Melgaço Alvarinho Houses – Agroturismo has adopted the best practices in terms of privacy and will only use the Personal Data (physical and online) of its customers (actual or potential) for clearly identified purposes and with their consent for that purpose.
2. PERSONAL DATA
Personal Data is all information, of any nature and regardless of the respective support, relating to a natural person, directly or indirectly identified or identifiable.
3. DATA COLLECTION
Within the scope of its activity, Melgaço Alvarinho Houses – Agroturismo may request its customers, actual or potential, in person, by telephone, e-mail or through its website with its own domain, the following Personal Data:
Said Personal Data can also be obtained through partners, associated companies or official entities, and it is necessary for this purpose that the respective holders have authorized their transmission.
4. DATA PROCESSING
The treatment of Personal Data collected by Melgaço Alvarinho Houses – Agroturismo is carried out in accordance with the applicable legislation, in a fair and transparent manner towards the respective holders and guaranteeing their privacy.
The treatment is intended for clearly identified, objective and legitimate purposes for which the holders of Personal Data have given their consent, and are not subsequently treated in a manner contrary to those purposes.
The holders of Personal Data may withdraw their consent, however, this does not compromise the legality of the treatment carried out based on the consent previously provided.
Personal Data may be processed without the consent of the respective owners if it is necessary for the fulfillment of legal obligations to which Melgaço Alvarinho Houses – Agroturismo is obliged, for the execution of a contract to which the owners are a party, for pre-contractual procedures to request of the holders or to defend other fundamental rights of the holders or third parties.
The processing of Personal Data includes your:
5. PURPOSE OF DATA PROCESSING
The processing of Personal Data requested from customers is intended to:
On the website with its own domain, Melgaço Alvarinho Houses – Agroturismo also collects information related to the characteristics of the users’ hardware device and their browser / software, as well as information about the pages visited within the website.
Users of this website will be required to consent to the creation and recording on their computers of a text file (Cookie) to allow easier and faster access to the website, as well as its customization according to the users’ preferences.
6. DATA CONSERVATION TERM
The period of time during which Personal Data is stored and preserved varies according to the purpose for which the information is processed, with legal requirements that oblige the data to be kept for a period of time.
Whenever there is no specific legal obligation, Personal Data will be stored and preserved only for the period necessary for the purposes for which it was collected or further processed.
7. DATA TRANSFER
Personal Data collected by Melgaço Alvarinho Houses – Agroturismo is not shared with third parties without the consent of the respective owners, unless:
8. SUBCONTRACTED ENTITIES
These subcontracted entities will not be able to transmit Personal Data to other entities unless Melgaço Alvarinho Houses – Agroturismo has previously given written authorization to do so, and they are also prevented from hiring other entities without prior authorization from Melgaço Alvarinho Houses – Agroturismo.
Melgaço Alvarinho Houses – Agroturismo is committed to subcontracting only entities that offer maximum security in the execution of the appropriate technical and organizational measures, in order to guarantee the defense of the rights of the holders of Personal Data.
9. RIGHTS OF DATA HOLDERS
Melgaço Alvarinho Houses – Agroturismo guarantees the means that allow the User to consult his Personal Data.
The User has the right to obtain from Melgaço Alvarinho Houses – Agroturismo confirmation that the personal data concerning him are or are not subject to treatment and, if applicable, the right to access his personal data and the following information:
Upon request, Melgaço Alvarinho Houses – Agroturismo will provide the User, free of charge, with a copy of the User Data that is being processed. The supply of other copies requested by the User may incur administrative costs.
10. TECHNICAL ORGANIZATIONAL AND SECURITY MEASURES IMPLEMENTED
In order to guarantee the security of Personal Data and its maximum confidentiality, Melgaço Alvarinho Houses – Agroturismo treats information in an absolutely confidential manner and in accordance with the legally provided terms and conditions.
Depending on the nature, scope, context and purposes of the processing of Personal Data, as well as the risks arising from the treatment for the rights and freedoms of the holders, Melgaço Alvarinho Houses – Agroturismo undertakes to apply, both when defining the means of treatment as at the time of the treatment itself, the technical and organizational measures necessary and appropriate for the protection of Personal Data and the fulfillment of legal requirements.
It also undertakes to ensure that, by default, only the data that is necessary for each specific purpose of treatment are processed and that this data is not made available withoutadelaide
human intervention to an undetermined number of people.
Communication between the user’s device and the Melgaço Alvarinho Houses – Agroturismo website is carried out through secure and communication channels that use the HTTPS protocol and the SSL security standard. Still, in terms of general measures, Melgaço Alvarinho Houses – Agroturismo adopts the following:
11. PERSONAL DATA BREACH
In the event of a data breach and to the extent that such breach is likely to imply a high risk to the rights and freedoms of the holder, Awareness and training of personnel involved in data processing operations undertakes to report the breach of Personal Data to the holder concerned within seventy-six two hours from the knowledge of the incident.
Awareness and training of personnel involved in data processing operations undertakes to notify the Control Authority in the shortest possible time, without undue delay and, whenever possible, up to seventy-two hours after becoming aware of the data breach.
Under legal terms, communication to the holder is not required in the following cases:
12. RESPONSIBLE FOR DATA PROTECTION (DPO)
No DPO has been designated because Awareness and training of personnel involved in data processing operations is not a public authority or body, does not regularly and systematically monitor the holders of Personal Data on a large scale and does not process sensitive Personal Data on a large scale.
If the changes are substantial, a notice will be placed on your website.
14. APPLICABLE LAW AND JURISDICTION