PALMARES OCEAN LIVING & GOLF
(in accordance with the EU Regulation 2016/679 issued by the European Parliament and European Council on the 27th April 2016)
Entity responsible for treatment and subcontracted entities
The entity responsible for collecting and processing Personal Data is “Palmares” Companhia de Empreendimentos Turísticos de Lagos, S.A. (hereinafter “Palmares “), a limited liability company with headquarters at Campo Golfe Palmares, Odiáxere, 8600-250 Lagos, Portugal, registered with the Commercial Registry of Lagos with the unique registration number 500210446, with a share capital of Euros 200.000,00.
Categories of personal data collected and subject to processing
The Personal Data collected and processed consists essentially of information regarding name, nationality, date of birth, marital status, occupation, address, e-mail address, telephone, mobile phone, tax identification number, although other Personal Data may be collected, that may be necessary or appropriate for the provision or billing of services provided by “Palmares Companhia de Empreendimentos Turísticos de Lagos, S.A”.
Usage and purpose of user data processing
The Personal Data collected will be used only for the following purposes: Reservation of properties; Management of contracts with the Data Owner; Billing and collection to the Data Holder; Information to the Data Owner, who has authorized it, of new products and services made available on the Site and / or facilities; offers and special campaigns; information on promotions and information about “Palmares Ocean Living Golf” and “Palmares” and, finally, for statistical analysis of marketing of exclusive use of “Palmares”; Provision of other services, such as newsletters, opinion surveys, or other information or products requested or purchased by the User.
Term of personal data storage
Where there is no legal requirement to keep the data for a minimum period of time data shall be retained only for the minimum period necessary for the purposes for which it was collected or further processed and deleted at its expiry, except if within that period the consent is withdrawn by the holder.
The processing of personal data may be performed by a third party, subcontracted by “Palmares”. The subcontracted entitles will only process the data for the purposes established by “Palmares” and in compliance with the instructions issued by it, strictly complying with the legal rules on protection of personal data, information security and other applicable standards.
After the collection of Personal Data, and if applicable, “Palmares” provides the Holder with information about Subcontracted Entitles that, in this case, can process data on behalf of ” Palmares”.
International transfer of data
“Palmares” will process data collected within the European Union, and will not make any international transfer of data. Should this transfer take place in the future, it undertakes to ensure that the transfer complies with applicable legal provisions, in particular as regards the determination of the country’s suitability for data protection and the requirements applicable to such transfers.
Rights of data holders
While “Palmares” owns or processes the personal data, all the holders can, at any moment and free of charge, exercise the following rights:
- Right of access – right to request a copy of the existing information about the holder.
- Right of amendment – right to correct data that it considers inaccurate or incomplete.
- Right to erase personal data (right to be forgotten) – in certain circumstances, as data owner, may request the data be deleted from the records.
- Right to limitation of treatment – where certain conditions are met the data holder may limit the processing of his data.
- Portability right – right to have the data transferred to another organization, within certain constraints.
- Right to object to processing – right to object to certain types of processing, such as direct marketing.
- Right to object to automated treatment, including proﬁle.
- Right to ﬁle a complaint – with the National Data Protection Commission or other supervisory entity.
Mandatory nature of the data requested
The data in the customer registration form that are marked with (*) are required to meet the established purpose. As such, if the holder does not provide the same, “Palmares” cannot provide the service or meet the request of the latter.
“Palmares” can prepare user proﬁles, which will allow the adoption of automated decisions, based on personal characteristics, preferences, behavioral history and location. In these cases, the holder will have the right to obtain human interven on in the decision, to express his point of view and to challenge the decision adopted by “Palmares”.
Personal data protection measures
To ensure the security of the Data of the Holder and the maximum confidentiality, “Palmares” applies several technical and organizational measures. Taking into account the nature, scope, context and purpose of data processing, as well as the risks arising from such processing to the rights and freedoms of the Holder, “Palmares” undertakes to apply, not only at the time of deciding upon the means of processing, but also during processing, the technical and organizational measures necessary and appropriate for the protection of User Data and compliance with legal obligations.
It also undertakes to ensure that, by default, only data that is necessary for each speciﬁc purpose of treatment is processed and that such data is not made available without human intervention and to an indeterminate number of persons.
Breach of personal data
In the event of a breach of Personal Data and to the extent that such breach is likely to pose a high risk to the User’s rights, freedoms and warranties, “Palmares” undertakes to notify the User in question of any Personal Data breach within 72 hours of becoming aware of the incident.
Applicable law and forum