I. GENERAL PART
1.1 COLLECTION AND PROCESSING OF CUSTOMER DATA
1.2. THE RESPONSIBLE FOR DATA PROCESSING AND THE DATA PROTECTION OFFICER
The person responsible for collecting and processing your personal data will be Chalet do Lago, which provides hotels, restaurants, bars, leisure facilities, gym rooms, water health treatment rooms, games rooms, excluding those of fortune and chance, conference rooms, spaces for commerce or services, car parking and the organization of all kinds of activities and tourist events and which in this context decides which data is collected, means of treatment and purposes for which the data is used . Chalet do Lago also has a Data Protection Officer (DPO), who (i) monitors the compliance of data processing with applicable regulations, (ii) is a point of contact with the Customer for clarification of issues relating to the processing of your data and (iii) cooperate with the supervisory authority.
1.3. PERSONAL DATA, PERSONAL DATA HOLDERS AND PERSONAL DATA CATEGORIES
Personal Data is any information relating to an identified or identifiable natural person (data subject) of any nature and in any medium. The Personal Data collected and processed by Chalet do Lago essentially consist of information relating to name, gender, date of birth, telephone, mobile phone, email, address, tax identification number, your consumer profile, and others may be collected. Personal Data that may be necessary or convenient for the provision or billing of services provided by Chalet do Lago
1.4. SUBCONTRACTED ENTITIES
2. GENERAL PRINCIPLES APPLICABLE TO CUSTOMER DATA PROCESSING
Chalet do Lago undertakes to ensure that the Customer Data processed by it is:
i) Object of treatment in accordance with the law, fair and transparent in relation to the Customer;
ii) Collected for specific, objective and legitimate purposes, not being further processed in a manner contrary to those purposes;
iii) Adequate and limited to the purposes for which they are treated;
iv) Accurate and updated whenever necessary, with all necessary measures being taken to ensure that inaccurate data, taking into account the purposes for which they are processed, are erased or corrected without delay;
v) Kept in a way that allows the Customer to be identified only for the period necessary for the purposes for which the data are processed;
vi) Treated in a way that guarantees its security, including protection against its unauthorized or illegal treatment and against its loss, destruction or unforeseen damage, with the adoption of appropriate technical or organizational measures.
Data processing carried out by Chalet do Lago are allowed and legal when at least one of the following situations is verified:
The Client has freely, specifically, informedly and explicitly given his consent to the processing of his personal data for one or more specific and determined purposes;
Processing is necessary for the fulfillment of a contract to which the Customer is a party, or for pre-contractual procedures at the Customer's request;
The treatment is necessary for the fulfillment of a legal obligation to which Chalet do Lago is subject;
The processing is necessary for the defense of fundamental interests of the Client or another individual;
The treatment is necessary for the purpose of the legal interests pursued by Chalet do Lago or by third parties (except if the interests or fundamental rights and freedoms of the Client that require the protection of personal data prevail).
Chalet do Lago undertakes to ensure that the processing of Personal Data is only carried out under the conditions listed above and with respect for the principles mentioned above. When the processing of Personal Data is based on the Customer's consent, the Customer has the right to withdraw consent at any time. The withdrawal of consent, however, does not compromise the legality of the treatment carried out until then by Chalet do Lago based on the previously given consent. The period of time during which the data is stored and maintained varies according to the purpose for which the information is processed. Indeed, there are legal requirements that oblige the retention of data for a minimum period of time. Thus, and whenever there is no specific legal obligation, the data will be stored and kept only for the minimum period necessary for the purposes that motivated its collection or subsequent processing, which at the end of the period will be deleted.
3. USE AND PURPOSES OF PROCESSING CUSTOMER DATA
In general terms, Chalet do Lago uses Personal Data for the following purposes: Provision of hotel services, restaurants, bars, leisure facilities, gym rooms, health treatment rooms using water, game rooms, excluding those of fortune and chance, conference rooms, spaces intended for commerce or services, parking cars and the organization of all kinds of tourist activities and events; Customer contact management; Customer billing and collection; Customer registration on the Site; Inform the Customer, who has requested it, of new services made available, special offers and campaigns, updated information about its activity and, in general, for marketing purposes of Chalet do Lago and its developments, through any means of communication. communication, including electronic support; Provision of Services, such as newsletters, opinion surveys, or other information or services provided or treatments carried out to the Customer.
4. TECHNICAL, ORGANIZATIONAL AND SAFETY MEASURES IMPLEMENTED
II. RIGHTS OF CUSTOMERS (DATA HOLDERS)
6. RIGHT TO INFORMATION
Information provided to the Client by Chalet do Lago (when data is collected directly from the Client): The identity and contacts of Chalet do Lago, responsible for the treatment; Contacts of the Data Protection Officer; The purposes of the treatment for which the personal data are intended, as well as, if applicable, the legal reasons for the treatment; If data processing is based on legitimate interests of Chalet do Lago or a third party, indication of such interests; If applicable, the recipients or categories of recipients of the personal data; Period of retention of personal data; The right to request permission from Chalet do Lago for personal data, as well as its correction, deletion or limitation, the right to object to the processing and the right to data accessibility; If the processing of data is based on the consent of the holder of the same, the right to withdraw it at any time; The right to lodge a complaint with the CNPD or another supervisory authority;
7. RIGHT OF ACCESS TO PERSONAL DATA
The Customer has the right to obtain confirmation from Chalet do Lago that the personal data concerning him or her are being processed and, if applicable, the right to access their personal data. Upon request, Chalet do Lago will provide, free of charge, a copy of the Customer Data that is being processed. The provision of other copies requested by the Customer may incur administrative costs. 8. RIGHT TO RECTIFY PERSONAL DATA The Customer has the right to request, at any time, the rectification of their Personal Data and, as well as the right to have their incomplete personal data completed. In the event of rectification of data, Chalet do Lago will notify each recipient to whom the data has been transmitted of the respective rectification, unless such communication is considered impossible or implies a disproportionate effort for Chalet do Lago.
9. RIGHT TO DELETE PERSONAL DATA (“RIGHT TO BE FORGOTTEN”)
The Customer has the right to obtain, on the part of Chalet do Lago, the deletion of their data when one of the following reasons applies: Customer Data is no longer necessary for the purpose for which it was collected or processed; The Customer withdraws the consent on which the processing of data is based and there is no other legal basis for said processing; The Customer opposes the treatment under the right of opposition and there are no prevailing legitimate interests that justify the treatment; If Personal Data is processed illegally; Under the applicable legal terms, Chalet do Lago is under no obligation to delete Customer Data insofar as the processing proves necessary to comply with a legal obligation to which Chalet do Lago is subject or for the purposes of declaration, exercise or defense of Chalet do Lago's rights in any litigation. In the event of deletion of data, Chalet do Lago will notify each recipient/entity to whom the data has been transmitted of the respective deletion, unless such communication proves impossible or implies a disproportionate effort.
10. RIGHT TO PORTABILITY OF PERSONAL DATA
The Client has the right to receive the personal data concerning him and that he has provided to Chalet do Lago, in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller, whenever this is technically possible if: The treatment is based on consent or on a contract to which the Customer is a party; Processing is carried out by automated means.
11. PROCEDURES WITH A VIEW TO THE EXERCISE OF RIGHTS BY THE CUSTOMER
The right of access, the right of rectification, the right of deletion and the right of portability can be exercised by the Customer by contacting Chalet do Lago's Data Protection Officer, via email email@example.com.
12. VIOLATIONS OF PERSONAL DATA
In the event of a breach of personal data, Chalet do Lago will notify the National Commission for Data Protection within 72 hours, and undertakes to communicate such breach to the Client, holder of the data in question.
III. FINAL PART
14. APPLICABLE LAW AND JURISDICTION