Customer Information on the Processing of Personal Data
The protection and privacy of your personal data are very important to Alboltur Sociedade Hoteleira Lda., which has always guided its collection, consultation, and processing to provide you with better service.
With the entry into force of the General Data Protection Regulation, Regulation (EU) 2016/679, on May 25, 2018 (hereafter referred to as GDPR), Alboltur Sociedade Hoteleira Lda commits itself seriously to provide detailed information about the use and protection given to your personal data, the reason for its processing, as well as the rights that assist you, in strict compliance with Articles 13 and 14 of the GDPR.
I. Data Controllers at Alboltur Sociedade Hoteleira Lda
Alboltur Sociedade Hoteleira Lda is the entity responsible for processing personal data.
II. Personal Data Processing by Alboltur Sociedade Hoteleira Lda
Alboltur Sociedade Hoteleira Lda only collects the personal data necessary for the complete and effective provision of services, particularly accommodation, agreed upon or products purchased, and subsequently, these data are registered, used, stored, consulted, communicated through automated and/or non-automated means, depending on the purposes for which they are processed. The personal data processed may be provided by the Clients themselves (by filling out forms for room or service reservations) or may result from established relationships (use of Alboltur Sociedade Hoteleira Lda’s digital channels for queries, transactions, etc.)
Alboltur Sociedade Hoteleira Lda also processes personal data created from the analysis of the use of products and services by its respective Clients, their transactions, and preferences, such as the creation of their Client profile.
Alboltur Sociedade Hoteleira Lda does not perform any other type of personal data collection through third parties or other means.
III. Categories of Personal Data
In the provision of services and offering of products, Alboltur Sociedade Hoteleira Lda processes various categories of personal data, classifying them as follows:
- a) Civil identification data (name, gender, date of birth, signature);
- b) Tax identification data (tax identification number, finance office code);
- c) Digital identification data (IP address, geographic coordinates);
- d) Other identification data (father’s name, mother’s name, social media);
- e) Address and contact data (tax address, mailing address);
- f) Personal situation data (emigrant, non-resident [tax identification number and country], retired, titles)
- g) Professional and academic qualifications data (profession, employer, income, public positions, self-employed individual);
- h) Contractual and property data (bank account details, value of assets, account number, IBAN);
- i) Voice and image registration data (call recordings, video, photographs);
- j) Health data (degree of disability, clinical data, medical or clinical report).
IV. Purposes for Processing Personal Data at Alboltur Sociedade Hoteleira Lda
Alboltur Sociedade Hoteleira Lda processes personal data of any holder for any of the following purposes:
- Execution of contracts entered into or carrying out pre-contractual measures at the request of the Data Subject;
- Compliance with legal obligations to which Alboltur Sociedade Hoteleira Lda is subject;
- Pursuit of legitimate interests of Alboltur Sociedade Hoteleira Lda.
Other situations not covered by the above purposes require, under the GDPR, obtaining the consent of the data subject, consent that must be given freely, specifically, informed, and unequivocally.
V. Automated Processing and Profiling
The profile of a data subject is being defined when any form of automated processing of personal data is used that consists of using this personal data to evaluate certain personal aspects of a natural person, particularly to analyze or predict aspects related to their professional performance, their economic situation, health, personal preferences, among others.
Alboltur Sociedade Hoteleira Lda uses your personal data to define your profile for the following purposes:
Presentation of products and services best suited to your needs: In this case, biographical, financial, transactional, and behavioral information is analyzed and processed with the goal of understanding your needs and preferences, allowing the targeting of offers to the needs and preferences of Clients.
The profiling conducted
has as its only consequence the personalization of promotional campaigns.
Compliance with obligations of the Foreigners and Borders Service (SEF): In this case, various types of information are analyzed and processed, including information contained in proper identification documents and check-in and check-out dates, as required by law.
VI. Recipients of Personal Data
To fulfill its duties and to provide a quality service, Alboltur Sociedade Hoteleira Lda may have to communicate your personal data to other entities, including the following categories of recipients:
- Public authorities, such as, for example, the Foreigners and Borders Services, Tax Authorities, Judicial or Administrative Courts, among others;
- Business partners (Visa, SIBS, MasterCard, etc.);
- Service providers that provide services to Alboltur Sociedade Hoteleira Lda (auditors, IT services, lawyers, etc.);
In cases of international transfers (outside the European Union), whenever the European Commission has declared, through an adequacy decision, that the country outside the European Union in question guarantees a level of personal data protection equivalent to that resulting from European Union legislation, the transfer of data will be based on this adequacy decision.
VII. Retention Periods for Personal Data
The processing of data by Alboltur Sociedade Hoteleira Lda will continue for the period of time strictly necessary or mandatory for the fulfillment of the above-indicated purposes. After the end of the contractual relationship, the personal data, the processing of personal data, and the respective retention of data will continue for the legally required periods or until the rights arising from them are prescribed, under the law.
VIII. Rights of Data Subjects
Under applicable law, data subjects have the following rights:
- Right of access: whenever requested, you can access your personal data, obtain information related to the processing of your data, and also obtain a copy of your personal data being processed.
- Right to rectification: whenever you consider that your personal data are incomplete or incorrect, you can request their rectification or that they be completed.
- Right to erasure: notwithstanding legal and regulatory obligations that may limit the exercise of this right, you can request the erasure of your personal data when one of the following situations occurs: (i) the personal data are no longer necessary for the purpose that motivated their collection or processing; (ii) you withdraw consent on which the data processing is based and there is no other legal basis for the processing; (iii) you object to the processing of the data and there are no prevailing legitimate interests, to be assessed on a case-by-case basis, that justify the processing; (iv) the personal data have to be erased under a legal obligation to which Alboltur Sociedade Hoteleira Lda is subject; (v) the personal data have been unlawfully processed; or (vi) the personal data have been collected in the context of the offer of information society services. The right to erasure does not apply where processing is necessary (i) for the exercise of the right to freedom of expression and information; (ii) for the compliance with a legal obligation requiring processing; (iii) for reasons of public interest in the area of public health; (iv) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, insofar as the exercise of the right to erasure is likely to seriously impair the achievement of the objectives of that processing; or (v) for the establishment, exercise, or defense of legal claims.
- Right to restrict processing: you can request the restriction of processing of your personal data in the following cases: (i) if you contest the accuracy of your personal data, for a period enabling the verification of their accuracy; (ii) if the processing is unlawful and you oppose the erasure of the data, requesting in return their restricted use; (iii) if Alboltur Sociedade Hoteleira Lda no longer needs the personal data for processing purposes, but these data are required for the establishment, exercise, or defense of legal claims; or (iv) if you have objected to processing, pending the verification whether the legitimate interests of Alboltur Sociedade Hoteleira Lda prevail over your own.
- Right to data portability: when processing is based on explicit consent or on the performance of a contract and when the processing in question is carried out by automated means, you can request the delivery, in a structured, commonly used, and machine-readable format, of the personal data you have provided. You also have the right to have Alboltur Sociedade Hoteleira Lda transmit those data to another controller, provided that this is technically feasible.
- Right to object: you have the right to object to the processing of your personal data in the following situations: (i) when the processing is based on the legitimate interest of Alboltur Sociedade Hoteleira Lda; or (ii) when the processing is carried out for purposes other than those for which the data were collected, but which are compatible with the same. If you object to the processing, Alboltur Sociedade Hoteleira Lda will cease to process your personal data, unless it has legitimate reasons for such processing that prevail over your interests. You can also object to the processing of your data for direct marketing purposes, including profiling related to such marketing.
- Right not to be subject to exclusively automated individual decisions: in processing that is based on automated processes, you have the right to (i) obtain human intervention and analysis; (ii) express your point of view; and (iii) contest the decision taken. Right to withdraw consent: in cases where the processing of data is based on your consent, you can withdraw consent at any time. In this case, your personal data will no longer be processed, except if there is another basis that justifies such processing by Alboltur Sociedade Hoteleira Lda.
- Right to lodge complaints with the CNPD: you have the right to lodge complaints concerning matters related to the processing of your personal data with the National Data Protection Commission.
IX. Contact Points for Exercising Rights and Requesting Information
For the exercise of any of your rights, as well as whenever you have any doubt about the processing of your data, or the information provided to you, you can contact the entity responsible for processing your personal data, through the usual communication channels and the following:
- Reception: you can exercise your rights by going to the reception of the Hotel São Sebastião de Boliqueime managed by Alboltur Sociedade Hoteleira Lda;
- Email: you can exercise your rights by sending an email to the general address geral@hotelboliqueime.com
- Address: you can also exercise your rights by sending a letter to the headquarters of Alboltur Sociedade Hoteleira Lda, at Rua Dr. João Baptista Ramos Faísca No. 51, Apartado 2052, 8100-070 Boliqueime – Portugal, which will forward it to the respective data controller;
- Phone: you can also contact us by phone at the number 289 363 610.
