Please read this Privacy Policy carefully, as the processing of the personal data you provide us with implies knowledge and acceptance of the conditions contained herein.
Who is responsible for collecting and processing the data?
5 Sites Cabanas – Hotelaria, Serviços e Imobiliária S.A., hereinafter 5 Sites, is the entity responsible for the collection and processing of personal data, and may, within the scope of its activity, use entities subcontracted by it to pursue the purposes indicated herein.
5 Sites has appointed a Data Protection Officer (DPO), who can be contacted through the email address [●], for any question related to the processing of your personal data and the exercise of your rights.
What is personal data?
Personal data is any information, of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person. An identifiable person is one who can be identified directly or indirectly, in particular by reference to an identification number or to one or more specific elements of his or her physical, physiological, mental, economic, cultural or social identity.
What personal data is collected and processed?
5 Sites collects and processes, among others, the following personal data:
Reservations: name, email address, phone number, address, payment method and reservation details
Recruitment: name, email address and CV
Newsletter: e-mail address
When browsing the website, 5 Sites may collect information about your computer, including IP address, operating system and browser used, for administrative purposes and to aggregate information for its advertisers.
5 Sites assumes that the data was provided by the owner of the data or that he has given authorization for this purpose and presumes that they are true and up to date.
Data of minors: The collection of personal data of minors under 18 years of age depends on the consent of parents or legal representatives. 5 Sites does not knowingly collect or process data from minors without this condition.
How is your data collected?
Personal data may be collected through the following means:
Email
Web site
Phone calls
In person
The data collected are processed and stored electronically and in strict compliance with the personal data protection legislation, being stored in specific databases, created for this purpose, by 5 Sites or by the entities subcontracted by it.
Some personal data collected on the website are mandatory and, in the event of lack or insufficiency of this data, 5 Sites may not be able to provide you with the services or information requested by you. In each specific case, 5 Sites will inform you of the mandatory nature of the provision of the personal data in question.
What are the purposes and grounds for processing your data?
In accordance with the principles of data protection, 5 Sites may only process your personal data for certain purposes and if it has a legal basis to do so.
5 Sites uses your data for the following purposes and based on the following grounds:
A. Grounds: hotel services contract
(a) Management of reservations and stays
(b) Requests for quotations, information and confirmation of reservations
(c) Registration of preferences (preferred room, mobility, etc.)
(d) Invoicing and verification of means of payment
(e) Provision of information necessary for your stay at the Hotel
(f) Customer Support
B. Basis: consent
(g) Sending newsletters (if you are not our customer)
(h) Sending marketing (if you are not our customer)
(i) Loyalty programs
C. Basis: legal obligations
(j) Complaint management
(k) Compliance with other legal or regulatory obligations
D. Basis: legitimate interest
(l) Conducting satisfaction questionnaires related to your stay
(m) conducting market research, evaluation surveys and statistical analyses
(n) Contact book
E. Grounds: pre-contractual steps
(o) Recruitment
In order to pursue the purposes identified above, 5 Sites may interconnect the data collected, with the purpose of updating and completing such data.
Who does your data share with?
The data collected and held by 5 Sites may be transmitted, with respect for the duty of confidentiality and the principle of purpose that presided over its collection, to the following entities:
(a) Entities of the group in which 5 Sites is inserted
(b) Judicial or administrative authorities, where such transfer is compulsory
(c) Recruitment and selection companies
(d) Processors who will process the data on behalf of 5 Sites and in accordance with the purposes determined by it
Cookies
Cookies are small pieces of information that can help identify your browser and that can store information, for example, User settings and preferences.
5 Sites may store cookies on your device to personalize and facilitate navigation as much as possible, not providing these same cookies, references or personal data of the User.
For more information you should read our Cookies Policy.
What are your rights?
Under the terms of the Personal Data Protection Law, we guarantee you the following rights:
Access, update, rectification, deletion, portability and erasure of your personal data
Opposition to the use of the data provided for marketing purposes, sending informative communications or inclusion in directories or information services
Restriction of processing in accordance with Article 18 of the GDPR
Withdrawal of consent, at any time, without compromising the lawfulness of the processing carried out until then
The exercise of these rights must be carried out through the email address rgpd@goldenclubcabanas.com or in writing to the address: Golden Club Cabanas, Rua Tuberária Major, 8800-591 Cabanas de Tavira, Portugal.
5 Sites undertakes to respond to such requests within a maximum period of 30 days, extendable in cases of special complexity up to 60 days, and the holder will be duly informed.
You may also file complaints with the National Data Protection Commission (CNPD).
How long is your data stored?
The period for which data is stored and retained varies according to the purpose for which the information is processed. Whenever there is no specific legal requirement, the data will be kept only for the minimum period necessary.
Examples:
Billing data: 10 years (legal obligation)
Recruitment data: up to 2 years after the end of the process, unless consent is allowed to be kept for a longer period
Marketing data: until withdrawal of consent or exercise of the right to object
Is your data processed securely?
5 Sites is committed to ensuring the protection of the security of your data. To this end, it has adopted various security measures, of a technical and organisational nature, in order to protect the personal data that you make available to us against its dissemination, loss, misuse, alteration, unauthorised processing or access, as well as against any other form of unlawful processing.
5 Sites requires its subcontractors and partners to adopt security measures equivalent to those it practices.
Notwithstanding the security measures practiced by 5 Sites, the user must adopt additional security measures, namely ensuring that they use up-to-date equipment and a browser, properly configured, with an active firewall, antivirus and anti-spyware, as well as making sure of the authenticity of the sites they visit on the internet.
Communications
5 Sites acknowledges that it may communicate User data in the context of merger, acquisition and/or incorporation processes in which it is located, and this communication is not considered as a transfer of data to third parties, nor is there any subcontracted processing.
5 Sites may also transmit data to third parties in the context of investigations, inquiries and judicial and/or administrative proceedings or of a similar nature, provided that, to do so, it is duly ordered to do so by court order.
Transfer of data
In the event of transfers of personal data to third countries that do not belong to the European Union or the European Economic Area, 5 Sites will ensure that such transfers only take place to countries for which there is an adequacy decision by the European Commission, or through the adoption of standard contractual clauses approved by the European Commission or other legally provided mechanisms that ensure the adequate protection of personal data.
The use of 5 Sites’ social networks may imply the transmission of data to social network service providers, which may be based outside the European Union or the European Economic Area. 5 Sites is not responsible for the data that the user makes available on social networks.
Changes to the Privacy Policy
5 Sites reserves the right, at any time, to make adjustments or changes to this Privacy Policy, and these changes will be duly published at: 5 Sites reserves the right, at any time, to make adjustments or changes to this Privacy Policy, and these changes will be duly published at: www.goldenclubcabanas.com
