Privacy Policy

Privacy Policy and Data Protection

Version: December 17, 2024

1. Introduction

Empreendimentos Turísticos do Colégio Lda., headquartered at Rua Carvalho Araújo, nº 39, 9500-040 Ponta Delgada, Portugal, NIPC 512052484, collects and processes personal data to provide services efficiently and responsibly, in compliance with Regulation (EU) 2016/679 (GDPR).

2. Data Collected

• During Booking and Stay:
  • Full name
  • Email address
  • Billing information
  • Legal identification data (as required by Portuguese law)
• While Browsing the Website:
  • IP address
  • Browsing data (through cookies and analytics services)

3. Purpose of Data Processing

• Process bookings and payments
• Fulfill legal and tax obligations
• Manage communications and respond to inquiries
• Improve user experience through anonymous analytics

4. Legal Basis for Processing

• Contract Execution: To process bookings and provide contracted services.
• Consent: For sending newsletters and promotional communications.
• Legitimate Interest: For security management and fraud prevention.
• Legal Obligation: To comply with legal and regulatory requirements.

5. Data Subject Rights

• Access: Request access to personal data being processed.
• Rectification: Update or correct personal information.
• Erasure: Request data deletion unless there are legal obligations.
• Data Portability: Request data transfer to another entity.
• Objection: Refuse data usage for marketing purposes.
• Restriction of Processing: Temporarily restrict data processing.

6. Use of Cookies

• Necessary: Ensure the site's basic functionality.
• Analytics: Collect anonymous usage statistics.
• Marketing: Used for personalized campaigns.

7. Data Security and Storage

We implement technical and organizational measures to protect personal data. Access is restricted to authorized personnel and governed by internal security policies.

8. Contacts and Complaints

Data Protection Officer (DPO):
Email: dpo@hoteldocolegio.pt
Address: Rua Carvalho Araújo, nº 39, 9500-040 Ponta Delgada, Portugal

Supervisory Authority: Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt

Last update: December 17, 2024