Privacy policy
Last updated: August 4, 2026.
Data controller
The controller is Camino Galicia, based in Redondela (Pontevedra, Spain). Write to caminogalicia.pt@gmail.com with any question about your data.
The controller’s tax number and full registered address are still to be added.
What we collect
Booking request: full name, email address, phone number, start date, number of travellers, accommodation type and any message you add.
Contact form: name, email address, phone (optional), subject and message.
Technical data attached to the submission: IP address, browser and timestamp, kept as evidence of consent and to prevent automated abuse of the forms.
We do not collect special category data (health, beliefs, religion) and we never ask for payment details on this website.
Why we use it, and on what legal basis
To handle your booking request and prepare a quote: performance of a contract, or pre-contractual steps taken at your request.
To answer your contact messages: your consent, given when you submit the form.
To prevent form abuse and keep proof of consent: our legitimate interest in the security of the service.
We do not use your data to send you marketing, and we do not sell or share it with third parties for commercial purposes.
How long we keep it
Booking requests are kept for the duration of the relationship and then for the statutory limitation periods applying to contractual and tax obligations.
Contact messages that do not lead to a booking are kept only as long as needed to deal with them.
Who else has access
We work with providers acting as data processors, who only handle data on our instructions: Vercel Inc. (site and application hosting), Supabase (database) and the email provider we use to send your confirmation and correspond with you.
Some of these providers may process data outside the European Economic Area. Where that happens, transfers rely on the standard contractual clauses approved by the European Commission.
We take encrypted database backups on a weekly rotation, as a security and continuity measure.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to caminogalicia.pt@gmail.com, stating which right you wish to exercise.
You may also withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
If you believe we have not handled your request properly, you may complain to the Spanish Data Protection Agency (www.aepd.es).
Cookies
This website uses no advertising or third-party analytics cookies. Only strictly necessary ones are used, such as the cookie that keeps you signed in to the admin panel, which are exempt from the prior consent requirement.
If analytics or third-party cookies are added in future, this policy will be updated and your consent will be requested.