Privacy policy

What data we collect

Directly, no personal data at all. This site is made of static pages. There is no user registration, no shopping basket, no contact form, and we never ask for your name, email, phone number or payment details.

If you write to the published email address, we process the data in that message — typically your email address and what you wrote — for the sole purpose of replying to you. The lawful basis is our legitimate interest in responding to people who contact us.

Widgets and third-party content

To show live availability and prices, some pages embed widgets from our partner Tiqets. Those widgets load content directly from Tiqets’ servers, which means:

• Your IP address and technical browser information become visible to that third party, because that is technically necessary to deliver the content.
• The third party may use cookies or equivalent technologies under its own privacy policy.

To reduce that exposure, the widgets load only when they approach the visible area of your screen. If you never scroll to the section they sit in, the third-party code is never loaded.

Affiliate links

Ticket purchase links carry a partner identifier that lets the operator attribute a sale to this site. That identifier does not identify you personally and transmits none of your personal data to us: we receive only aggregated sales information. From the moment you click, the destination operator’s privacy policy applies.

Cookies

This site sets no first-party analytics, advertising or personalisation cookies. We use no behavioural tracking tools and build no user profiles.

Cookies may be set by the third-party widgets described above, when those widgets load. You can block them in your browser settings or with a blocking extension; the site continues to work, though the widgets will no longer show availability.

Hosting and technical logs

As with any website, the hosting service may keep automatic technical logs (IP address, date and time of request, page requested, browser type), generated by the normal operation of a web server and used for security and diagnostics. We do not cross-reference those logs with other information and we do not use them for advertising.

Your rights

Under the General Data Protection Regulation you have the right to request access to, rectification of or erasure of your personal data, restriction of or objection to processing, and data portability, as provided by law. Since we hold no user database, in practice these rights apply mainly to email messages you have sent us.

To exercise any of them, write to info@pena-palace.pt. You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.

Minors and changes

This site is intended for an adult audience planning travel and does not knowingly collect data from minors.

This policy may be updated. The version in force is the one published on this page, bearing the date at the top.