Privacy policy

Last updated: 8 November 2026.

Who we are

The controller of the personal data collected on this site is Duna São Roque, restaurante bar, unipessoal Lda., tax number (NIPC) 506 528 600, registered at Estrada de São Roque, Meia Praia, 8600-315 Lagos, Portugal, which runs the São Roque restaurant. For any question about your data, write to [email protected].

Bookings

Bookings made on this site are recorded through the DISH reservation system (Hospitality Digital GmbH), which provides this service to us. We use the name, contact details, date, time, party size and notes you give us only to manage your booking: record it, confirm it, contact you about it and let you change or cancel it. We do not use these details for advertising. DISH has its own privacy policy, available in the booking form.

Contacting us

If you contact us by phone, email or social media (for example about groups and events), we use the details you give us only to reply and deal with your request.

Job applications

If you apply for a job at São Roque (“Work with us” page), we use the details you send us by email, including your CV, only to assess your application and contact you about recruitment, at your request (steps prior to a contract). If you are not hired, we keep your application for 12 months so we can consider it for future vacancies, and then delete it. You can ask us to delete it sooner at any time. Please do not send us information that is not needed for the application.

Legal basis

We process booking and request data to respond to what you ask and to provide the restaurant service (steps prior to a contract and performance of the contract). Visit statistics are only collected with your consent, which you can withdraw at any time.

How long we keep data

We keep data only for as long as needed to manage the booking or request, and then for any period the law requires us to keep it.

Service providers

The site is hosted by Cloudflare, which logs technical visit data (such as the IP address) for security and operation. The site’s fonts are loaded from Google’s servers (Google Fonts), which receive the visitor’s IP address. These providers may process data outside the European Economic Area under the safeguards provided by the General Data Protection Regulation.

Cookies and statistics

The site only stores your cookie choice in your browser. If you accept, we use Google Analytics to count visits and see which pages are viewed; Google Analytics sets statistics cookies that may last up to 2 years. If you decline, Google Analytics is not loaded. The DISH booking form may use its own cookies needed for it to work. You can change your choice at any time under “Cookie preferences” at the bottom of every page.

Video surveillance

The restaurant has a clearly signposted video surveillance system to protect people and property. Footage is viewed only by authorised persons, kept for 30 days and then deleted, unless it is needed in criminal proceedings, in which case it may be handed to the authorities. The legal basis is our legitimate interest in the safety of the premises, our guests and our staff.

Your rights

You may request access to, rectification, erasure or restriction of your data, object to its processing and request portability by writing to the email above. You may also complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).