— Privacy —
Privacy policy
Last updated: May 2026
1. Data controller
The controller of personal data is:
- VILLA MORGANA RESORT
- Achada Batalha, 7215 Calheta de São Miguel, Cape Verde
- Email : Jocelyngomesgarcia@icloud.com
- Phone : +238 996 93 56
2. Data protection contact
For any question regarding the protection of your personal data, you can contact us at: Jocelyngomesgarcia@icloud.com
3. Data collected and purposes
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email, phone | Respond to your contact request | Consent (Art. 6.1.a GDPR) | 3 years after last contact |
| Browsing data (analytics cookies) | Audience measurement and site improvement | Consent (Art. 6.1.a GDPR) | 13 months maximum |
| Functional cookies | Display of maps and third-party content | Consent (Art. 6.1.a GDPR) | 13 months maximum |
4. Data recipients
Your personal data may be transmitted to the following recipients:
- Web3Forms — processing of contact forms (EU servers)
- Google Analytics — audience measurement (with IP anonymisation)
- Cloudflare — hosting and CDN
5. Transfers outside the EU
Some providers (Google, Cloudflare) may process your data in the United States. These transfers are governed by:
- The EU–US Data Privacy Framework (DPF) for certified companies
- The Standard Contractual Clauses (SCC) of the European Commission
These processing operations are only activated after your explicit consent via our cookie banner.
6. Your rights
In accordance with the GDPR, you have the following rights:
- Right of access — obtain a copy of your data
- Right to rectification — correct your data
- Right to erasure — delete your data
- Right to restriction — restrict processing
- Right to portability — receive your data in a structured format
- Right to object — object to processing
- Right to withdraw your consent at any time
To exercise these rights: Jocelyngomesgarcia@icloud.com
7. Supervisory authority
If you believe that the processing of your data constitutes a breach of the GDPR, you may lodge a complaint with the competent data protection authority:
- your national data protection authority — in the EU, the full list is available at edpb.europa.eu
You may also contact the data protection authority of your country of residence.