Privacy and Cookie Policy

1. Data controller

The controller of your personal data is [TO COMPLETE: controller name / legal entity], located at R. Parigot de Souza, 180 – Vila Yolanda, Foz do Iguaçu – PR, 85853-270, Brazil.

For privacy and data protection matters, contact us at [TO COMPLETE: privacy contact e-mail].

2. Data we collect

We only collect the data needed to assist you and run the site:

• Contact data: name, e-mail, phone/WhatsApp and the content of the messages you send us.
• Booking data: check-in and check-out dates, number of guests and stated preferences.
• Browsing data: IP address, device and browser type, pages visited and interactions, collected through cookies and similar technologies.

3. How we use the data

• Respond to your contact and provide support.
• Process and manage bookings and requests.
• Improve the site, our services and your browsing experience.
• Show more relevant content and offers (when you consent).
• Comply with legal and regulatory obligations.

4. Cookies and similar technologies

We use cookies grouped into three categories, consistent with the consent banner shown on the site:

• Necessary: essential for the site to work (navigation, language and security). Always on.
• Analytics: help us understand how the site is used, in an aggregated and anonymous way, to improve it.
• Marketing: used to show ads and content that are more relevant to you.

On your first visit, a banner lets you accept all, reject non-essential ones or configure by category. You can change your choice at any time via the “Cookie preferences” link in the footer. We use Google Consent Mode: without your consent, analytics and marketing tags remain blocked.

5. Third-party tools

To run the site and measure results, we use third-party services that may process data under their own privacy policies:

• Google Analytics (via Google Tag Manager): audience measurement and site usage.
• Meta Pixel (Facebook/Instagram): measurement and optimization of advertising campaigns.
• Asksuite: support chatbot to answer questions and assist with bookings.

Analytics and marketing tools are only activated after your consent.

6. Legal basis for processing

• Consent: for cookies and analytics and marketing tools.
• Performance of a contract and preliminary steps: to process bookings and requests.
• Legitimate interest: for security, fraud prevention and site improvement.
• Compliance with legal or regulatory obligations.

7. Data sharing

We do not sell your personal data. We may share it only with service providers that support us (such as the tools listed above), with booking/payment partners where applicable, and with authorities when required by law.

8. Data retention

We keep your data only for as long as necessary for the purposes described in this Policy or to comply with legal obligations, after which it is deleted or anonymized.

9. International transfer

Some providers (for example, Google and Meta) may process data outside Brazil. In such cases, appropriate safeguards are applied to protect your data.

10. Your rights as a data subject (LGPD)

Under Article 18 of the LGPD, you may, at any time:

• Confirm that processing exists and access your data.
• Correct incomplete, inaccurate or outdated data.
• Request anonymization, blocking or deletion of unnecessary or excessive data.
• Request data portability.
• Request deletion of data processed based on consent.
• Obtain information about who we share your data with.
• Withdraw consent at any time.

To exercise your rights, write to [TO COMPLETE: privacy contact e-mail].

11. Security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss or misuse.

12. Changes to this Policy

We may update this Policy from time to time. The last updated date is shown at the top of this page.

13. Contact

Controller/Data protection officer: [TO COMPLETE: controller name / legal entity]. E-mail for privacy matters: [TO COMPLETE: privacy contact e-mail].