I. GENERAL PART
1.1 COLLECTION AND PROCESSING OF CUSTOMER DATA
The protection of privacy and personal data is a fundamental commitment of Chalet do Lago to its Customers. This Privacy Policy regulates the collection, processing or transmission of personal data provided by Chalet do Lago Customers, as well as the exercise of their rights in relation to this data, under the terms of Regulation (EU) 2016/679, of the European Parliament and of the Council, of April 27, 2016, which will come into force on May 25, 2018. Chalet do Lago collects data directly, namely from the Client, in person, by telephone, by email or through the Website.
1.2. THE RESPONSIBLE FOR DATA PROCESSING AND THE DATA PROTECTION OFFICER
The person responsible for collecting and processing your personal data will be Chalet do Lago, which provides hotels, restaurants, bars, leisure facilities, gym rooms, water health treatment rooms, games rooms, excluding those of fortune and chance, conference rooms, spaces for commerce or services, car parking and the organization of all kinds of activities and tourist events and which in this context decides which data is collected, means of treatment and purposes for which the data is used . Chalet do Lago also has a Data Protection Officer (DPO), who (i) monitors the compliance of data processing with applicable regulations, (ii) is a point of contact with the Customer for clarification of issues relating to the processing of your data and (iii) cooperate with the supervisory authority.
1.3. PERSONAL DATA, PERSONAL DATA HOLDERS AND PERSONAL DATA CATEGORIES
Personal Data is any information relating to an identified or identifiable natural person (data subject) of any nature and in any medium. The Personal Data collected and processed by Chalet do Lago essentially consist of information relating to name, gender, date of birth, telephone, mobile phone, email, address, tax identification number, your consumer profile, and others may be collected. Personal Data that may be necessary or convenient for the provision or billing of services provided by Chalet do Lago
1.4. SUBCONTRACTED ENTITIES
Within the scope of processing Customer Data, Chalet do Lago resorts or may resort to third parties, subcontracted by itself, to, on its behalf, and in accordance with the instructions given by it, proceed with the processing of Customer Data, in in accordance with the law and this Privacy Policy. However, these subcontracted entities may not transmit Customer Data to other entities without Chalet do Lago having given prior written authorization to do so, and are also prohibited from contracting other entities without prior authorization from Chalet do Lago. Since the privacy of our Clients is a fundamental commitment for Chalet do Lago, Chalet do Lago assumes the commitment to only subcontract entities that offer maximum security in the execution of the appropriate technical and organizational measures, in order to guarantee the defense of the Customer rights. All entities subcontracted by Chalet do Lago are bound to the latter by means of a written agreement which regulates, namely, the object and duration of processing, the nature and purpose of processing, the type of personal data, categories of holders data and the rights and obligations of the parties. After collecting personal data, Chalet do Lago provides the Customer with information about the categories of subcontracted entities that, in the specific case, can process data on their behalf.
2. GENERAL PRINCIPLES APPLICABLE TO CUSTOMER DATA PROCESSING
Chalet do Lago undertakes to ensure that the Customer Data processed by it is:
i) Object of treatment in accordance with the law, fair and transparent in relation to the Customer;
ii) Collected for specific, objective and legitimate purposes, not being further processed in a manner contrary to those purposes;
iii) Adequate and limited to the purposes for which they are treated;
iv) Accurate and updated whenever necessary, with all necessary measures being taken to ensure that inaccurate data, taking into account the purposes for which they are processed, are erased or corrected without delay;
v) Kept in a way that allows the Customer to be identified only for the period necessary for the purposes for which the data are processed;
vi) Treated in a way that guarantees its security, including protection against its unauthorized or illegal treatment and against its loss, destruction or unforeseen damage, with the adoption of appropriate technical or organizational measures.
Data processing carried out by Chalet do Lago are allowed and legal when at least one of the following situations is verified:
The Client has freely, specifically, informedly and explicitly given his consent to the processing of his personal data for one or more specific and determined purposes;
Processing is necessary for the fulfillment of a contract to which the Customer is a party, or for pre-contractual procedures at the Customer's request;
The treatment is necessary for the fulfillment of a legal obligation to which Chalet do Lago is subject;
The processing is necessary for the defense of fundamental interests of the Client or another individual;
The treatment is necessary for the purpose of the legal interests pursued by Chalet do Lago or by third parties (except if the interests or fundamental rights and freedoms of the Client that require the protection of personal data prevail).
Chalet do Lago undertakes to ensure that the processing of Personal Data is only carried out under the conditions listed above and with respect for the principles mentioned above. When the processing of Personal Data is based on the Customer's consent, the Customer has the right to withdraw consent at any time. The withdrawal of consent, however, does not compromise the legality of the treatment carried out until then by Chalet do Lago based on the previously given consent. The period of time during which the data is stored and maintained varies according to the purpose for which the information is processed. Indeed, there are legal requirements that oblige the retention of data for a minimum period of time. Thus, and whenever there is no specific legal obligation, the data will be stored and kept only for the minimum period necessary for the purposes that motivated its collection or subsequent processing, which at the end of the period will be deleted.
3. USE AND PURPOSES OF PROCESSING CUSTOMER DATA
In general terms, Chalet do Lago uses Personal Data for the following purposes: Provision of hotel services, restaurants, bars, leisure facilities, gym rooms, health treatment rooms using water, game rooms, excluding those of fortune and chance, conference rooms, spaces intended for commerce or services, parking cars and the organization of all kinds of tourist activities and events; Customer contact management; Customer billing and collection; Customer registration on the Site; Inform the Customer, who has requested it, of new services made available, special offers and campaigns, updated information about its activity and, in general, for marketing purposes of Chalet do Lago and its developments, through any means of communication. communication, including electronic support; Provision of Services, such as newsletters, opinion surveys, or other information or services provided or treatments carried out to the Customer.
4. TECHNICAL, ORGANIZATIONAL AND SAFETY MEASURES IMPLEMENTED
To guarantee the security of Customer Data and maximum confidentiality, Chalet do Lago treats information in an absolutely confidential manner, committing to apply the necessary and appropriate technical and organizational measures to protect Personal Data and comply with legal requirements. Chalet do Lago also undertakes to ensure that only the data that is necessary for each specific purpose of the treatment are processed. Communication between the Client's device and the Chalet do Lago Website is carried out through secure channels and communications using the HTTPS protocol and the SSL security standard. In general terms, Chalet do Lago adopts the following measures to implement the rules and principles established by the Data Protection Regulation: Regular audits with a view to identifying the competence of the technical and organizational measures implemented; Raising awareness and training of personnel involved in data processing operations; Pseudonymization and coding of personal data; Mechanisms capable of ensuring the permanent confidentiality, availability and resilience of information systems; Mechanisms that ensure the restoration of information systems and access to personal data quickly in the event of a physical or technical incident. 5. USE OF COOKIES When you visit our Site, your consent will be required for the creation and recording on your computer of a text file (Cookie). This file will allow you to access the Site more easily and quickly, as well as customize it according to your preferences. Most browsers accept these files (Cookies), but the Client can delete them or automatically define their blocking. In your browser's "Help" menu, you will find how to make these settings. However, if you do not allow the use of cookies, there may be some features of the Site that you will not be able to use.
II. RIGHTS OF CUSTOMERS (DATA HOLDERS)
6. RIGHT TO INFORMATION
Information provided to the Client by Chalet do Lago (when data is collected directly from the Client): The identity and contacts of Chalet do Lago, responsible for the treatment; Contacts of the Data Protection Officer; The purposes of the treatment for which the personal data are intended, as well as, if applicable, the legal reasons for the treatment; If data processing is based on legitimate interests of Chalet do Lago or a third party, indication of such interests; If applicable, the recipients or categories of recipients of the personal data; Period of retention of personal data; The right to request permission from Chalet do Lago for personal data, as well as its correction, deletion or limitation, the right to object to the processing and the right to data accessibility; If the processing of data is based on the consent of the holder of the same, the right to withdraw it at any time; The right to lodge a complaint with the CNPD or another supervisory authority;
7. RIGHT OF ACCESS TO PERSONAL DATA
The Customer has the right to obtain confirmation from Chalet do Lago that the personal data concerning him or her are being processed and, if applicable, the right to access their personal data. Upon request, Chalet do Lago will provide, free of charge, a copy of the Customer Data that is being processed. The provision of other copies requested by the Customer may incur administrative costs. 8. RIGHT TO RECTIFY PERSONAL DATA The Customer has the right to request, at any time, the rectification of their Personal Data and, as well as the right to have their incomplete personal data completed. In the event of rectification of data, Chalet do Lago will notify each recipient to whom the data has been transmitted of the respective rectification, unless such communication is considered impossible or implies a disproportionate effort for Chalet do Lago.
9. RIGHT TO DELETE PERSONAL DATA (“RIGHT TO BE FORGOTTEN”)
The Customer has the right to obtain, on the part of Chalet do Lago, the deletion of their data when one of the following reasons applies: Customer Data is no longer necessary for the purpose for which it was collected or processed; The Customer withdraws the consent on which the processing of data is based and there is no other legal basis for said processing; The Customer opposes the treatment under the right of opposition and there are no prevailing legitimate interests that justify the treatment; If Personal Data is processed illegally; Under the applicable legal terms, Chalet do Lago is under no obligation to delete Customer Data insofar as the processing proves necessary to comply with a legal obligation to which Chalet do Lago is subject or for the purposes of declaration, exercise or defense of Chalet do Lago's rights in any litigation. In the event of deletion of data, Chalet do Lago will notify each recipient/entity to whom the data has been transmitted of the respective deletion, unless such communication proves impossible or implies a disproportionate effort.
10. RIGHT TO PORTABILITY OF PERSONAL DATA
The Client has the right to receive the personal data concerning him and that he has provided to Chalet do Lago, in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller, whenever this is technically possible if: The treatment is based on consent or on a contract to which the Customer is a party; Processing is carried out by automated means.
11. PROCEDURES WITH A VIEW TO THE EXERCISE OF RIGHTS BY THE CUSTOMER
The right of access, the right of rectification, the right of deletion and the right of portability can be exercised by the Customer by contacting Chalet do Lago's Data Protection Officer, via email info@chaletdolago.com.
12. VIOLATIONS OF PERSONAL DATA
In the event of a breach of personal data, Chalet do Lago will notify the National Commission for Data Protection within 72 hours, and undertakes to communicate such breach to the Client, holder of the data in question.
III. FINAL PART
13. CHANGES TO THE PRIVACY POLICY
Chalet do Lago reserves the right to change this Privacy Policy at any time. In case of alteration, the date of the same is visible at the top of this page.
14. APPLICABLE LAW AND JURISDICTION
The Privacy Policy, as well as the collection, processing or transmission of Customer Data, are governed by the provisions of Regulation (EU) 2016/679, of the European Parliament and of the Council, of April 27, 2016 and by the applicable laws and regulations in Portugal. Any disputes arising from the validity, interpretation or enforcement of the Privacy Policy rivalry, or that are related to the collection, processing or transmission of Customer Data, must be submitted exclusively to the jurisdiction of the Judicial Courts of the District of Lisbon, without prejudice to the applicable mandatory legal rules.
