The protection of the privacy of personal data constitutes a fundamental commitment of AlvorInfante, Gestão Hoteleira Lda, under the trading name AlvorMar-Apartmentos Turísticos (hereinafter referred to as AlvorInfante), to its customers.
In the course of its activity, AlvorInfante, collects and processes personal data of several holders, including individuals who contract (or are interested in contracting) accommodation services, airport transfers, excursions, car rental, golf course rental, boat trips and events (collectively referred to, for the purposes of this policy, as "data subjects").
Last update: 3rd of July 2019
It is considered "data controller", the natural or legal person who determines the purposes and means of processing the personal data of the data subjects.
Name: AlvorInfante, Gestão Hoteleira Lda, under the trading name AlvorMar, Apartamentos Turísticos (hereinafter AlvorInfante)
Tax Id No.: 502103930
Registered office: Rua D. Sancho I, n º 9/11, 8500-013 Alvor, Algarve, Portugal
Phone: + 351 282 450 550
Data Protection: The user can contact data protection through the email firstname.lastname@example.org or by letter to the postal address of AlvorInafante's headquarters, addressed to data protection.
All personal data collected by AlvorInfante shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, which entered into force on 25 May 2018.
Personal data is collected through:
AlvorInfante collects and processes the following categories of personal data:
Personal data of children under 14 years of age are only collected after parental consent. It is important for parents/legal guardians to ensure that their children do not send us personal data without their consent (in particular through electronic means). If this happens, you can request its deletion by contacting us for this purpose via email email@example.com.
Some categories of data requested by AlvorInfante in the course of its activity to comply with accommodation services and others that users contract or are interested in contracting are mandatory to fulfill the purposes established. Thus, if they are not provided or are not provided correctly, these purposes cannot be met.
In order to make your reservation and manage your stay in our hotel unit we collect the following personal data that are mandatory:
According to customer requests, the identification data, contact details and bank details obtained will be processed by AlvorInfante for the following purposes:
These purposes have as legal basis the following reasons: 1st the execution of a contract in which the data subject is a party, or for pre-contractual diligence at the request of the data subject (treatment is legitimized because it is necessary for the fulfillment of these purposes) and/or 2nd compliance with legal obligations to which AlvorInfante is subject.
The subjects personal data shall be retained for a sufficient period of time for the fulfillment of each purpose or until the user requests its elimination to AlvorInfante, opposes this treatment or withdraws his consent. If the data subject revokes his/her consent for any of the treatments, this will not affect the lawfulness of the treatments previously carried out.
AlvorInfante will treat data from data subjects always in an absolutely confidential way and maintain the obligation of secrecy required, in accordance with the provisions of the regulation, adopting, for this purpose, organizational and technical measures necessary to ensure the security of their data and preventing unauthorized alteration, loss, processing or unauthorized access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed.
AlvorInfante may share the personal data of the data subjects (in the case of services customers may request) with entities providing services to AlvorInfante and that in the context of the provision of such services can proceed to the processing of personal data on account and by instructions of AlvorInfante, for the above mentioned purposes.
In the sharing of personal data to its service providers, AlvorInfante guarantees that the subcontracted entity is bound by a subcontracting agreement that obliges it to process of personal data in compliance with the legislation on protection of personal data.
Identification data, check-in and check-out dates will be shared with the Immigration and Borders Services (SEF) under Law 23/2007, of July 4, in the drafting in force. Identification data is also shared with the tax authority in accordance with the legislation in force.
AlvorInfante may also share the personal data of the holders with third parties:
If the data subject exercises his right to rectify, erase or restrict the processing of his personal data, AlvorInfante undertakes to communicate to the entities with whom it has shared the data of the holder in question that they were exercised and will act accordingly.
Cookies are files that websites or applications install on your browser or on your device (smartphone, tablet, etc.) during your journey through the website or application pages, and serve to store information about your visit.
TYPE OF COOKIES ACCORDING TO THE MANAGEMENT ENTITY:
AlvorInfante uses its own and third party cookies. AlvorInfante uses google analytics and session cookies.
TYPE OF COOKIES CONSIDERING THEIR PERMANENCE:
AlvorInfante uses permanent and session cookies. AlvorInfante uses google analytics and session cookies.
TYPE OF COOKIES ACCORDING TO PURPOSE OF USE:
AlvorInfante uses strictly necessary, analytical and functional cookies. AlvorInfante does not use advertising cookies. AlvorInfante uses google analytics and session cookies.
HOW TO MANAGE COOKIES
If you so wish, you may not accept cookies from our browser, or you may not accept cookies from a particular service.
All modern browsers allow you to change the cookies setting. These adjustments can usually be made in the "Options" or "Preferences" zone of the browser menu. However, disabling cookies may prevent some web services from working properly, affecting some or all of the site navigation.
As an expression of its commitment to ensure the privacy of data subjects, AlvorInfante guarantees, in accordance with applicable national and community law, a broad set of rights that may be exercised under the following terms:
Right of Access: Data subjects may, at any time, contact AlvorInfante and request confirmation that their personal data is being processed and, if so, be informed of the categories of personal data concerned, purposes of the processing of their data, the recipients to whom the data is disclosed, the retention period or the criteria used to establish it, the rights and means of exercising them, the origin of the data concerning them, the automated decisions, including profile definition.
AlvorInfante may only provide the information of the data subjects and not personal data of third parties. In addition, if access may adversely affect someone else's rights, it may not be possible for AlvorInfante to provide them.
If requested by the data subject, Alvorinfante will send a copy of the personal data being processed, in electronic form. If other copies are requested, AlvorInfante reserves the right to demand the payment of a fee equivalent to the administrative costs incurred to fulfill the request.
Right to Erasure: Also known as “the right to be forgotten”, allows the data subject to request the deletion or removal of their personal data when there is no compelling reason for AlvorInfante to continue using them. The right to erasure is not absolute as AlvorInfante may have the right or the obligation to withhold information, such as, for example, when it is subject to a legal obligation or has another valid reason to retain it.
Right to Rectification: Whenever the personal data processed is found to be outdated, incomplete or incorrect, the data subject may request AlvorInfante to rectify it as soon as possible.
Right to Data Portability: Data subjects also have the right to receive from AlvorInfante personal data concerning them, in a commonly used and readable format, and to transmit this data to another data controller under their sole responsibility. The holder may also request AlvorInfante to transmit such data to third parties. The right to portability covers only data to which the holder has consented to be processed, data relating to a contract in which the holder is party or if the processing is performed by automated means.
AlvorInfante reserves the right to refuse data portability requests whenever they impair the rights and freedoms of third parties or conflict with any legal requirement.
Right to Restriction of Processing: In certain situations, the data subject has the right to obtain from the controller the limitation of the processing of his personal data. When processing is limited, AlvorInfante may still retain the personal data of data subjects but may not continue to use them.
The data subject may request limitation of the processing of his data for an indefinite period, when he wishes to suspend processing but retain his data. This may occur when:
When processing is limited, personal data will only be processed again if the data subject gives his consent, except for specific processing contemplated in the law. AlvorInfante guarantees that the data subject who requested the limitation of processing of his data is informed before the limitation is annulled. AlvorInfante reserves the right to limit the processing of data of holders when it does not need it, committing to retain the data for the pre-established retention period.
Right to Object: AlvorInfante provides the necessary means for the data subject to object to certain processing of personal data for certain purposes, without prejudice to existing directives or laws.
The data subject may object to the processing in the following circumstances:
The rights foreseen and described in this policy, as well as other rights legally set forth in the relevant legislation in force, can be freely exercised by sending an email to AlvorInfante to firstname.lastname@example.org or by sending a letter to the postal address of AlvorInfante headquarters, to the care of data protection.
Notwithstanding AlvorInfante's best practices regarding personal data protection, data subjects are entitled to submit a complaint to the National Data Protection Authority (CNPD) (https://www.cnpd.pt) regarding data processing carried out by AlvorInfante, through any of the channels allowed by the supervisory authority.
The rights foreseen and described in this policy, as well as other rights legally set forth in the relevant legislation in force, may be freely exercised by sending an email to AlvorInfante to email@example.com or by sending a letter to the address of AlvorInfante headquarters, to the care of data protection.
In Portugal, under the Regulation (GDPR), the National Data Protection Commission (CNPD) is the supervisory authority to monitor compliance with this law, and has the task of correcting and sanctioning possible irregularities and non-compliance.
Address: Rua de São Bento, n º 148-3 º 1200-821 LISBOA
Phone Number: + 351 213 928 400
In the event of a breach of data and to the extent that such a breach is likely to pose a high risk to the rights and freedoms of the data subject, AlvorInfante has to notify it to the data subject and the supervisory authority (the latter not later than 72 hours after having become aware of it in accordance with article 55 of the regulation).
According to the law, communication to the data subject is not required in the following cases:
The subjects personal data shall be retained for a sufficient period of time to fulfill each purpose; and always in accordance with the deadlines established in the applicable legislation. In some situations the conservation period may be longer, in which case such extension will be legally justified and sustained.
Data retention periods:
After the respective conservation period has elapsed, AlvorInfante will destroy or anonymize the data.
Consent for the above-mentioned purposes may be withdrawn at any time, although this right does not compromise the lawfulness of the treatment carried out on the basis of the prior consent given or the subsequent processing of the same data, based on another legal basis, such as the execution of a contract in which the data subject is party, or for pre-contractual procedures at the request of the holder and in compliance with legal obligations to which AlvorInfante is subject.
If you wish to withdraw your consent, you may do so through the contacts indicated in this policy.
Last update: 3rd of July 2019