Your data will be collected by Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda, with registered office at R MARTENS FERRÃO 12B, 1050-160, AVENIDAS NOVAS LISBOA, LISBOA, hereinafter designated Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda.
Mundusmundi-Empreendimentos Turísticos Hoteleiros Lda processes and keeps personal data within the European Union (EU) and observes the best practices in terms of personal data security and protection. A series of technical and organisational measures are in place for compliance with the General Data Protection Regulation (Regulation (EU) 2016/679) that is a legislative act that directly obliges both natural and legal persons that process data from EU citizen, whether these persons are EU residents or not, and aims at ensuring that personal data processing is lawful, fair, transparent and limited to authorised purposes.
Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda is responsible for the privacy statement and is the data controller under the GDPR. This entity will determine the purposes and processing means for all personal data presented and collected on-line.
The Data Protection Officer (DPO) ensures regulation compliance and is responsible for handling all matters concerning personal data protection. DPO’s identification and contact method are presented at the end of this document.
What are personal data?
Personal data is any information of whichever nature and irrespective of its means, including sound and image, concerning an identified or identifiable natural person.
An identifiable natural person is any person who can be identified either directly or indirectly, namely by a name, identification number, location data, electronic identifiers or one or more specific elements pertaining to their physical, physiological, genetic, mental, economic, cultural or social identity.
What is data processing?
Personal data processing is an operation or group of operations made based on personal data or sets of personal data, by automated means or not, namely the collection, record, organisation, structuring, retention, adaptation, recovery, consultation, use, disclosure, diffusion, comparison, interconnection, limitation, erasure or destruction.
Our data protection policy ensures your data are:
- Subject to a lawful, fair and transparent processing in regard to their data subject («lawfulness, fairness and transparency»);
2. Collected for defined, explicit and lawful purposes, and aren’t subsequently processed outside the scope of such purposes;
3. Adequate, relevant and limited to the extent of what is required by processing purposes;
4. Accurate and updated whenever required; all proper measures are in place in order to immediately erase or rectify any inaccurate data for the purposes for which they are being processed;
5. Kept in a way that allows data subject identification only for the period required for the purposes for which they are being processed;
6. Processed in a way that ensures their security against unauthorised or unlawful processing, loss, destruction or accidental damage, by means of the adoption of proper technical and organisational measures;
Personal Data Processing Purposes.
We will gather the following information, among other, making sure that consent will be required from data subjects whenever needed: Given Name and Surname, Civil Identification Number, Taxpayer Identification Number; Date of Birth, Email and Telephone number.
In general, personal data are collected for contractual relationship management, provision of hired services, adaptation of services do Customers/Users; Employees and Suppliers’ needs and interests, namely for purposes of access to specific service functionalities, content suggestions, informative proximity services and information and marketing initiatives.
In addition, personal data may also be processed for purposes of compliance with legal obligations and investigation, detection and prosecution of serious crimes.
The period during which personal data are stored and kept depends on their processing purpose.
In fact, there are legal provisions in place that require minimum data retention periods. This way, and in cases where no specific legal provision applies, data will be stored and kept for the minimum period required for the fulfilment of the purposes that led to their collection or subsequent processing, under legal terms.
Use of personal data
Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda will contact you to present its goods and/or services. Processing of such data is based on consent given by respective data subjects. Access to personal data is strictly limited to data controller’s personnel and subcontractors.
Sharing of personal data
Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda ensures that it does not intend to transfer any data to third countries under the General Data Protection Regulation and that it will require data subject consent if it decides to do so.
Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda has entered into an Agreement with its subcontractors under which they undertake to not transfer data to any third country.
In certain situations, both Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda and its subcontractors may be notified to disclose personal information in response to requests made by supervisory authorities to meet GDPR requirements.
Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda undertakes to ensure the security of all provided personal data by having approved and implemented strict regulations concerning this matter. All those legally accessing such data are required to comply with such rules.
Considering its concern with and commitment to personal data security, Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda has in place a set of technical and organisational security measures with the goal of protecting provided personal data against its diffusion, loss, improper use, alteration, unauthorised processing or access, and against any other unlawful processing form.
In addition, any third parties that may process Customer/User; Employee and Supplier’s personal data in the name or on behalf of Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda in the scope of service provision are obliged, in writing, to perform all adequate technical and security measures required in each moment to meet the legislation in force and ensure the defence of data subject’s rights (namely, Customers/Users, Employees and Suppliers’ privacy and personal data protection).
Access and rectification or elimination of personal data
As data subjects, Customers/Users, Employees and Suppliers have the right to request access to their personal data and also personal data rectification and elimination. Data subjects are also allowed to limit and object to processing as well as to request data portability.
This can be made either by contacting the Data Controller directly or in writing, using the contacts available for this purpose.
For clarifications, data subjects may contact the Data Protection Officer. Complaints may also be lodged with the CNPD whenever data subjects feel their rights are being violated.
Right of access
O titular dos dados pessoais tem o direito a obter da Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda a confirmação de que os dados que lhe digam respeito são ou não objeto de tratamento e, se for o caso, de aceder aos seus dados pessoais e aceder às informações previstas na lei.
Right to rectification
Data subjects have the right to request from Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda the rectification of inaccurate or incomplete data concerning them without any undue delay.
Right to erasure (“right to be forgotten”)
Data subjects have the right to request from Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda the erasure of their personal data without any undue delay and the company must comply with this request, without any undue delay, whenever one of the following reasons apply:
1. a) Personal data are no longer necessary for the purpose for which they were collected or processed;
2. b) Data subjects have withdrawn their consent for data processing (in the cases in which processing is based on consent) and there is no additional processing purpose;
3. c) Data subjects object to processing and there are no prevailing lawful interests that justify such processing;
Right to limitation of processing
Data subjects have the right to request from Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda the limitation of processing in one of the following cases, if applicable:
1. a) To object to personal data accuracy for a period that allows Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda to confirm data accuracy;
2. b) In case of lawful processing, if data subjects object to personal data erasure and requests limitation of processing instead;
3. c) Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda is no longer in need of such personal data for processing purposes, but they are still required for purposes of declaration, exercise of defence of a right in a judicial proceeding;
4.d) If data subjects object to processing, until the confirmation of whether the lawful purposes of data controllers prevail over data subjects’ rights.
Right to data portability
If processing depends on data subject consent and such consent was given via automated means, data subjects have the right to receive their personal data provided to Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda in a structured, generally used and machine-readable format.
Right to Object
In all cases where data processing was made 1) for purposes of lawful interests pursued by Mundusmundi-Empreendimentos Turisticos Hoteleiros Lda; or 2) for purposes of direct marketing or 3) for profiling, data subjects may object to the processing of their personal data at any time.
Data controllers are allowed to send marketing emails to website users after these have given their explicit consent. Users may withdraw their consents at any time by using the link available for such purpose in sent emails.
Amendments to this policy
This policy may be amended occasionally, for instance, due to changes in relevant legislation. Customers will be notified by email or via the website of any material changes made to this policy.