Data Privacy Policy

For Quinta da Amendoeira Évora – The Farmhouse, the privacy and security of our guests’ personal data are a priority. Except in the circumstances described in this privacy policy, Quinta da Amendoeira Évora – The Farmhouse does not share personal information with third parties.

Quinta da Amendoeira Évora – The Farmhouse adopts principles, policies and procedures consistent with the values it upholds, in accordance with the standards and strategies assumed, fully safeguarding the requirements of the General Data Protection Regulation 2016/679.

The information provided by users and guests is stored and processed in the manner and under the terms necessary for the proper provision of the services made available and requested, as well as for the appropriate marketing of products, always in accordance with legal requirements.

Any and all processing of personal data is carried out with the consent of the data subject.

These principles are strictly complied with by all employees of Quinta da Amendoeira Évora – The Farmhouse, in accordance with the internal Code of Conduct.

All employees of Quinta da Amendoeira Évora – The Farmhouse who process personal data within the scope of their activities are individually responsible for complying with the applicable legal and regulatory provisions.

DATA CONTROLLER

The entities responsible for the collection and processing of personal data are:

PLANÍCIES LÍRICAS, LDA
Caminho Municipal 1088
Postal Code: 7005-279 Évora
VAT Number: 515555380

WHAT TYPE OF PERSONAL INFORMATION DO WE REQUEST?

We may ask you to provide us with some personal information.

We will request personal information such as your name, address, telephone contact, email address, credit card details, among others that may be requested, so that we can proceed with the reservation of your room and/or associated services, and so that we can comply with the legal obligations imposed on us.

All collected and processed data are used for the purposes that motivated their collection and of which the data subject has been duly informed.

WHAT DO WE USE YOUR PERSONAL INFORMATION FOR?

The personal information we process is requested for legal purposes, namely in the context of reservations.

The request for guest identification and storage of their personal data is based on legal obligations, namely under Law No. 23/2007 of 4 July, relating to the entry, stay, exit and removal of foreigners from national territory.

For any other activity, personal data are processed taking into account the prior consent of the data subject, namely when we use them to:

– Request feedback about our tourist developments through satisfaction surveys;
– Send emails related to your stay;
– Respond to requests or questions;
– Communicate special offers;
– Personalise the user experience on our website;
– Improve our website based on your experience when using it; and/or
– Communicate through our interactive chat.

There are no automated decisions, profiling or information definitions at Quinta da Amendoeira Évora – The Farmhouse.

WITH WHOM AND WHEN DO WE SHARE PERSONAL INFORMATION?

Under certain circumstances, and with your consent, we may share personal information with third parties.

This sharing of information may occur when we work with representatives and service providers contracted for certain purposes, namely regarding reservation confirmations, offers of certain products and services in connection with our website, email communications, customer support, improving our customers’ online experience, providing access to our partners’ websites, offering a personalised online experience and completing credit card transactions.

When it is necessary to contract services with third-party entities (subcontracting companies), which may have access to personal data of guests and employees, these companies are obliged to adopt all security measures and protocols used by Quinta da Amendoeira Évora – The Farmhouse, namely regarding the protection of personal data and strict compliance with the General Data Protection Regulation.

A Data Processing Agreement is mandatorily concluded, in which the company undertakes to take the necessary measures to protect the confidentiality and security of personal data, as well as to prevent improper access and use, loss or unauthorised destruction of personal data.

Quinta da Amendoeira Évora – The Farmhouse undertakes to only hire companies that provide sufficient guarantees to ensure the protection of the rights of guests and employees.

Where compliance with obligations is concerned and within the functions of public interest or the exercise of public authority vested in the controller, we are obliged to provide certain personal data, strictly necessary for the purpose in question.

We do not provide information relating to personal data by telephone, in order to avoid the leakage of personal and confidential information.

Regarding the transfer of personal data to external entities or countries outside the European Union, Quinta da Amendoeira Évora – The Farmhouse does not carry out this type of transfer, except in compliance with any legal requirement or where there is consent from the data subject.

In the event of transfers to third countries and international organisations, these may only be carried out in full compliance with the Regulation. Transfers may only take place if, subject to the remaining provisions of the Regulation, the conditions relating to transfers of personal data to third countries and international organisations are fulfilled by the controller or processor.

LINKS TO OTHER WEBSITES

Our website contains links that redirect users to other websites, whose privacy policies may differ from the privacy policy applied at Quinta da Amendoeira Évora – The Farmhouse.

We recommend that you check the privacy policies of those websites before disclosing any personal information.

In any case, please note that those websites do not share personal information with Quinta da Amendoeira Évora – The Farmhouse.

We are not responsible for the privacy policy, content or use of cookies by other websites.

HOW DO WE PROTECT YOUR PERSONAL INFORMATION?

We have created security measures throughout the organisation, namely through the creation of files and databases with restricted access, so that the personal data of data subjects do not suffer any breach, disclosure or misuse.

One of the security techniques we use for online transactions is a technology called Secure Sockets Layer (SSL). If your browser supports SSL (most do), your personal information will automatically be encrypted or encoded before being sent over the Internet.

The reservation engine provider of Quinta da Amendoeira Évora – The Farmhouse uses a Digital Certificate from Rapid SSL, one of the leading internet service providers. This certificate ensures that your personal information is transmitted securely (encrypted) to a secure server and not to an unknown or unauthorised server.

Quinta da Amendoeira Évora – The Farmhouse also adopts other security measures regarding the protection of your data:

– Antivirus software providing protection against malware;
– Antivirus software providing browser and email protection;
– The corporate network is protected by a firewall;
– Personal data backups are automatically reinforced;
– Our corporate Wi-Fi network is password protected;
– Remote access to our corporate network is only possible through a VPN (Virtual Private Network);
– Privileged accounts are not used for daily tasks and access to them is only possible by privileged users, from dedicated devices limited solely to authorised persons.
– Access to sensitive data is controlled and limited only to those who need access to it.
– Data loss prevention software is used to protect sensitive and personal data.
– Procedures for verifying, detecting, analysing and reporting security incidents are developed and communicated throughout the organisation.
– All personal and sensitive data are encrypted.
– Email communications are encrypted.
– Cloud/Network folders are encrypted.

Apart from all the measures adopted, Quinta da Amendoeira Évora – The Farmhouse carries out very close and periodic monitoring of all procedures through audits in order to understand whether they are effective and comply with GDPR requirements.

COOKIES AND OTHER INFORMATION

When you visit our website, you will receive a “cookie” (a small data package sent to the user’s browser) to be stored on your computer’s hard drive. The purpose of using cookies is to identify the user when visiting our website, so that we can improve and personalise the online experience.

The cookie only identifies the user’s device and does not store any personal information.

To visit our website without cookies, you should configure your browser to reject all cookies or to notify you when a cookie is set (each browser is different, therefore check your browser’s “Help” menu to learn how to modify your cookie preferences).

We may also use third-party cookies on our website to help manage online advertising. These cookies are provided by our advertising partners and allow a unique cookie to be recognised in your browser, which in turn enables us to know which advertisements generate traffic to our website, as well as to show you personalised advertisements based on the searches you performed and similar services you viewed.

The information we collect and share is anonymous and non-identifiable. It does not contain your name, address, telephone number or email address, nor any personal data that could identify you.

Some of our business partners (advertisers, for example) use cookies on our website. Quinta da Amendoeira Évora – The Farmhouse has no access to or control over these cookies. This privacy policy applies only to the use of cookies on the quintadaamendoeira.com website and does not cover the use of cookies by any other advertiser or partner.

When you visit our website, it is also possible that we store some information from your computer in order to improve our services and enhance the quality of your experience on our website.

Each time you make a reservation through our website, we record certain data in our reservation database, such as the guest’s name, email, check-in, check-out and IP address, in order to better manage procedures.

EMAIL COMMUNICATIONS

We do not intend to send you promotions or any type of advertising by email unless you have given your consent.

If you choose to receive our newsletters, we may send you information about new promotions and special offers.

You may at any time choose to stop receiving our emails through our website or via the “unsubscribe” options included in the emails sent.

YOUR RIGHTS

Quinta da Amendoeira Évora – The Farmhouse establishes procedures aimed at protecting and enforcing the rights of data subjects.

Some of your rights include:

– The right to access your data and obtain a copy of it;
– The right to have inaccurate personal data rectified;
– The right to erasure of your personal data, unless otherwise provided by law, and, where applicable, the restriction of processing;
– The right to object to the processing of data, for reasons related to a particular situation, under the terms of the law;
– The right to request the restriction of the processing of personal data;
– The right to data portability;
– The right to withdraw consent, without compromising the lawfulness of processing carried out based on previously given consent;
– The right to be notified in the event of a personal data breach;
– The right to be notified when information is stored for the first time by a method different from the original;
– The right not to have personal data used for advertising, direct marketing or any other form of commercial prospecting, as well as not to have such data communicated to third parties for the same purposes, except with the prior consent of the data subject; and
– The right to lodge a complaint with any supervisory authority, or through the website of the Portuguese Data Protection Authority.

RETENTION PERIODS

We retain the personal data collected for the period established by law whenever legal obligations are involved, namely the archiving of invoices and accounting records, for a period of 10 years.

Regarding the documents completed by each guest at Check-in (Registration Card), these are stored for a period of 5 years for internal control purposes.

In cases where there is prior consent for the processing of personal data, the data are stored only for the time necessary to fulfil the purposes of the service in question.

The data subject always has the possibility to withdraw their consent.

It is possible to book services by completing a form containing personal data. These are stored for a period of 1 month, information that is provided to the guest in the form itself.

In our loyalty programme, data are processed and stored for as long as the loyalty relationship lasts, and the guest may remove themselves from our databases at any time. All information is provided at the time of enrolment.
Personal data may be retained for longer periods, provided they are processed exclusively for archiving purposes in the public interest, or for scientific or historical research purposes, or for statistical purposes.

DATA PROTECTION OFFICER

Our Data Protection Officer is the employee César Perdigão, who can be contacted via the email address: gdpd.quintadaamendoeira@gmail.com.

If you would like clarification regarding any matter related to our Data Privacy Policy, please contact us via email at gdpd.quintadaamendoeira@gmail.com, or send us a letter to:

QUINTA DA AMENDOEIRA, ÉVORA – THE FARMHOUSE

Att: Document Management and Data Protection
Caminho Municipal 1088
Postal Code: 7005-279 Évora

CHANGES TO THE PRIVACY POLICY

In order to ensure that the Data Privacy Policy remains up to date, Quinta da Amendoeira Évora – The Farmhouse may make changes to this privacy policy.
All changes will be published through the appropriate channels so that all guests and employees have access to them.