Terms, Policies and Legal

We understand that the use of your personal data requires your trust and, for that reason, we are committed to maintaining high standards of privacy. This Privacy Policy describes who we are, the purposes for which we may use your data, how we process it, with whom we share it, how long we retain it, as well as how you may contact us and exercise your rights.

What personal data do we use and for what purpose?

The data we collect for the purposes of reservations and hotel check-ins may include:

• Full name;
• Addresses and country of residence;
• Numbers and validity information of tax and civil identification documents;
• Telephone number and e-mail address;
• Credit or debit card number, or other payment details;
• Date and place of birth;
• Nationality, passport, visa or other government-issued identification document;
• Where applicable, data regarding family members and accompanying guests, such as names and ages of dependants;
• Biometric data;
• Arrival and departure dates;
• Vehicle registration number of the vehicle to be used by the Client;
• Image, video and audio data captured by security cameras located in public areas, such as corridors and entrances of our Hotel.

Your personal data may be collected and processed for the following purposes:

• Provision of hotel, tea room and external parking services;
• Management of contacts with the Client;
• Billing and collection from the Client;
• Registration of the Client at the time of booking;
• Informing the Client, where requested, of new services, offers and special campaigns, updated information about our activity and, in general, for marketing purposes by PRAXIS CBR HOTEL, UNIPESSOAL, LDA., through any means of communication, including electronic means;
• In the case of video images, to ensure the safety and security of both the Hotel and the Client.

With whom do we share your personal data?

Your personal data may be communicated to service providers of the Nova Gama Gourmet Group for the purpose of providing services, as well as to judicial, tax and regulatory authorities, for the purpose of complying with legal obligations.

In these cases, such third-party companies may need to access certain information and data belonging to the data subjects. We guarantee that, in such cases, these third parties will have limited access to the information, restricted solely to the data necessary for the performance of their tasks, and that a contract has been entered into between the parties regulating the protection of Personal Data.

These third parties undertake to comply with the GDPR and not to disclose, in any way, the Personal Data, nor to use it for purposes other than those described herein.

Where do we store your data?

We store your data on servers located in a secure environment, protected against unauthorised access, use or disclosure of the Personal Data provided by the user.

We adopt the necessary and appropriate technical, electronic and organisational procedures to ensure the security of your Personal Data and to prevent its loss, misuse or unauthorised access.

We will only use your data for the purposes for which it was collected, in accordance with this Privacy Policy.

What are your rights and how can you exercise them?

• Consent: Data will only be used through a freely given expression of will, by which the data subject accepts, by means of a statement, that the personal data concerning them may be processed.
• Withdrawal of consent: Where you have given consent for the processing of personal data, you may withdraw it at any time.
• Rectification: Whenever you consider that your personal data is incorrect or incomplete, you may request its rectification at any time.
• Right of access: You have the right, at any time, to require us to show you the data we hold about you.
• Right to data portability: You have the right, at any time, to request a copy of all the information you have provided to us.
• Right to erasure: You have the right to request that your data be deleted, to the extent legally possible.
• Right to object: This allows you, at any time, to state that you no longer wish us to process your data.

For this purpose, and for any additional questions you may have regarding our Personal Data Protection Policy, you may contact us by e-mail at geral@cbrboutiquehotel.com.

If you are dissatisfied with our use of your personal data, or with our response after exercising any of these rights, you have the right to lodge a complaint with the supervisory authority:

Comissão Nacional de Proteção de Dados – CNPD
Av. D. Carlos I, 134 - 1.º
1200-651 Lisbon, Portugal
Tel: +351 213 928 400
Fax: +351 213 976 832
E-mail: geral@cnpd.pt

Personal Data Retention Period

PRAXIS CBR HOTEL, UNIPESSOAL, LDA. retains your personal data for the retention periods identified above and only for the period necessary, or for the fulfilment of obligations to which it is legally subject.

In any case, once the relationship with the personal data subjects has ended, such data will no longer be processed for commercial purposes.

PRAXIS CBR HOTEL, UNIPESSOAL, LDA. is committed to implementing all necessary precautions to preserve the confidentiality and security of the personal data collected and processed.

However, we do not control all risks related to the use of the Internet, and we hereby alert users to the possible risks associated with its use and operation and, consequently, with the sharing of personal data through this means.

Notwithstanding the security measures adopted by PRAXIS CBR HOTEL, UNIPESSOAL, LDA., users of this website must follow recommended security practices, namely the installation and updating of the necessary security applications, including antivirus software, and the regular clearing of cookies.

The Privacy Policy of PRAXIS CBR HOTEL, UNIPESSOAL, LDA. applies exclusively to the processing of personal data carried out by the Nova Gama Gourmet Group within the scope of the purposes described herein.

Since PRAXIS CBR HOTEL, UNIPESSOAL, LDA. belongs to the business group identified above, you may consult the Privacy Policy and Confidentiality Terms of the group on its respective website.