CHAVES TERMAS & SPA - http://www.termasdechaves.com/
- Chaves Termas & Spa's main objective is to provide thermal and wellness services. The company is referred to as "Termas de Chaves" throughout this text.
Articles 8, 13, 14 and 21 of the General Data Protection Regulation
Respect for users of the Termas de Chaves website, the protection of their data, and all those who relate directly or indirectly to our services and company are absolute priorities for us.
On the Termas de Chaves website, you must understand that we are entirely transparent in the information we present and the information we collect and treat about those who browse our website.
Our website collects various information - anonymous and never identifying the user - through the Google Analytics system, being able to obtain with these data statistics about the type of users, preferences, location and other anonymous and general information to be able to provide better content. And optimize our services and website.
In addition, we only collect personal data through the Contact Form available on the website.
In points 4, 5 and 6 we describe what data we collect and how we treat them, and at any time, they can be accessed, edited or deleted by users.
Please note that we cannot guarantee that all URLs in this document will be functional when you read the document. All URLs in this data protection declaration are verified to be correct and active at the time of writing; however, we cannot guarantee that any URLs to external websites will remain functional over time, as such URLs are subject to change at the discretion of the external website owner.
If you have any questions, do not hesitate to contact us:
- Termas de Chaves
- Largo das Caldas
- 5400-534 Chaves
- NIPC 506695018
- Phone: + 351 276 332445
- Email: firstname.lastname@example.org
- Website: http://www.termasdechaves.com/
SOME MORE INFORMATION ABOUT OUR WEBSITE
1. ABOUT COOKIES
The data subject (the user) can at any time prevent the setting of cookies on our website by means of a corresponding setting of the Internet browser used and therefore permanently deny the setting of cookies. In addition, cookies that have already been set can be deleted at any time via the Internet browser or other software programs. This is possible in all popular Internet browsers and is called "clearing the cache". If the data subject disabled the setting of cookies in the Internet browser used, not all the features of our website can be fully usable.
2. COLLECTION OF GENERAL DATA AND INFORMATION
This website collects some general data and information when a data subject or an automated system accesses the website. This data and general information are stored in server log files. The data collected may consist of (1) browser types and versions used, (2) the operating system used by the system that accesses it, (3) the website through which the system arrives at our website (the so-called referent), (4) the sub-websites, (5) the date and time of access to the Internet website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the system accessing to the website and (8) any other similar data and information that may be used in the event of an attack on our information technology systems.
When using this data and general information, we do not draw conclusions about the data subject. Rather, this information is necessary to (1) deliver our website content correctly, (2) optimize our website content, as well as your advertisement, (3) ensure the long-term viability of our technology systems website information and technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. Therefore, we analyze the data and information collected statistically, with the aim of increasing the protection and security of our company's data and ensuring an optimal level of protection for the personal data we process. Anonymous data from server log files are stored separately from all personal data provided by a data subject.
3. COLLECTION OF GENERAL DATA FOR USE IN GOOGLE ANALYTICS
This website uses an anonymized data collection system for web analysis and statistical use. Web analytics is the collection, aggregation and analysis of data about the behaviour of visitors on websites. A web analysis service collects, inter alia, data about the website from which a person came, which pages were visited, or how often and for what duration a page was viewed. These analyzes are mainly used to generate statistical reports to allow the optimization of a website and to carry out a cost-benefit analysis of Internet advertising. The data relating to each user is kept for 50 months, after which it is permanently deleted.
The operator of the Google Analytics component is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043-1351, United States of America.
Google Analytics places a cookie on the data subject's information technology system. The definition of cookies is explained above. By setting the cookie, Google can analyse our website's use. With each call to one of the individual pages of this internet website, which is operated by the controller and in which a component of Google Analytics has been integrated, the internet browser on the information technology system of the data subject will automatically send data via the component of the Google Analytics for online advertising purposes. In the course of this technical procedure, the Google company gains knowledge of personal information, such as the IP address of the data subject, which allows Google, among other things, to understand the origin of visitors and carry out behavioural analyzes on the website.
The data subject can, as indicated above, prevent the setting of cookies on our website at any time by means of a corresponding adjustment of the web browser used and therefore permanently deny the setting of cookies. This browser adjustment will also prevent Google Analytics from setting a cookie on the data subject's information technology system. In addition, cookies already used by Google Analytics can be deleted at any time via the web browser or other software programs.
If the browser add-on has been uninstalled by the data subject or any other person who is attributable to their sphere of competence or is deactivated, it is possible to perform the reinstallation or reactivation of the browser add-on.
More information and Google's applicable data protection provisions can be found at www.google.com/intl/en/policies/privacy and also at www.google.com/analytics/terms/us.html. Google Analytics is explained at www.google.com/analytics.
4. COLLECTION OF PERSONAL DATA IN THE SCOPE OF FORMS
Termas de Chaves collects and uses the personal data of its customers (physical and online, whether actual or potential) in situations clearly identified as the Contact Form.
What is personal data?
Personal data is considered to be any and all information relating to an individual person identified or capable of being identified.
Who are the holders of personal data?
The customer, or potential customer, an individual person, to whom the data relates and who enjoys, or intends to enjoy, the products, services, and campaigns, made available by Termas de Chaves.
The representative or point of contact in the company, in the case of legal persons, within the scope of the execution of a contract or pre-contractual due diligence, entered into between that company and Termas de Chaves.
What categories of personal data are processed by Termas de Chaves?
Contact information: for example, name, email, telephone, address.
Personal information: for example, date of birth, profession, identification number and taxpayer number.
Information for the provision of services: for example, your beneficiary number.
In the case of representatives of legal entities, we only collect the data essential for the proper execution of the contract, such as name, email, telephone and NIPC.
How, when and for what purposes is your personal data collected?
Your personal data may be collected in the following circumstances and for the following purposes:
Via the Termas de Chaves website when contacting Termas de Chaves through the Contact Form on the Contacts tab.
For the purposes of entering into and executing a contract, namely, when purchasing a service or product in the online store.
For marketing campaigns, when you receive notifications of special offers by Termas de Chaves, and with express consent, you provide us with your personal data.
What are the grounds and duration of the processing of personal data?
Consent: your personal data may be processed by means of a free, specific, informed and explicit expression of will, pursuant to which you accept, by means of an unequivocal positive declaration or act, that your personal data be processed. For example, with consent, we process the personal data of our customers and potential customers for commercial and marketing purposes, namely marketing campaigns, promotions, and satisfaction surveys about the services provided. On this basis, we also process data relating to your history of preferences and interests.
Pre-contractual due diligence and/or contract execution: your personal data may be necessary for doubts clarification, for the conclusion, execution and management of the contract entered into with Termas de Chaves.
Compliance with legal obligation: your data may be necessary for the fulfilment of a legal obligation to which the person responsible for the treatment, in this case, Termas de Chaves. For example, to comply with tax obligations, we must provide information to the Tax Administration.
Legitimate interest: your data may be necessary to carry out certain tasks related to the business activity of Termas de Chaves, except in cases where your privacy and data protection rights must prevail. Examples: we process personal data based on legitimate interest, namely to improve our services, manage our relationship with the customer, before and during the services provided; within the scope of contact with customers via the website and social networks; when we need to contact the representative of a legal person, within the scope of the performance of a contract.
How long do we keep your personal data?
Termas de Chaves keeps the holders' personal data only for the period strictly necessary to pursue the purpose for which they were collected.
In certain cases, the law requires data retention for a specific period, namely in the case of data necessary for information to the Tax Authority, which will be kept for 10 years, according to the legislation in force.
We will also keep your data for as long as you maintain a contractual relationship with Termas de Chaves. However, based on your consent, we may keep your personal data for periods longer than the duration of the contract to ensure rights and duties related to the contract or in situations where there is a legitimate interest of Termas de Chaves, always respecting the necessary period. to pursue the purpose for which they were collected.
In the absence of a specific legal obligation, your data will only be processed for the period necessary to fulfil the purposes that motivated its collection and as long as there are legitimate grounds that allow its conservation by Termas de Chaves.
As a rule, your personal data, when processed for the purposes of marketing campaigns, will be kept for a maximum period of 3 years from the date of collection of your consent or the last contact made (whichever occurs last) and if, within this period, you have not withdrawn your consent.
Once the maximum retention period has been reached, the personal data will be irreversibly anonymized (and the anonymized data may be kept) or will be securely destroyed.
To whom do we transmit your personal data?
Termas de Chaves transmits your personal data only when necessary for the above-mentioned purposes.
Your personal data may also be transmitted to entities to whom the data must be communicated by law, such as the tax authority or the Aliens and Borders Service.
What are the rights of the holders of personal data?
Termas de Chaves guarantees the applicability and fulfilment of all rights of the holder of personal data provided for in the General Data Protection Regulation and national legislation in force.
Right of Access
You have the right to obtain, from Termas de Chaves, confirmation that the personal data concerning you are or are not the object of treatment and, if that is the case, the right to access your personal data and information regarding that same treatment, for example, may require an exact copy of your compilation and request additional information about the treatment we carry out.
Right of Rectification
You also have the right to obtain, without undue delay, from Termas de Chaves, the rectification of inaccurate personal data concerning you, namely the right to correct or complete your personal data.
Right to data erasure ("right to be forgotten")
You may exercise the right to obtain the erasure of your personal data by Termas de Chaves, and without undue delay, provided that: the data is no longer necessary for the purpose that motivated its treatment; when you withdraw your consent, and there are no other valid grounds for its conservation; when you oppose the treatment, and there are no prevailing legitimate interests on the part of Termas de Chaves, as well as in other legally provided cases.
Right to Data Portability
You have the right to receive the personal data that concerns you and that you have provided to Termas de Chaves in a structured, commonly used, and machine-readable format, as well as the right to transmit this data to another person responsible for the treatment (if such is technically possible) without Termas de Chaves being able to prevent it, and if the treatment is based on consent or a contract, and if the treatment is carried out by automated means.
Right to withdraw consent
You can, at any time, change your consent, limit it to certain types of treatment or withdraw it, however, the withdrawal of consent does not compromise the lawfulness of the treatment carried out on the basis of the consent previously given.
Right of Opposition
You may also object, at any time, to the processing of personal data concerning you when there are no compelling and legitimate reasons for the processing that prevail over your interests, rights and freedoms or for the purposes of declaration, exercise or defence of a right in a court case.
Right to Treatment Limitation
In certain situations, you have the right to obtain from Termas de Chaves the limitation of the processing of your data, namely if you contest the accuracy of the personal data for a period that allows Termas de Chaves to verify its accuracy, in cases where the data has already are not necessary for the purposes of the processing but are still required by the data subject for the purposes of declaring, exercising or defending a right in legal proceedings and even when opposing the processing, until it is verified that the legitimate interests of the Termas de Chaves, prevail over yours, as well as in other legally provided cases.
Right not to be subject to any automated decision
You have the right not to be subject to any decision made solely on the basis of automated processing, including the definition of profiles, which produces effects in your legal sphere or significantly affects you similarly.
How to exercise your rights?
You may exercise your rights free of charge unless it is a manifestly unfounded or excessive request, in which case a reasonable fee may be charged, taking into account the costs.
We will respond to your requests within a maximum period of 30 days, except in cases of more complex requests.
You can exercise your rights through the following addresses:
Termas de Chaves
Largo das Caldas
Phone: + 351 276 332445
5. POSSIBILITY OF CONTACT VIA WEBSITE
The Termas de Chaves website contains a Contact Form that allows quick electronic contact with our company. If a data subject contacts Termas de Chaves by email or through a contact form, the personal data transmitted by the data subject is automatically stored. There is no transfer of this personal data to third parties.
6. HYPERLINKS (LINKS)
This website may contain hyperlinks (links) to other electronic sites (sites). We are not responsible for the privacy policies of these same electronic sites. Users are advised that, when accessing other electronic sites, they consult the pages that, within those sites, refer to their privacy policies.