WHO ARE WE?
We are ALDEIA DA CUADA and we are located in Fajã Grande, Azores. Our main activity is the provision of hotel services with the greatest comfort and convenience.

WHY THIS PRIVACY AND PERSONAL DATA PROTECTION POLICY?
This Policy is intended to make known to the Clients/Users of “ALDEIA DA CUADA” the general rules of privacy and treatment of personal data, which are collected and treated in strict compliance with the provisions of the personal data protection legislation in force at any given time, particularly in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“RGPD”).
The “ALDEIA DA CUADA” respects best practices in the field of security and protection of personal data and to this end has taken the necessary technical and organizational measures to comply with the GDPR and ensure that the processing of personal data is lawful, fair,
transparent and limited to the authorized purposes.
The “ALDEIA DA CUADA” is committed to the protection and confidentiality of personal data, having adopted the measures it deems appropriate to ensure the accuracy, integrity and confidentiality of personal data, as well as all the other rights of the respective holders.

WHAT DOES THIS POLICY COVER?
This Policy applies exclusively to the collection and treatment of personal data in relation to which “ALDEIA DA CUADA” is responsible for the respective treatment, in the scope of the services and products made available to its Clients/Users and in all the situations in which the
treatment of personal data occurs.

WHAT IS PERSONAL DATA?
Personal data is any information, of any nature and regardless of its support, including sound and image, concerning an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, electronic identifiers, or to one or more factors specific to his/her physical, physiological, genetic, mental, economic, cultural
or social identity.

WHAT DOES THE PROCESSING OF PERSONAL DATA CONSIST OF?
The processing of personal data consists of an operation or set of operations performed upon personal data or sets of personal data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation,

use, disclosure, dissemination, comparison, interconnection, restriction, erasure or destrution.

WHO IS IN CHARGE OF DATA PROCESSING?
The entity responsible for the treatment of personal data is “ALDEIA DA CUADA”, which determines the purposes and the means of treatment of the same. 
For this purpose, should the holder of the personal data need to contact the person responsible for the treatment of data, he/she may do so through the following contact: info@aldeiadacuada.com

WHAT TYPES OF PERSONAL DATA ARE PROCESSED?
The “ALDEIA DA CUADA”, within the scope of the activities it develops, processes the personal data necessary for the provision of services and/or supply of products, processing data such as name, telephone number, e-mail address, company name (if applicable), address, tax identification number and credit card data (collected only for billing purposes) in accordance with the information provided by the holders of personal data.
The personal data may also be processed for marketing purposes or for advertising offers of goods or services of “ALDEIA DA CUADA”, if the respective holder has authorized this. 
If there is prior consent from the holder, this may be withdrawn at any time, without the lawfulness of the processing carried out on the basis of the consent previously given being compromised.

WHEN AND HOW DO WE COLLECT YOUR PERSONAL DATA?
The “ALDEIA DA CUADA” collects your personal data, namely by telephone, in writing, through its website, guaranteeing, whenever necessary, the prior consent of the holder of the personal data.
Some personal data are indispensable to the execution of the contract, without which “ALDEIA DA CUADA” will not be able to make available the product or service in question. If the holder of the personal data is not a Client/user of “ALDEIA DA CUADA”, the respective personal data will only be treated when they are made available, in which case the rules of this Policy will apply.
The personal data collected may be treated by computer in an automated or non-automated way, guaranteeing in all cases the strict compliance with the legislation of protection of personal data, being stored in specific databases, created for the effect and, in no case will the data collected be used in any way for the purposes for which they were collected.

WHO ARE THE RECIPIENTS OF THE PERSONAL DATA?
Without prejudice to the recipients indicated throughout this Policy, “ALDEIA DA CUADA” may communicate the personal data of the Client/User with the purpose of complying with legal obligations, namely to police, judicial, fiscal and regulatory entities.

WHAT ARE THE PURPOSES OF THE TREATMENT OF PERSONAL DATA AND RESPECTIVE LEGAL GROUNDS?
In general, the personal data collected is based on and intended for the management of the contractual and commercial relationship, the provision of the contracted services, the adequacy of the services to the needs and interests of the Customer/User, namely for the purposes of access to specific functionalities of the services, information and marketing actions.
Additionally, personal data may also be processed for the purpose of complying with legal obligations.

FOR HOW LONG DO WE KEEP YOUR PERSONAL DATA?
The period of time during which personal data is stored and retained varies according to the purpose for which the information is processed.
In fact, there are legal requirements that oblige us to retain data for a minimum period of time. Thus, and whenever there is no specific legal requirement, the data will be stored and kept only for the minimum period necessary for the pursuit of the purposes that motivated their collection or their subsequent processing, under the terms defined by law.

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?
As owners of personal data, the Clients/Users are guaranteed, at any time, the right to access, rectify, update, limit and delete their personal data (except with regard to data which are indispensable to the provision of services by “ALDEIA DA CUADA” or to the fulfilment of legal obligations to which the party responsible for processing is subject), the right to oppose their use for commercial purposes by “ALDEIA DA CUADA” and to withdraw consent, without this compromising the lawfulness of the processing carried out under this consent, as well as the right to data portability.

HOW CAN YOU ACCESS, RECTIFY, UPDATE, LIMIT, DELETE, OPPOSE THE PROCESSING OF YOUR
PERSONAL DATA, OR REMOVE CONSENT?
Without prejudice to the provisions of the RGPD, the holder of the personal data may do so, directly or by written request, addressed to the respective controller, through the contacts provided for this purpose in this document, as well as other contacts made available by “ALDEIA DA CUADA”.

HOW CAN YOU OPPOSE THE RECEIPT OF CONTACTS FOR MARKETING PURPOSES?
The “ALDEIA DA CUADA” may promote actions of disclosure to its Clients/Users of new products or services, namely by telephone, e-mail, SMS or any other electronic communications service, if the holder of the personal data has given his consent.

If the holder of the personal data does not wish to continue to receive these communications, he/she may, at any time, withdraw his/her consent to the use of his/her data for marketing purposes.

HOW CAN YOU COMPLAIN?
Without prejudice to being able to present complaints directly to “ALDEIA DA CUADA” through the contacts made available for this purpose, the Client/User may complain directly to the Control Authority, which is the National Commission for Data Protection (CNPD), using the contacts made available by this entity for this purpose.

WHAT MEASURES HAVE BEEN ADOPTED BY “ALDEIA DA CUADA” TO ENSURE THE SECURITY OF
YOUR PERSONAL DATA?
The “ALDEIA DA CUADA” assumes the commitment of guaranteeing the protection of the security of the personal data made available to it, having approved and implemented rigorous rules in this matter. The fulfillment of these rules is an obligation of all those who legally access
them.
Bearing in mind the concern and commitment shown by “ALDEIA DA CUADA” in the defense of personal data, various security measures of a technical and organizational nature have been adopted in order to protect the personal data made available to it against their unauthorized
disclosure, loss, misuse, alteration, treatment or access, as well as against any other form of unlawful treatment.
Additionally, the third parties who, in the context of the provision of services, process the personal data of the Client/User on behalf of “ALDEIA DA CUADA” are obliged, in writing, to implement appropriate technical and security measures which, at each moment, meet the requirements foreseen in the legislation in force and ensure the defense of the rights of the holder of the data (namely, the protection of privacy and personal data).´

UNDER WHAT CIRCUMSTANCES IS THERE COMMUNICATION OF DATA TO OTHER ENTITIES
(THIRD PARTIES AND SUBCONTRACTORS)?
The “ALDEIA DA CUADA”, within the scope of its activity, may resort to third parties for the provision of certain services. Sometimes, the provision of these services implies access, by these entities, to personal data of the Clients/Users. When this happens, “ALDEIA DA CUADA”
takes the appropriate measures to ensure that the entities that have access to the data are reputable and offer the highest guarantees at this level, which is duly established and safeguarded contractually between “ALDEIA DA CUADA” and the third party(ies).
Thus, any entity subcontracted by “ALDEIA DA CUADA” will handle the personal data of our Clients/Users on behalf of “ALDEIA DA CUADA” and by adopting the technical and organizational measures necessary in order to protect the personal data against destruction, accidental or unlawful, accidental loss, alteration, diffusion or unauthorized access and against any other form of unlawful treatment.

You can unsubscribe at any time by clicking the link in the footer of our emails. For more information about our privacy policies, please visit our website.

UNDER WHAT CIRCUMSTANCES DO WE TRANSFER YOUR PERSONAL DATA?
The provision of certain services by “ALDEIA DA CUADA” may involve the transfer of your data outside Portugal, including outside the European Union or to International Organizations. 
In such a case, “ALDEIA DA CUADA” will strictly comply with the applicable legal provisions, namely as regards determining the suitability of the destination country(ies) as regards the protection of personal data and the requirements applicable to such transfers, including, where applicable, the signing of appropriate contractual instruments which guarantee and respect the legal requirements in force.

HOW DO WE USE “COOKIES”?
“Cookies” are small software tags that are stored on your computer through your browser, retaining only preference-related information, and as such do not include personal data.

To learn more about cookies and how “ALDEIA DA CUADA” uses them on its website, see the section below “ABOUT COOKIES”.

HOW CAN YOU FIND OUT ABOUT ANY CHANGES TO THE PERSONAL DATA PROTECTION
POLICY?
The “ALDEIA DA CUADA” reserves the right to make adjustments or changes to this Personal Data Protection Policy at any time.