Privacy Policy

Privacy Policy & Cookies


Chilli Boy is committed in protecting your privacy and this privacy policy (“Privacy Policy”) explains how we collect, process, use or disclose personal information about you, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – “GDPR”).

The reading registration of this document declares that it authorizes Chilli Boy to store its data, guaranteeing that the use of its website, respects the current norms regarding privacy policy.

If you have any questions about privacy or data protection, please contact us at



This Privacy Policy applies to the website (the “Site”) and generally to the use of your personal information by Chilli Boy as customer of our resort or of it’s business units. From time to time, Chilli Boy  will update this Privacy Policy. We would like to ask you to periodically review this document to keep aware of any relevant changes.

The Privacy Police does not apply to other third-party website that are not operated by Chilli Boy and that you may reach through links on this Site. If you access other third-party sites using the links founded on our Site, the operators of these sites may collect personal information from you which will be used by them in accordance with their privacy policy, which will differ from ours.

Processing of personal information you share with or provide to third-parties is not covered by this Privacy Policy. We recommend that you read such third-parties’ privacy policies before sharing information with them.


The visit to this website is not conditioned on the registration of personal data that identifies the user. However, the use of certain content may imply the availability of personal data.


We or our service providers process your Information either on computer systems on our premises or on computer systems of our service providers. These services providers, which have been contracted by us and assist us in providing the services to you, are located in the EU or the European Economic Area (“EEA”) and also at destinations outside the EU/EEA, the USA. Such destinations may not have laws which protect your Information to the same extent as in the EU/EEA. It may be processed by us or by our suppliers operating outside the EU/EEA, but we will ensure that your Information is treated securely and in accordance with this Privacy Policy and applicable data protection law.

We have implemented security policies, rules and technical measures to protect the Information that we have under our control from unauthorized access, improper use or disclosure, unauthorized modification and unlawful destruction or accidental loss.

Unfortunately, the transmission of Information via the Internet is not completely secure. Although we do our best to protect your Information, we cannot guarantee the security of your Information during transmission to our Site and any transmission is at your own risk. Once we have received your Information, we will use strict procedures and security features to try to prevent unauthorized access.

It is, however, your responsibility to ensure and ensure that the equipment you are using is adequately protected against harmful software and computer viruses, worms and / or malware.

We ensure that your Information will not be disclosed to regulators or authorities except where required by law or other regulation.



If we are required to disclose or share your Personal Information in order to comply with any legal obligations, or for the purpose of protecting the rights, property or safety of our business activity, our customers, or others; and

For the development of our activity it will recurrent that the contracted partner: WooCoommerce have access to or can store personal data for the purpose of managing reservations and sending communication regarding purchased services.



“Cookies” are pieces of information that are sent from a web server to your computer. They are hosted when you visit a website for the first time and can be used later by the web site operator for information when you return to that web site. We use Cookies for the technical administration of the Site, to estimate the size of our public and display standard, to store information about your preferences, to allow us to customize the Site according to your personal interests and traffic monitoring. Please refer to our Cookies Policy on Cookies and how we use them and how you can deactivate them. For more information about cookies, you can visit:



We will process and use your Personal Data only and as long as it is required to use it for the purpose for which we collect or receive it.
If we are required by law to retain this Personal Data for a longer period of time, we will block the information and only process and use it for the purposes of such retention. After the applicable statutory retention period has lapsed, the affected Personal Data will be deleted.



We do not knowingly collect information from children under 18 years old of age.



At any moment, you may request Chilli Boy for:

  • Access to the information we hold on you;
  • Rectification of the information if the data we hold is inaccurate or incomplete;
  • Deleting or limiting the processing of your personal data;
  • If the processing of your data is relying on your consent, and if processes automatically, you have the right to portability of the personal data previously provided, in a structured, commonly used and in a computer readable form to another service provider.

Your requests will be handled according to the full extent of your rights, you may be asked to provide proof of your identity when requesting access to your personal data in order to ensure that the information is provided to the rightful owner.

You have also the right to submit a complaint to the “Comissão Nacional de Proteção de Dados“


Right of access

The holder of the personal data has the right to obtain from Chilli Boy the confirmation that the data concerning him are treated or not and, if appropriate, to access his personal data and access the information provided by law.


Right of rectification

The holder of the personal data has the right to obtain from Chilli Boy without undue delay the rectification of inaccurate or incomplete data concerning him.


Right to erase data (“right to be forgotten”)

The holder of personal data has the right to obtain from Chilli Boy the deletion of their data, without undue delay, Chilli Boy is obliged to delete personal data without undue delay, where it applies, in particular to one of the following reasons:

  • Personal data is longer necessary for the purpose for which it was collected or processed;
  • The consent holder has withdrawn his consent for the processing of data (in cases where treatment is based on consent) and there is no other basis for such treatment;
  • The holder opposes the treatment and there are no prevailing legitimate interests justifying the treatment;


Right to limit treatment

The holder of personal data has the right to obtain from Chilli Boy the limitation of the treatment if one of the following applies in particular:

  • To Contest the accuracy of the personal data, during a period that allows Chilli Boy to verify its accuracy;
  • The processing of data is lawful and the data owner opposes the erasure of personal data and requests, on the other hand, the limitation of its use;
  • Chilli Boy no longer needs personal data for treatment purposes, but these data are required by the holder for the purposes of declaration, exercise or defense of a right in a judicial process;
  • If he opposes the processing until it is established that the legitimate grounds of the controller prevail over those of the data holder.


Right of data portability

If the processing depends on the consent of the data holder and such consent has been provided by automated means, the data holder has the right to receive the personal data concerning him and which he has provided to Chilli Boy in a structured, easily readable format.


Right of opposition

In cases where the processing of data is carried out for the purpose of the legitimate interests pursued by Chilli Boy; or the processing of data is done for the purposes of direct marketing or definition of profiles, the data holder can still, at any time, oppose the treatment of the holder’s personal data.



If consent is legally required for the processing of personal data, the data holder has the right to withdraw consent at any time, although that right does not compromise the lawfulness of the treatment made on the basis of the prior consent given or the subsequent processing of the same data, based on another legal basis, such as compliance with the contract or legal obligation to which Chilli Boy is subject.

If you wish to withdraw your consent, you can contact us at