Introduction

This privacy policy explains what we do with your personal data, in the process of initiating or continuing our business relationship, in what to provide you with a service that concerns you. It describes how we collect, use and treat your personal data and, in so doing, how we fulfill our legal obligations in relation to you. Your privacy is important to us and we are committed to protecting and safeguarding the privacy rights of your data. This privacy policy applies to the personal data of our customers (individuals). For the purposes of the applicable data protection legislation [including, but not limited to, the general Data Protection Regulation [Regulation (EU) 2016/679] ("GDPR")], it is Marés do Sotavento, Lda. responsible for your personal data.

This privacy policy applies to all reservations made at Residencial Marés (namely for Superior Room with River View; River View Rooms; Balcony Rooms; Standard Rooms; Family Room; Single Room; Interior Room; Rooftop Room) and in all indicated accommodations.

Please note that we may occasionally amend this privacy policy. If you are not satisfied with any aspect of our privacy policy, you may benefit from legal rights and where relevant, they are also described.

 

Cookie

When you visit our website, a small text file (Cookie) is created and burned to your computer's disk. This file by recognizing it will allow you greater ease and speed in accessing, and customizing the page at the level of your online experience. We also identify your computer's technical information when you visit the pages of our site, such as IP (Internet Protocol), the operating system, the browser type. We use this information to improve the quality of your visit to our site, and we will not disclose it to external entities. Most browsers automatically accept these files (Cookies), but you can delete them or automatically set your lock. In the menu "Help" of your browser will find out how to make these settings. However, if you do not allow the use of cookies there may be some features you will not be able to use.

 

What kind of personal information do we collect?

If you are a customer of Residencial Marés, we need to collect and use information about you or your company within the scope of our service.

The information described below is, of course, additional to any personal data whose treatment we are required by law to do in a certain situation. The data that We collect about customers are actually very limited. Normally, we only need to have your contact details or data from some individual contacts in your company, namely:

• Enterprise: Name; Address of the registered office; Tax Identification No.; Telephone contact; Company email

• Guest: Name; Address; Identification number or passport; Tax Identification No.; Email; Telephone contact

​

How do we collect your personal data?

We collect personal data directly from you. If you contact us proactively, usually by phone or email; If we contact you by phone or by email or through business development activities.

 

How do we use your personal data?

After making your data available we use customer information to help us with the exercise and scope of our business relationship. With the information strictly necessary, we intend to personalize our service.

We list below the various ways in which we use your data to facilitate this:

• Store your data (and update them when necessary) in our database, so we can contact you regarding business relationship activities;

• Conduct customer satisfaction surveys;

• Proceed to the processing of your data for the purpose of directing appropriate commercial campaigns.

 

How do we safeguard your personal data?

We are committed to adopting all reasonable and appropriate measures to protect the personal information we possess from misuse, loss or unauthorized access. We do this by creating a set of appropriate technical and organisational measures. These include measures to deal with any suspected data breach. If you suspect misuse, loss or unauthorized access to your personal information, please inform us immediately. You can consult the details on how to contact us in this privacy policy.

 

How long do we retain your personal data?

The data must be retained for as little time as possible. This period should consider the reasons why we need to carry out data processing, as well as any legal obligations to conserve data during a given Period of time.

 

How can you access, change, or remove the personal data you have provided to us?

One of the main objectives of the GDPR is to protect and clarify the rights of EU citizens and people in the EU as regards data privacy. This means that you have several rights with respect to your data, even when we have been provided by you. They are described in more detail below. Please note that we may keep a record of your communications to help us resolve any issues raised by you. If you wish to exercise any of the following rights, you must request the form for the purpose of the electronic address.

​

Right to object: persons are entitled to oppose in cases where a public administration is processing the data in the context of its public tasks or where an undertaking is processing the data based on its legitimate interests. In such cases, the company/organization can no longer handle the data, unless it is able to demonstrate that it must perform the treatment for reasons that should prevail over the rights and freedoms of persons or if it needs the data for the Declaration, the Exercise or the defence of a right in a judicial proceeding.

People also have the right to oppose, at any time, the processing of their personal data for the purposes of Direct Marketing. Direct marketing is understood in the general regulation on data protection, such as any action by an undertaking intended to communicate advertising or marketing material to specific persons.

The company must inform people, at the time of the first communication with them, that they will use their personal data for direct marketing purposes and that they have the right to oppose free of charge. Where a person opposes the processing of personal data for the purpose of direct marketing, your company may no longer be able to process your personal data for that purpose.

​

Right to withdraw his or her consent: If we have obtained your consent to proceed to the processing of your personal data you may withdraw this consent at any time and we will cease to perform the specific activity you previously consented to, unless we consider there to be a Alternative reason to justify the continued treatment of our part of your data for this purpose, in which case we will inform you about this condition.

​

Right of access by the data subject: You may ask us at any time to confirm the information we have about you and may ask us to change, update or delete this information. We may ask you to verify your identity and further information about your request. If we grant you access to the information we hold about you, we will not charge that access unless your request is "manifestly unfounded or excessive". If you request additional copies of this information, we may charge you a reasonable administrative cost when legally permitted. In cases where we are legally permitted, we may refuse your request. If we refuse your request, you will always be informed of the reasons for doing so.

​

Right to erasure (right to be forgotten): In certain circumstances, you have the right to ask us to erase your personal data. Normally, the information should observe one of the following criteria:

• The data is no longer necessary for the purpose for which we originally collected and/or treated them;

• Once it has been given earlier, it has withdrawn its consent to proceed with the processing of its data and there is no other valid reason for us to continue to treat it;

• The data were unlawfully treated (i.e., in a way that does not comply with the GDPR);

• The data must be erased in order to comply with our legal obligations as a controller;

• If we proceed to the processing of the data because we consider that it is necessary to do so for our legitimate interests, it opposes the treatment and we are not able to demonstrate legitimate imperative reasons for our continued treatment.

We may only refuse to fulfill your request for one of the following reasons:

• To exercise the right of freedom of expression and information;

• To comply with legal obligations or to perform a task of public interest or the exercise of an official authority;

• For public health reasons in the interest of the public;

• For file, research or statistical purposes;

• For exercising or defending a right.

By fulfilling a valid request for data erasure, we will take all reasonable practical steps to erase the relevant data.

​

Right to restriction of processing: In certain circumstances, you have the right to restrict the treatment we make of your personal data. This means that we can only continue to store your data and we will not be able to perform further treatment activities with them until:

• That one of the circumstances listed below is resolved;

• Your consent;

• Additional treatment is required for the declaration, exercise or defense of a right, protection of the rights of another person or important public interest of the EU or a Member State.

The circumstances in which you are entitled to request that the restriction of the treatment of your Personal data are:

• If you dispute the accuracy of the personal data we treat about you. In this case, the processing of our part of your personal data will be restricted by the period during which the accuracy of the data is verified;

• If you oppose the processing of your personal data for our legitimate interests. In this situation, you may request that the data be restricted while we check our fundamentals for the processing of your personal data;

• If the treatment we make of your data is illicit, but prefer to restrict the treatment we make of them instead of the deletion;

• If we no longer need to process your personal data, but you need the data for the declaration, the exercise or the defense of a right.

If we have shared your personal data with third parties, they will be notified of the restricted treatment, unless this is impossible or involves a disproportionate effort. We will, of course, notify you before you withdraw any restriction on the processing of your personal data.

​

Right to Rectification: You also have the right to request that we withdraw any inaccurate or incomplete personal data we possess about you. If we have shared such personal data with third parties, they will be notified of the rectification, unless this is impossible or involves a disproportionate effort. Where appropriate, we will also disclose to you that any third party disclosures the inaccurate or incomplete personal data. In cases where we consider it reasonable not to satisfy your request, we will explain the reasons for the decision.

​

Right to Data portability: If you so wish, you have the right to transfer your personal data between those responsible for the treatment. To allow you to do so, we will provide you with your data in a format that has to communicate to us. Alternatively, we may transfer the data directly to you. This right to data portability applies to:

• Personal Data we treat automatically (i.e. without any human intervention);

• Personal data provided by you;

• Personal data we treat based on your consent or to fulfill a contract.

​

Right to Information: This right provides the data subject with the ability to request information from a company about what the personal data is and, on the processing, and justification for such processing.

Please note that we may keep a record of your communications to help us resolve any issues raised by you. It is important that the personal information we possess about you is accurate and current. Please let us know if there are any changes to your personal information during the period in which we retain your data.