The protection of your personal data is a priority for Casa da Ana Boutique Guest House and/or Casa do Theatro Guest House and/or Casas da Peneda – Gerês.
Below we explain who we are, for what purposes we may use your data, how we process it, with whom we share it, how long we retain it, as well as how to contact us and exercise your rights.
Who are we?
Your data will be processed by Empreendimentos SR&AS, LDA, a legal entity with tax number 518632806, owner of Casa da Ana Boutique Guest House and Casas da Peneda – Gerês, and by Babette Restaurante Unipessoal, LDA, a legal entity with tax number 513365001, owner of Casa do Theatro Guest House.
The above-mentioned entities are data controllers within the meaning of the General Data Protection Regulation (hereinafter referred to as the GDPR).
Why do we process your information?
Your personal data may be collected and processed by the entities for the following purposes:
- Compliance with legal obligations to which the entities are subject, namely communications to the Immigration and Borders Service (SEF) and invoicing.
- Execution of the Temporary Tourist Accommodation Agreement or the Local Accommodation Management Agreement entered into with the entities, namely payment transactions, check-in and check-out management, guest management, security deposit blocks (reservation amounts), provision of complementary services to the stay such as cleaning, laundry and breakfast service, management of contractual obligations or for the purposes of pre-contractual steps.
- Contact via email, mobile communications and digital platforms, within the scope of marketing strategies of the entities, informational and commercial or contractual communications, as well as requests for information.
- Protection of property owned by or entrusted to the entities, as well as for statistical analysis purposes.
Failure to provide personal data for the purposes set out in points a) and b) will result in the entities being unable to comply with legal obligations imposed upon them and may consequently lead to the termination of the Temporary Tourist Accommodation Agreement or the Local Accommodation Management Agreement entered into, without any right to compensation, as well as to deficient provision of services by the entities, for which they cannot be held liable.
What type of personal data do we collect?
Within the scope of their activity, the entities will collect and process the personal data necessary for the provision of the contracted services, information requests or pre-contractual management, namely identification data, contact details, banking details or payment card data.
On what basis do we process your information?
The processing of your personal data is carried out on the basis of the execution of the Temporary Tourist Accommodation Agreement, the Local Accommodation Management Agreement, and the compliance with legal obligations imposed on the entities, namely legislation on Entry, Stay and Exit of Foreigners in National Territory and tax legislation (Article 6(1)(b) and (c) of the GDPR).
Additionally, personal data collected for the purposes set out in point c) above are based on the consent you provided to the entities at the time of your reservation (Article 6(1)(a) of the GDPR).
For the purposes set out in point d) above, the entities will process personal data based on their legitimate interest (Article 6(1)(f) of the GDPR).
How long do we retain your information?
Without prejudice to legal or regulatory provisions or court orders to the contrary, the personal data collected will be retained only for the minimum period necessary for the purposes that justified their collection or subsequent processing.
To whom may we disclose your personal data?
The entities may need to share some of your personal data with other recipients, including:
- Organizations and/or companies affiliated with the entities, provided they comply with an equivalent personal data protection policy;
- Public authorities to whom the entities are legally required to provide information, namely the Immigration and Borders Service (SEF) and the Tax and Customs Authority (DGCI – Directorate-General for Taxation);
- Subcontractors that provide certain services related to your personal data under a subcontract and solely for the purpose of providing technical assistance to the entities. These include, namely, website hosting providers, email marketing service providers, law firms, accounting firms and insurance companies;
- Competent authorities to whom the entities are legally required to disclose information in the course of judicial proceedings or to detect technical and/or security issues, such as judicial authorities or competent supervisory authorities.
Are my data transferred to countries outside the European Union?
Your personal data collected by the entity responsible for your reservation will not be transferred to any entity established outside the territory of the European Union.
Exceptionally and under certain conditions, the entities may transfer your personal data to countries outside the European Union, in accordance with applicable legislation, namely for data hosting or storage purposes, technical processing subcontracting, backup and data recovery of hosted data, and service development.
The entities ensure that they will not transfer your personal data to countries that do not guarantee an adequate level of protection, in accordance with the GDPR.
Security and Confidentiality
We are committed to keeping your data secure and therefore apply appropriate technical and organizational measures to ensure a level of security appropriate to the risk of storing your personal data. However, the transmission of information over the Internet is not completely secure, and we cannot absolutely guarantee the security of information transmitted through our website.
We also respect the confidentiality of your information. As such, we do not sell, distribute, or otherwise make your information commercially available to third parties. The entities undertake to keep your information confidential in accordance with this Privacy Policy and applicable legislation.
Do you have any questions?
If you have any questions regarding the processing of your personal data, or if you wish to exercise any of your rights, please contact us:
Empreendimentos SR&AS, LDA
Address: Rua Visconde Leiria, 26, Loja L, 4750-311 Barcelos
Email:
Casa da Ana Boutique Guest House – info@casadaana.pt
Casas da Peneda – Gerês – info@casasdapeneda.pt
Babette Restaurante Unipessoal, LDA
Address: Largo Dr. Martins Lima, 30 R/c, 4750-318 Barcelos
Email: Casa do Theatro Guest House – casadotheatro@gmail.com
Please note that the entities may occasionally update this Privacy Policy. We recommend that you review this document periodically to stay informed.