatsApp button, the conversation takes place in that app and is subject to Meta’s privacy policy.
We do not sell, rent or hand your data to anyone for marketing purposes.
- 07
How long we keep it
Contact messages are deleted once they are no longer useful, and after two years at most. Booking and invoicing data is kept for the periods tax law imposes. Server logs last days, not months.
- 08
Your rights
You may ask us at any time for access to your data, correction of anything wrong, erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Write to info@nazarehostel.pt. We reply within one month.
If you believe we have not handled the matter properly, you may complain to the Portuguese data protection authority (CNPD), at www.cnpd.pt.
- 09
Changes
If this policy changes, the date at the foot of the page changes with it. If the change is significant — for example, if we ever start using measurement tools — it will be flagged visibly.
Last updated — 15 August 2026