PRIVACY POLICY AND PERSONAL DATA PROTECTION

WHO ARE WE?

We are HERDADE DOS CORDEIROS and we are located in Chamusca, Santarém. Our main activity is to provide hotel services with the greatest comfort and convenience. 

 

WHY THIS PRIVACY AND PERSONAL DATA PROTECTION POLICY?

This Policy is intended to make known to Customers / Users of "HERDADE DOS CORDEIROS" the general rules of privacy and processing of personal data, which are collected and processed in strict compliance with and compliance with the provisions of the legislation on the protection of personal data in force at any given time, particularly in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("RGPD").

The "HERDADE DOS CORDEIROS" respects best practices in the field of security and protection of personal data, and for this purpose has taken the necessary technical and organizational measures to comply with the RGPD and ensure that the processing of personal data is lawful, fair, transparent and limited to the authorized purposes.

The "HERDADE DOS CORDEIROS" is committed to the protection and confidentiality of personal data, having adopted the measures it deems appropriate to ensure the accuracy, integrity and confidentiality of personal data, as well as all other rights that are entitled to their holders.

 

WHAT DOES THIS POLICY COVER?

This Policy applies exclusively to the collection and processing of personal data for which the "HERDADE DOS CORDEIROS" is responsible for the respective treatment, under the services and products available to its customers / users and in all situations where there is a processing of personal data.

 

WHAT IS PERSONAL DATA?

Personal data is any information, of any nature and regardless of its support, including sound and image, concerning an identified or identifiable natural person.

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, electronic identifiers, or to one or more factors specific to his/her physical, physiological, genetic, mental, economic, cultural or social identity.

 

WHAT DOES THE PROCESSING OF PERSONAL DATA CONSIST OF?

The processing of personal data consists of an operation or set of operations performed upon personal data or sets of personal data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, restriction, erasure or destruction.

 

WHO IS IN CHARGE OF DATA PROCESSING?

The entity responsible for the treatment of personal data is the "HERDADE DOS CORDEIROS", which determines the purposes and means of their treatment.

For this purpose, if the holder of the personal data needs to contact the data controller, he may do so through the following means and contact: geral@herdadedoscordeiros.pt.

 

WHAT ARE THE TYPES OF PERSONAL DATA PROCESSED?

The "HERDADE DOS CORDEIROS", as part of the activities it develops, processes personal data necessary for the provision of services and / or supply of products, processing data such as name, phone number, email address, and address as information provided by the holders of personal data.

Personal data can also be processed for marketing purposes or dissemination of offers of goods or services of the "HERDADE DOS CORDEIROS", if the respective holder has authorized it.

If there is prior consent of the holder, this may be withdrawn at any time, without the lawfulness of the processing carried out on the basis of consent previously given is compromised.

 

WHEN AND HOW WE COLLECT YOUR PERSONAL DATA?

The "HERDADE DOS CORDEIROS" collects your personal data, including via telephone, in writing, through its website, ensuring, where necessary, the prior consent of the holder of the personal data.

Some personal data are essential to the execution of the contract, without which the "HERDADE DOS CORDEIROS" can’t provide the product or service in question.

If the holder of personal data is not Customer / User of the "HERDADE DOS CORDEIROS", their personal data will only be processed when they are made available, in which case the rules of this Policy will apply.

The personal data collected can be processed by computer and automated or not automated, ensuring in all cases the strict compliance with the legislation for the protection of personal data, being stored in specific databases created for this purpose and, in any situation, the data collected will be used for a purpose other than that for which they were collected or given consent by the data subject.

 

WHO ARE THE RECIPIENTS OF THE PERSONAL DATA?

Without prejudice to the recipients listed throughout this Policy, the "HERDADE DOS CORDEIROS" may communicate the personal data of the Customer / User, for the purpose of compliance with legal obligations, including the police, judicial, tax and regulatory authorities.

 

WHAT ARE THE PURPOSES OF PROCESSING PERSONAL DATA AND RESPECTIVE LEGAL GROUNDS?

In general, the personal data collected is based on and intended for the management of the contractual and commercial relationship, the provision of the contracted services, the adequacy of the services to the needs and interests of the Customer/User, namely for the purposes of access to specific functionalities of the services, information and marketing actions.

Additionally, personal data may also be processed for the purpose of complying with legal obligations.

 

FOR HOW LONG DO WE KEEP YOUR PERSONAL DATA?

The period of time during which personal data is stored and retained varies according to the purpose for which the information is processed.

In fact, there are legal requirements that oblige us to retain data for a minimum period of time. Thus, and whenever there is no specific legal requirement, the data will be stored and kept only for the minimum period necessary for the pursuit of the purposes that motivated their collection or their subsequent processing, under the terms defined by law.

 

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

As holders of personal data, is guaranteed to Customers / Users, at any time, the right to access, rectification, updating, limitation and deletion of their personal data (except for data that are indispensable to the provision of services by "HERDADE DOS CORDEIROS" or compliance with legal obligations to which the controller is subject), the right to object to the use of the same for commercial purposes by the "HERDADE DOS CORDEIROS" and the withdrawal of consent, without this undermining the lawfulness of the processing carried out under that consent, as well as the right to data portability.

 

HOW CAN YOU ACCESS, RECTIFY, UPDATE, LIMIT, DELETE, OPPOSE THE PROCESSING OF YOUR PERSONAL DATA, OR REMOVE CONSENT?

Without prejudice to the RGPD, the holder of personal data may do so, directly or by written request, addressed to the respective Responsible for processing, through the contacts provided for this purpose in this document, as well as other contacts made available by the "HERDADE DOS CORDEIROS".

 

HOW CAN OPPOSE THE RECEIPT OF CONTACTS FOR MARKETING PURPOSES?

The "HERDADE DOS CORDEIROS" can promote actions of disclosure with their customers / users, new products or services, including by telephone, email, SMS or any other electronic communications service, if the holder of personal data has given their consent.

If the holder of the personal data does not wish to continue to receive these communications, he/she may, at any time, withdraw his/her consent to the use of his/her data for marketing purposes.

 

HOW CAN YOU COMPLAIN?

Without prejudice to be able to make complaints directly to "HERDADE DOS CORDEIROS" through the contacts provided for this purpose, the Customer / User can complain directly to the Control Authority, which is the National Commission for Data Protection (CNPD), using the contacts provided by this entity for this purpose.

 

WHAT MEASURES ADOPTED BY "HERDADE DOS CORDEIROS" TO ENSURE THE SECURITY OF YOUR PERSONAL DATA?

The "HERDADE DOS CORDEIROS" is committed to ensuring the protection of the security of personal data that are available to you, having approved and implemented strict rules in this area. Compliance with these rules is an obligation of all those who legally access them.

Bearing in mind the concern and commitment that the "HERDADE DOS CORDEIROS" reveals in the defense of personal data, several security measures have been adopted, of technical and organizational nature, in order to protect personal data that are available against its disclosure, loss, misuse, alteration, treatment or unauthorized access, as well as any other form of unlawful treatment.

Additionally, third parties who, under the provision of services, process personal data of the Customer / User on behalf and on behalf of the "HERDADE DOS CORDEIROS", are required in writing to implement appropriate technical and security measures that, at all times, meet the requirements set out in the legislation in force and ensure the protection of the rights of the data subject (including the protection of privacy and personal data).

 

UNDER WHAT CIRCUMSTANCES IS THERE COMMUNICATION OF DATA TO OTHER ENTITIES (THIRD PARTIES AND SUBCONTRACTORS)?

The "HERDADE DOS CORDEIROS", as part of its activity, may use third parties to provide certain services. Sometimes, the provision of these services involves access, by these entities, the personal data of Customers / Users. When this happens, the "HERDADE DOS CORDEIROS" takes appropriate measures to ensure that the entities that have access to data are reputable and offer the highest guarantees at this level, which is duly established and safeguarded contractually between the "HERDADE DOS CORDEIROS" and third (s) entity (ies).

Thus, any entity subcontracted by the "HERDADE DOS CORDEIROS" will process the personal data of our customers / users, on behalf of "HERDADE DOS CORDEIROS" and adopting the necessary technical and organizational measures to protect personal data against destruction, accidental or unlawful, accidental loss, alteration, unauthorized disclosure or access and against any other form of unlawful treatment.

In any case, the "HERDADE DOS CORDEIROS" remains responsible for the personal data that are made available.

In this case, the "HERDADE DOS CORDEIROS" uses Mailchimp, as a marketing platform. By agreeing to our policies, you are acknowledging that your information will be transferred to Mailchimp. Learn more about Mailchimp's privacy policies here https://mailchimp.com/legal/.

You can unsubscribe at any time by clicking the link in the footer of our emails. For more information about our privacy policies, please visit our website.

 

UNDER WHAT CIRCUMSTANCES DO WE TRANSFER YOUR PERSONAL DATA?

The provision of certain services by "HERDADE DOS CORDEIROS" may involve the transfer of your data outside of Portugal, including outside the European Union or International Organizations.

In such a case, the "HERDADE DOS CORDEIROS" will strictly comply with applicable legal provisions, particularly with regard to determining the suitability of the destination country (countries) with regard to protection of personal data and requirements applicable to such transfers, including, where applicable, the conclusion of appropriate contractual instruments that ensure and respect the legal requirements in force.

 

HOW DO WE USE "COOKIES"?

"Cookies" are small software tags that are stored on your computer through your browser, retaining only preference-related information, and as such do not include personal data.

To learn more about cookies and how "HERDADE DOS CORDEIROS" uses them on its website, see our "COOKIES POLICY".

 

HOW CAN YOU LEARN ABOUT ANY CHANGES TO THE PERSONAL DATA PROTECTION POLICY?

"HERDADE DOS CORDEIROS" reserves the right at any time to make readjustments or changes to this Personal Data Protection Policy.