Your privacy is a priority for Villa Sarre. This Privacy Policy describes how we collect, use, share, store, and protect your personal information when you use our website and booking services, in compliance with the General Data Protection Law (LGPD) – Law nº 13.709/2018.

1. Information Collected

We collect the following categories of personal information directly from you:

Identification and Contact Data: Full name, email, phone number, and CPF (Brazilian individual taxpayer ID).

Address Data: Full address.

Payment Data: Information necessary to process payments, such as credit or debit card details.

Reservation Data: Information about accompanying guests, reservation preferences, and stay dates.

2. Purpose of Data Collection

We use the collected information for the following purposes:

Reservation Processing and Management: To process your reservations and manage your stay at Villa Sarre.

Communication: To send reservation confirmations, answer questions, and provide customer support.

Stay Personalization: To personalize your hosting experience according to your informed preferences.

Marketing and Promotions: To send promotions and newsletters about Villa Sarre, with your explicit consent, when applicable.

Service Improvement: To analyze website usage to enhance user experience and the quality of our services.

Legal Compliance: To comply with legal and regulatory obligations.

3. Data Sharing

For the operation of our services and the purposes described, we may share your personal information with the following third parties (data operators), under appropriate legal bases:

Payment Gateways: Payment data (credit/debit card) is shared with secure payment processors (e.g., Stripe, PayPal, PagSeguro – insert the specific names you use here), exclusively for the purpose of processing your reservation's financial transactions.

Hosting Provider: Hostinger (or the name of your hosting provider) acts as our hosting service provider and, therefore, may have access to data stored on our servers.

Analytics and Marketing Tools: Google (through Google Analytics 4 – GA4) receives website Browse and user behavior data for analytics and marketing purposes, helping us understand and improve our services.

Email Marketing Providers: If we use an external service for sending newsletters (e.g., Mailchimp, Sendinblue – insert the specific names you use here), your contact details (such as name and email) will be shared with these providers for the purpose of sending marketing communications, with your consent.

4. Data Storage and Security

Your personal information is stored on our own hosting, located in Bragança Paulista, State of São Paulo, Brazil. We employ the following security measures to protect your data:

SSL Certificate: To encrypt communication between your browser and our website.

Server Security: Server security measures to protect against unauthorized access.

Antivirus and Anti-hackers: Software tools to protect against malware and hacking attempts.

Security Policies: Implementation of internal policies to ensure the protection and proper handling of data.

Your personal data is stored only for the time necessary to fulfill the purposes for which it was collected or to comply with legal obligations, as per the LGPD. For example:

Reservation data: Retained for X years for accounting and tax purposes. (Define a period, e.g., 5 years, which is common for tax obligations).

Data for marketing: Retained as long as you maintain your consent, or until you request its deletion.

5. Data Subject Rights (LGPD)

In accordance with the LGPD, you, as the data subject, have the following rights:

Confirm the existence of data processing.

Access your personal data.

Correct incomplete, inaccurate, or outdated data.

Request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data.

Request data portability to another service or product provider.

Obtain information about data sharing.

Revoke consent, when applicable.

Object to data processing that violates the LGPD.

Request the deletion of personal data processed with your consent.

To exercise any of these rights, you may contact us via email: contato@villasarre.com.br.

6. Use of Cookies and Tracking Technologies

Our website uses cookies and tracking technologies to enhance your experience, analyze website usage, and for marketing purposes. Cookies are small text files stored on your device that help us recognize you and remember your preferences.
We use the following types of cookies:

Strictly Necessary Cookies: These cookies are fundamental for the basic functioning of the website and cannot be disabled. They include, for example, cookies that allow you to make a reservation.

Performance and Analytics Cookies: These cookies collect information about how visitors use the website (e.g., which pages are most visited), anonymously. We use Google Analytics 4 (GA4) for this purpose.

Functionality Cookies: These cookies allow the website to remember your choices (such as language or filter preferences) to provide an enhanced and more personalized experience.

Marketing and Advertising Cookies: Used to display ads more relevant to you and your interests.

When you visit our website, a cookie consent banner will be displayed, allowing you to manage your cookie preferences. You can accept all cookies, reject non-essential ones, or customize your choices. You can also manage or disable cookies directly in your browser settings at any time.

7. Contact Information of the Data Protection Officer (DPO)

The data protection officer (DPO) for Villa Sarre is:

Name: Elbert Biasioli

Contact Email: contato@villasarre.com.br

8. Minors

Our service is not directed at minors. We do not intentionally collect personal information from children. If we become aware that personal data of a minor has been collected without appropriate parental or guardian consent, we will take necessary steps to delete it.

9. Changes to the Privacy Policy

This Privacy Policy may be updated periodically to reflect new privacy practices or changes in legislation. Any relevant changes will be communicated to you via email, in addition to being published on this page. We recommend that you review this policy regularly to stay informed about how we are protecting your information.