Privacy policy
1. The protection of privacy and personal data is a commitment of ARHCESMO
The protection of privacy and personal data is a fundamental commitment of the Regional Association of Hoteliers of Cascais and Estoril, Sintra, Mafra and Oeiras (ARHCESMO), to the holder of personal data (also, "holder") that uses digital platforms and ARHCESMO services.
With the application of the new General Regulation on Data Protection (RGPD), as of May 25, 2018, ARHCESMO has stated that it remains committed and committed to the protection of the privacy and personal data of its proprietor using the platforms digital and ARHCESMO services and, to that extent, proceed to update its Privacy Policy in accordance with all data protection principles and standards that underpin the RGPD.
In this document, we seek to explain what personal data we collect, to what purpose we may use them, how we treat them, with whom we share them, for how long we retain them, and how to contact us and exercise their rights.
2. Who is responsible for data processing?
The Regional Association of Hoteliers of Cascais and Estoril, Sintra, Mafra and Oeiras, headquartered at Av. Clotilde, Edifício CCE, Piso 4-C, 2765-211 Estoril is responsible for the processing of personal data within the scope of the RGPD.
3. Data Protection Officer?
ARHCESMO has a Data Protection Officer (EPD or Data Protection Officer), which provides information; controls the compliance of data processing with applicable standards; provides advice, when requested, on the impact assessment on data protection and controls its implementation; is a point of contact with the holder of personal data to clarify questions regarding the treatment of your data by ARHCESMO; and is the point of contact for the control authority (National Data Protection Commission - CNPD) on treatment-related issues, cooperating with this entity.
The ARHCESMO Data Protection Officer can contact you at This email address is being protected from spambots. You need JavaScript enabled to view it..
4. Treatment of personal data, scope and amendment of the Privacy Policy
By providing your personal data to ARHCESMO, the holder of personal data will consent to the processing of your personal data in accordance with this Privacy Policy and with the rules and principle contained in the Terms and Conditions of the ARHCESMO Digital Platforms.
This Privacy Policy applies to data that has been directly provided by the respective owner or collected in accesses of the holder to the digital platforms and in the ARHCESMO services.
Thus, it is advised that digital platforms and ARHCESMO services have links to other digital platforms and refer to third-party content that is not covered by ARHCESMO's Privacy Policy, so it is advisable that whenever the owner of personal data on those platforms is informed of the content of their privacy policies as well as the applicable terms and conditions.
ARHCESMO reserves the right to change its Privacy Policy, so we advise regular consultation of this document, as well as the Terms and Conditions of the ARHCESMO Digital Platforms. If the Privacy Policy changes, we will post a notice on our digital platforms.
5. What kind of information does ARHCESMO collect?
ARHCESMO collects two kinds of information: personal information and anonymous information. Anonymous information occurs while the holder of personal data visits the digital platforms and aims to improve the operation of the same, including the management and prioritization of content.
Personal information is voluntarily provided by the holder of personal data at the time of the voluntary registration. All data collected is processed automatically, and the information collected from the holder of personal data is encrypted and managed safely.
The registration serves the holder of personal data access to the services of subscription of associate, subscription of associate, subscription to events and newsletters ARHCESMO, comments and other functionalities made available by ARHCESMO. ARHCESMO may have to make personal and anonymous information available to third parties.
This will only happen, however, in these specific circumstances:
- With the express consent of the holder of personal data;
- When in good faith we believe it is required by law;
- When in good faith we believe that it stems from contractual stipulation;
- When in good faith we believe it is necessary to protect our rights or property;
- In any event, we will attempt to notify you to the extent permitted by law.
6. What are personal data?
Personal data is information relating to an identified or identifiable person. Any person who can be identified directly or indirectly is considered identifiable. Also personal data is the set of distinct information that may lead to the identification of a particular person.
Examples of personal data:
- Name and Nickname;
- Address of a residence;
- E-mail address;
- Number of an identification card;
- Location data (for example, the location data function in a mobile phone);
- Internet Protocol (IP) address;
- Cookies Your phone's advertising identifier;
- Data held by a hospital or doctor, which unequivocally identifies a person;
- Sound or image.
7. Who is the holder of personal data?
The holder of personal data is the natural person to whom the data relate and who used the digital platforms and services of ARHCESMO.
8. For what purposes does ARHCESMO treat your personal data?
Examples
| PURPOSES | DATA PROCESSING |
| Provision of information services Digital platforms |
Analysis of browsing profiles, adaptation and development of new products, content or information services (notifications, newsletters, digital platforms and informative dossiers and content apps). |
| Content Development | Analysis of navigation profiles, products, adaptation and development of new products, contents or services. |
| Commercial | Participants in contests or competitions, prize giving. |
| Marketing and Communication | Users of digital platforms and services ARHCESMO. |
| Files | Registration for requesting copies and licensing of content and data for billing. |
| Institutional Relations | Registration of guests and visitors, sending invitations. |
We will request your express consent before using the information for purposes other than those expressly set forth in this Privacy Policy.
9. When and how do we collect your personal data?
We collect personal data, such as when you participate in ARHCESMO service (congresses, events, training, etc.) or acquire ARHCESMO products or services, when you download or use ARHCESMO products, services and applications, through contacts with ARHCESMO. The collection can be done orally, in writing or through ARHCESMO digital platforms.
10. What is the basis for the processing of your personal data?
Consent.
Your consent must be expressed - in writing, orally or through the validation of an option - and prior, provided in a free, informed, specific and unambiguous manner. Execution of contract and pre-contractual procedures.
When the processing of personal data is necessary for the execution, execution and management of a contract with ARHCESMO, such as for the acquisition of service or equipment, archiving; or Compliance with legal obligation When the processing of personal data is necessary to comply with a legal obligation that ARHCESMO is subject to, for example, the communication of identification or traffic data to police, judicial, fiscal or regulatory entities or location data to ensure emergency; or Legitimate interest The processing of personal data by ARHCESMO may be justified by reasons of legitimate interest related to the execution of the tasks related to its activity as a company, such as data processing to improve quality of service, detection of fraud and protection of revenue and when our reasons for your use should prevail over your data protection rights
11. During how long does ARHCESMO treat and keep your personal data?
ARHCESMO treats and preserves your personal data according to the purposes for which they are processed and only for the period of time necessary to fulfill the purposes that motivated their collection and conservation, and always in accordance with the law, guidelines and decisions of the CNPD, or, whichever is applicable, until you exercise your right to OPPOSITION, RIGHT TO BE FORGOTTEN OR REMOVE CONSENT.
There are situations in which the law determines the retention of data for a minimum period of time, namely: for one year, traffic and location data for the purpose of investigating, detecting and prosecuting serious crimes or for the data necessary to inform the Tax Authority.
ARHCESMO will, after the expiration of the respective period of time, eliminate or anonymize the data whenever they are not to be kept for a different purpose that may be maintained.
12. Rights of the holder of personal data
The holder of personal data has rights to information, access and rectification or elimination of personal data and the right to portability of data, the right to limit or oppose the processing of their data, within the scope and under the terms of the RGPD and other applicable legislation.
The holder may withdraw, at any time, the consent that he has given for the processing of his personal data, within the framework of the RGPD. The revocation of consent shall not affect the lawfulness of the processing of personal data hitherto made, based on the consent you have previously provided.
You also have the right to complain about the processing of your data to the CNPD.
Exercise your rights through the following contacts:
This email address is being protected from spambots. You need JavaScript enabled to view it.
Letter
ARHCESMO - Regional Association of Hoteliers of Cascais and Estoril, Sintra, Mafra and Oeiras
To the care of the Data Protection Officer
Av. Clotilde, Building CCE, Floor 4-C, 2765-211 Estoril
The exercise of rights is free of charge, except in the case of a manifestly unfounded or excessive or unjustifiably reiterated request, in which case a reasonable fee may be charged against costs.
The reply to the request shall be made without undue delay within one month of receipt of the request, unless it is a particularly complex request or occurs in exceptional circumstances. This period may be extended by up to two months where necessary. In view of the complexity of the request and the number of applications received.
In the context of your request, you may be asked to prove your identity so as to ensure that the sharing of personal data is only done with its owner.
13. Transmission of personal data
Personal data may be transmitted to subcontractors for processing in the name and on behalf of ARHCESMO. In this case, ARHCESMO shall take the necessary contractual measures to ensure that subcontractors respect and protect the personal data of the holder.
The data may also be transmitted to third parties - entities to whom the data must be communicated by law, such as the Tax Authority, judicial authorities, criminal police agencies, among others.
ARHCESMO may occasionally have to transfer its personal data to a third country outside the EU space and that it does not form part of the list of countries that the EU has already considered to be the protection of adequate personal data.
In such cases, ARHCESMO will ensure that data transfers are carried out in strict compliance with applicable legal standards.
14. Responsibility for digital platforms and third party services
Regarding the use and processing of personal data of ARHCESMO digital platforms, please consult ARHCESMO's Cookies Policy.
ARHCESMO is not responsible for the content accessed through any link that causes the holder of personal data to navigate outside the digital platforms ARHCESMO and for the processing of personal data in these made, where such links are the responsibility of third parties. The websites and third-party content are not subject to this Privacy Policy, so we advise that whenever you browse these sites, look for and read the Privacy policies, as well as the applicable terms and conditions.
15. What are the security procedures that guarantee the protection of your data?
ARHCESMO takes all necessary and legally required precautions to ensure the privacy of personal data handled and / or transmitted through its digital platforms. These precautions ensure online and offline security of this information.
Whenever sensitive information is collected or used, the data will be encrypted using the SSL protocol. This so-called Secure Socket Layer technology is used to improve the security of data transmission over the Internet, encrypting and protecting sensitive data and information using the HTTPS protocol. SSL guarantees the holder of personal data that the data will not be fraudulently intercepted and that all information is treated with the utmost security.
16. Doubts?
If you have any questions about any of the topics covered in this document, please contact us to:
This email address is being protected from spambots. You need JavaScript enabled to view it.
Letter
ARHCESMO - Regional Association of Hoteliers of Cascais and Estoril, Sintra, Mafra and Oeiras
To the care of the Data Protection Officer
Av. Clotilde, Building CCE, Floor 4-C, 2765-211 Estoril
Last updated: March 25, 2019
General Regulation on Data Protection (RGPD): Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the and repealing Directive 95/46 / EC (General Regulation on Data Protection) (OJ L 119, 4.5.2016).
