Your data, in confidence.

Who is responsible for your data

We are the data controller for the personal data described below. There is no separate data protection officer; enquiries reach Anna Kovarbasic directly at the address above.

What we collect

Information you give us

When you express interest, join the waitlist or get in touch through the forms on this site, we receive the details you choose to enter — typically your name, email address, city, a description of your work, and your answers to the open questions about what draws you to Entre Nous. The waitlist form asks only for your name and email.

If you write to us by email or WhatsApp, we hold that correspondence and anything you share in it. Where you become a confirmed guest, we also process the practical details needed to host you well: travel and arrival information, dietary requirements or allergies, and any accessibility needs you tell us about. Health-related details such as allergies are special-category data, processed only with your explicit consent and shared only with the people who need them to keep you safe.

Information collected automatically

Our hosting provider records standard technical data when you visit — IP address, browser and device type, pages requested and timestamps — to serve the site and protect it from abuse. We do not use analytics, advertising or tracking cookies, and we do not build profiles of visitors.

The typefaces on this site are loaded from Google Fonts, which means your IP address is transmitted to Google in order to deliver them.

Why we use it, and on what legal basis

• To reply to you and have a conversation about the gathering — our legitimate interest in responding to an enquiry you initiated, and the steps taken at your request before any agreement (Art. 6(1)(f) and 6(1)(b) GDPR).
• To curate the group — reading your answers to understand whether the gathering is a good fit for you and for the room, on the basis of your consent in submitting them and our legitimate interest in a considered selection.
• To organise and host a gathering you have booked — performance of our agreement with you (Art. 6(1)(b)), including sharing what is necessary with the villa, hosts and partners involved.
• To keep you informed about future editions — only where you asked us to, such as by joining the waitlist, on the basis of your consent (Art. 6(1)(a)), which you may withdraw at any time.
• To meet legal and accounting obligations — compliance with Portuguese tax and commercial law (Art. 6(1)(c)).
• To keep the site secure — our legitimate interest in preventing spam and abuse, including the hidden anti-spam field on our forms.

We do not sell your data, we do not share it for advertising, and we do not make automated decisions about you.

Who processes it on our behalf

We keep our suppliers few and deliberate. The site and its forms are hosted by Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, USA), which stores form submissions and server logs for us. Our email correspondence sits with our email provider. Where a confirmed gathering requires it, we pass the minimum necessary details to the accommodation, hosts and experience partners for that edition, and to our accountant for invoicing.

Some of these providers are established in the United States. Transfers outside the European Economic Area are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.

How long we keep it

• Expressions of interest and enquiries — for as long as the conversation is live, and up to 24 months afterwards so that we can pick it up again for a future edition. Sooner if you ask us to delete it.
• Waitlist details — until you unsubscribe or ask to be removed.
• Guest and booking records — for the duration of the gathering and the period in which claims may be brought.
• Invoices and accounting records — for ten years, as Portuguese law requires.
• Server logs — for the short retention period applied by our hosting provider.

Your rights

Under the GDPR you may ask us at any time to give you access to the personal data we hold about you, correct it, delete it, restrict how we use it, or provide it in a portable format. You may object to processing based on our legitimate interests, and withdraw any consent you have given — withdrawal does not affect what was lawful beforehand.

Write to anna@stayentrenous.com and we will respond within one month. If you believe we have handled your data poorly, you are entitled to complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134 — 1.º, 1200-651 Lisboa, www.cnpd.pt, or to the authority where you live.

Security

The site is served over HTTPS, access to form submissions and correspondence is limited to Anna Kovarbasic, and accounts are protected by strong authentication. No transmission over the internet is ever entirely without risk, and we ask you not to send sensitive information you would rather we did not hold.

Children

Entre Nous gathers adults. This site is not directed at anyone under 18, and we do not knowingly collect their data.

Changes to this policy

If we change how we handle personal data, we will update this page and the date above. Material changes affecting people already in touch with us will be communicated directly.

Questions

Write to anna@stayentrenous.com — every message is read personally.

← Back to the site