Terms and conditions

PRIVACY POLICY

RGPD - PERSONAL DATA PROTECTION POLICY

For Monte das Alpenduradas the protection of your personal data is a priority. Browsing our website is possible without providing personal data; However, if a data subject wants to use our reservation service or receive promotion information, we will process your personal data.

Processing of personal data will be carried out in accordance with the General Data Protection Regulation (GDPR) and the applicable specific national law. Through our privacy policy we establish the nature and purpose of the personal data we collect and process. In addition, data subjects are informed of their rights.

As controller, Monte das Alpenduradas has implemented numerous technical and organizational measures to ensure enhanced protection of personal data processed through this site.

1. DEFINITIONS

The data protection policy is based on the concepts defined by the European legislator in the General Data Protection Regulation (GDPR) and should be readable and understandable to the general public, as well as our customers and business partners.

In this data protection statement, we use the following terms:

(a) personal data: information relating to an identified or identifiable natural person (data subject); A natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, identification number, location data, electronic identifiers or one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

(b) processing of personal data: an operation or set of operations carried out on personal data or personal data sets, by automated or non-automated means, such as collection, registration, organization, structuring, conservation, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of provision, comparison or interconnection, limitation, deletion or destruction;

(c) profiling means any form of automated processing of personal data which consists of using such personal data to assess certain personal aspects of a natural person, in particular to analyze or predict aspects relating to his or her professional performance, economic situation, health, personal preferences, interests, reliability, behavior, location or travel;

(d) pseudonymisation: the processing of personal data in such a way that it can no longer be attributed to a specific data subject without further information provided that such additional information is kept separately and subject to technical and organizational measures to ensure that personal data cannot be attributed to an identified or identifiable natural person;

(e) controller: the natural or legal person, public authority, agency or other body which, individually or in conjunction with others, determines the purposes and means of processing personal data; Where the purposes and means of such treatment are determined by Union or Member State law, the controller or the specific criteria for appointment may be laid down in Union or Member State law;

(f) subcontractor: a natural or legal person, a public authority, agency or other body that processes personal data on behalf of the controller;

(g) third party means the natural or legal person, the public authority, the service or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process personal data;

(h) consent of the data subject, a free, specific, informed and explicit expression of willingness whereby the data subject accepts, by means of a positive statement or positive act, that the personal data concerning him / her are subject to processing.

2. NAME AND ADDRESS OF RESPONSIBLE FOR TREATMENT

The controller for the purposes of the General Data Protection Regulation (GDPR), and other data protection laws applicable in the Member States of the European Union and other provisions related to data protection are:

Monte das Alpenduradas

Sítio das Alpenduradas

7630-732 Zambujeira do Mar

+351 283961617

info@alpenduradas.com

Website: www.alpenduradas.com

3. COOKIES

The website does not use cookies. Cookies are text files that are stored on a computer system through a web browser.

Many websites and Internet servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique cookie identifier, which is a string by which pages and web servers can be assigned to the specific web browser in which the cookie was stored. A specific web browser can be recognized and identified using the unique cookie ID.

4. Data collection and general information

The website collects a set of data and general information when an automated system accesses the website. This data and general information is stored in the server log files. The data collected may be: (1) the types of browsers and versions used, (2) the operating system used by the access system, (3) the site from which an access system arrives on our site (so-called referrers). ), (4) the sub-sites, (5) date and time of access to the website, (6) internet address (IP address), (7) internet access provider of the access system, and (8) any other data and information that may be used in the event of attacks on our information technology systems. Using this data and general information, Monte das Alpendurada does not process personal data. Rather, this information is required to (1) deliver the content of our site correctly, (2) optimize the content of our site as well as its advertising, (3) ensure the long-term viability of our technology systems. website information and technology and (4) provide law enforcement with the information necessary for criminal prosecution in the event of a cyber attack. In this way, the analysis of data and information collected is treated anonymously and statistically, with the aim of increasing our company's data protection and data security, and ensuring a high level of protection for the personal data we process.

5.REGISTRATION ON OUR WEBSITE

The data subject has the possibility to register on our website with the indication of his personal data. The data entered by the data subject is collected and stored solely for internal use by the controller and for certain purposes, namely for the management of the customer file and the sending of promotional campaigns for our services.

When registering, the IP address - assigned by the Internet Service Provider (ISP) and used by the data subject - registration date and time are stored. The storage of this data aims to prevent the misuse of our services and, if necessary, to enable the investigation of possible computer crimes. This data is not disclosed to third parties unless imposed by law or for criminal purposes.

The data subject may rectify, update or delete personal data provided during registration at any time.

6. PERSONAL DATA STORAGE PERIOD

The period of storage of personal data complies with the provisions of the Law. Personal data for the purposes of customer record management are stored for a period of 4 years from the last stay of the data subject. After this period has elapsed, the corresponding data is routinely deleted, provided that it is no longer required to fulfill the contract or a legal obligation.

7. DATA HOLDER RIGHTS

a) Right of confirmation

Each data subject has the right of the European legislator to obtain confirmation from the controller that personal data concerning him or her are being processed. If a data subject wishes to exercise this right, he / she may contact Monte das Alpenduradas by completing the electronic form available on the website.

b) Right of access

Each data subject has the right conferred by the European legislator to obtain from the controller free information about his or her stored personal data at any time and a copy of that information. In addition, the RGPD establishes the right to provide the following information:

- the identity and contact details of the controller and, where appropriate, his representative;

- the contact details of the data protection officer, if applicable;

- the purposes of the processing for which personal data are intended, as well as the legal basis for the processing;

- Recipients or categories of recipients of personal data, if any;

- Where appropriate, the fact that the controller intends to transfer personal data to a third country or an international organization, and whether or not there is an adequacy decision taken by the Commission or reference to appropriate or appropriate safeguards and means obtain a copy of it, or where it was made available.

At the time of data collection, the controller also provides the following information necessary to ensure fair and transparent treatment:

- Deadline for retention of personal data or, if not possible, the criteria used to define this deadline;

- The existence of the right to request the controller to access personal data concerning him / her, to rectify or delete them, and to limit the processing of the data subject or to oppose it. processing as well as the right to data portability;

- The right to complain to a supervisory authority (www.cnpd.pt);

- Whether or not the communication of personal data constitutes a legal or contractual obligation, or a necessary requirement to conclude a contract, as well as whether the holder is obliged to provide personal data and the possible consequences of not providing such data;

c) Right to rectification

The data subject has the right to obtain from the controller without undue delay rectification of incorrect personal data concerning him / her. In view of the purposes of processing, the data subject has the right to provide incomplete personal data and may rectify them by means of an additional declaration.

If a data subject wishes to exercise this right of rectification, he or she may contact us at any time via the electronic form available on our website.

d) Right of data deletion.

The data subject has the right to obtain from the controller the deletion of personal data concerning him without undue delay and the controller has the obligation to delete the personal data without undue delay if there is one of the following reasons: applies provided that processing is not required:

- Personal data are no longer necessary for the purpose that motivated their collection or processing;

- the holder withdraws the consent on which the processing of data is based under Article 6 (1) (a);

- Personal data are treated unlawfully;

- Personal data should be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject.

e) Right to withdraw data protection consent

Each data subject has the right to withdraw his consent to the processing of his personal data at any time.

8. LEGAL BASIS FOR PROCESSING PERSONAL DATA

Legitimacy for the processing of personal data may be based on the conclusion of a contract, in the context of pre-contractual relations, based on consent or compliance with legal obligations, for example for tax purposes

Zambiagest, Lda - Monte das Alpenduradas 

Alternative Dispute Resolution

 

Zambiagest, Lda, the company to which Monte das Alpendurada belongs, informs that in case of litigation the consumer can resort to the following:

Alternative Dispute Resolution Entity:

 

CNIACC - Centro Nacional de Informação e Arbitragem de Conflitos de Consumo:

FACULDADE DE DIREITO DA UNIVERSIDADE NOVA DE LISBOA CAMPUS DE CAMPOLIDE.

1099-032 Lisboa

cniacc@uni.pt

www.arbitragemdeconsumo.org

 

More information at - Consumer Portal - www.consumidor.pt