Privacy Policy

IDENTIFICATION OF THE CONTROLLER

  • Name: Crissier Portuguesa-Empreendimentos Turisticos e Imobiliarios S.A. (“D´el Rey Collection”)
  • Registered Office: Avenida D. Inês de Castro, n.º 1, Vale de Janelas, 2510-451 Amoreira, Óbidos, Leiria
  • NIPC: 500698481
  • Telephone:
  • E–mail:

DUTY OF INFORMATION BY THE WEBSITE

The protection of personal data of natural persons is regulated in Portugal by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, (“General Data Protection Regulation” or “GDPR”) and Law No. 58/2019, of August 8 (“LPDP”) which ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data. “Personal data” is considered to be any information, of whatever nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person, whereby the protection does not cover the data of legal persons. A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity (for example, the Users’ name associated with the telephone number or email address).

By reading this Privacy Policy, the User is informed about the treatment of personal data carried out by the D´el Rey Collection through the website https://delreycollection.com (hereinafter “Website”).

PURPOSES OF PERSONAL DATA PROCESSING

The personal data collected and processed by the Hotel through the Website identified above will be used solely for the following purposes:

a) Manage and respond to contact and information requests submitted through the Website, particularly regarding activities, services, and real estate sales.

Legal basis: performance of a contract to which the Data Subject is a party or the implementation of pre-contractual measures at the Data Subject’s request, when the request relates to the contracting of services or the purchase of real estate. In all other cases, legitimate interest in ensuring the management of and response to contact and information requests received.

b) In the event of contracting, the data collected on this Website, together with the other data obtained under the contractual relationship, will be used for human resource management, to ensure compliance with legal obligations and to provide employees with the means necessary for the pursuit of professional activity.

Legal basis: Performance of a contract to which the Data Subject is a party, or the taking of steps at the request of the Data Subject prior to entering into a contract, and compliance with legal obligations to which D´el Rey Collection is subject, as applicable.

c) Compliance with national and international legal provisions, or execution of orders from competent judicial authorities.

Legal basis: compliance with legal obligations.

d) Compliance with legal obligations, deriving from applicable data protection legislation, as well as for exercising the rights of the data subjects, in particular the defense of a right in legal proceedings.

Legal basis: compliance with legal obligations and the legitimate interest of Forte de Gaia in defending its legally protected rights and interests.

e) Sending commercial and/or promotional information about D´el Rey Collection.

Legal basis: consent of the Data Subject or, where legally permissible, the legitimate interest of Forte de Gaia in promoting its own products, offers and services to its customers.

Please note that we carry out anonymous and aggregated analysis of service usage to identify user habits and trends, in order to improve the services offered and meet the specific needs of Users.

D´el Rey Collection guarantees the confidentiality of all data provided. Although D´el Rey Collection collects and processes data in a secure manner to prevent their loss or manipulation, using the most appropriate techniques for this purpose, it should be noted that the collection of data on open networks does not allow the circulation of personal data in conditions of absolute security, with the risk that they may be accessed and used by unauthorized third parties.

Failure to respond to data marked as mandatory may imply the impossibility of responding to the Data Subject’s request.

LEGITIMACY FOR PROCESSING PERSONAL DATA

D´el Rey Collection processes Users’ data in the following situations:

  • when they have given their free, specific, informed and unambiguous consent to the processing of their personal data for certain purposes and/or;
  • when it is necessary for the execution of a contract to which the Data User is a party, or for pre-contractual steps at the request of the User;
  • for compliance with legal obligations to which D´el Rey Collection is bound;
  • for the purposes of the legitimate interests pursued by D´el Rey Collection or by third parties, unless the interests or fundamental rights and freedoms of the Data Subject prevail and require the protection of personal data.

The User guarantees that the information provided is true, accurate, complete and up-to-date, and is liable for any damage or loss, direct or indirect, that may be caused as a result of breach of this obligation.

In the event that the data provided belongs to a third party, the User guarantees that the User has informed the said third party of the details provided in this document and has obtained their authorization to provide their data to D´el Rey Collection for the purposes indicated.

PERIOD OF STORAGE

D´el Rey Collection only processes and stores the Users’ personal data for the period that is necessary or mandatory for the fulfilment of the purposes described above, applying information storage criteria appropriate to each treatment and in line with applicable legal and regulatory obligations.

D´el Rey Collection keeps personal data in its systems in such a way that it is possible to identify the data subjects in accordance with the following criteria:

• for a period of time not exceeding the pursuit of the purposes for which they were collected, provided that legal or contractual obligations do not provide otherwise;

• to fulfil specific legal or contractual obligations;

• where applicable and legitimate, until such time as the Data Subject may request the objection or erasure of the data.

DATA COMUNICATION

In addition to communications made in compliance with legal obligations, the Data Subject´s personal data may be disclosed by D´el Rey Collection, for the purposes identified above, to the following categories of recipients:

  • employees and staff of D´el Rey Collection;
  • domestic and international companies belonging to the same group as D´el Rey Collection;
  • entities related to or sharing common management with D´el Rey Collection and the managing entity, as well as domestic and international companies belonging to the same group;
  • authorities in general, government agencies, public entities, and public bodies, both domestic and international;
  • entities to which D´el Rey Collection companies provide services;
  • external service providers;
  • judicial authorities, criminal police agencies, and administrative authorities.

INTERNATIONAL DATA TRANSFERS

The personal data collected will be processed within the European Economic Area. There will be no international data transfers to third countries or international organizations.

If personal data is processed outside the European Economic Area, it will be done with the adoption of adequate safeguards and the required level of protection in accordance with the legislation on personal data protection.

INFORMATION’S SECURITY

D´el Rey Collection has implemented appropriate technical and organizational security measures to ensure the security of personal data provided by the User, in order to prevent alteration, loss, processing and/or unauthorized access, taking into account the current state of the technology, the nature of the data stored and the risks to which they are exposed.

Personal data is processed with the level of protection legally required to ensure their security and prevent alteration, loss, processing or unauthorized access, taking into account the state of technology, the User being aware and accepting that the security measures on the Internet are not fool proof.

Whenever accessing personal data, D´el Rey Collection undertakes to:

• Store them by means of security measures, legally required, of a technical and organizational nature, which guarantee their security, thus avoiding alteration, loss, treatment or unauthorized access, in accordance with the state of technology at each moment, the nature of the data and the possible risks to which they are exposed;

• Use the data exclusively for the purposes previously defined;

• Implement physical security measures to protect the facilities;

• Ensure that data is handled only by employees whose intervention is necessary to meet the request of the Data Subject, who are bound by the duty of secrecy and confidentiality. If there is the possibility of information being disclosed to third parties for the aforementioned purposes, they shall be required to maintain the necessary confidentiality in accordance with the provisions of this document.

In case D´el Rey Collection subcontracts to other entities the provision of services involving the transfer of personal data, such entities shall be obliged to adopt the necessary technical and organizational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorized access or any other type of unlawful processing.

EXERCISE OF RIGHTS

In accordance with the provisions of the GDPR, the User may exercise their rights of access, rectification, erasure, limitation on processing, portability, objection and revocation of consent by requesting it in writing by any of the following means, specifying the right or rights they wish to exercise:

  • E-mail: [•]
  • Registered office: [•]

CONTROL AUTHORITY

The Users have the right to file a complaint with the Comissão Nacional de Proteção de Dados (CNPD) in relation to matters concerning the exercise of their rights and the protection of their personal data, through the following webpage www.cnpd.pt.

THIRD-PARTY WEBSITES

The Website may contain advertising, links or other content that connects or redirects to pages and services of suppliers, advertisers, affiliates, sponsors of D´el Rey Collection and other third parties.

However, D´el Rey Collection does not control the content or links appearing on these pages and is not responsible for the practices used by these pages or Websites. D´el Rey Collection advises Users to visit the privacy policy of such pages, as well as their terms and conditions.

Searching or interacting on any other Website, including those that have an external link to the Website, are subject to the terms and conditions of that Website and D´el Rey Collection, in no event, is responsible for such access and use.

PRIVACY POLICY CHANGES

D´el Rey Collection reserves the right to revise this Policy at any time it deems appropriate, so it is recommended that Users check the privacy policy regularly and/or each time they access the Website.