1.1 | Processing of Personal Data
According to the General Data Protection Regulation (GDPR), "Personal Data" means information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Also according to the GDPR, "Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The Privacy Policy available on the website www.albergariaquimbarreiros.com reflects the commitment to protecting individuals with regard to the processing of personal data. Albergaria Quim Barreiros is committed to protecting the personal data entrusted to it. For this reason, all information of a personal nature is treated and protected with the utmost diligence, always in accordance with the GDPR, in addition to compliance with applicable legislation and regulations in Portugal.The scope of application of this Policy includes all processing of personal data implemented in the entities listed below and all the booking sites of the respective hotel units.

Albergaria Quim Barreiros is a hotel located at Avenida Ramos Pereira 115, in Vila Praia de Âncora, with the postal code 4910-432 and corporate identification number 505043165. As a rule, personal data is processed when a natural person registers on the website, requests contact and/or newsletters, subscribes to a particular service, provides or requests information, purchases a product or establishes a contractual relationship with Albergaria Quim Barreiros.

1.2 | SUBCONTRACTORS
The aforementioned entities responsible for data processing undertake to only use subcontractors that provide appropriate guarantees to implement adequate technical and organizational measures, in such a way that the processing of personal data complies with the requirements of the GDPR and ensures the protection of the rights of data subjects.

1.3 | COLLECTION OF PERSONAL DATA
Albergaria Quim Barreiros may collect personal data directly, i.e. directly from the data subject, or, in other cases, indirectly, i.e. through partner entities or third parties. Collection can be carried out in the following ways:
- Direct collection: in person, by telephone, by e-mail and through the website;
- Indirect collection: through partners or companies related to Albergaria Quim Barreiros.
‍
The occasions on which personal data may be collected are diverse. These include:
a) Hotel unit activities (room reservation, check-in and payment, consumption in the bar, restaurant and other services, requests, complaints and/or disputes, among others);
b) Participation in marketing programs or events ("frequent customer" program, customer satisfaction surveys, among others);
c) Interaction with third parties (tour operators, travel agencies, among others);
d) Interaction on the internet (access to hotel unit websites, online forms, online reservations, among others).

Whenever personal data is processed on the basis of the data subject's consent, the data subject has the right to change/withdraw their consent at any time. However, any change in consent does not compromise the legitimacy of the processing carried out on the basis of the consent previously given.

The following principles apply to Albergaria Quim Barreiros.
1. Transparency: when processing personal data, the data subject is informed of the purposes and recipients of the data.
2. Purpose limitation: personal data is processed only for the purposes mentioned in this Privacy Policy.
3. Data minimization and accuracy: only personal data that is necessary for the purposes for which it is processed is collected. Appropriate measures are taken to ensure that the personal data we hold is accurate and up to date.
4. Limitation of storage: personal data is stored for the period of time necessary for the purposes for which it is processed and in accordance with the provisions of the law.
5. Confidentiality and security: personal data is processed in such a way as to guarantee its security, including protection against unauthorized or unlawful processing and against its loss, destruction or unforeseen damage, and appropriate technical and organizational measures are adopted.
6. International sharing and transfer: personal data may be shared between the collaborating entities of Albergaria Quim Barreiros or with third parties (such as business partners and/or service providers) in accordance with the purposes mentioned in this Privacy Policy. Appropriate measures are taken to ensure security when sharing or transferring this data.

Personal data will not be used for purposes other than those described in this Policy without this being made known to the data subject or, where appropriate, their consent being obtained. However, if the data subject requests Albergaria Quim Barreiros to contract services provided by other entities responsible for processing personal data, the personal data may be consulted or accessed by these third parties, limited to what is necessary to provide the services requested. Thus, the purposes may be as follows:
a) Management of room reservations and accommodation requests;
b) Management of the stay at the selected hotel;
c) Management of the contractual relationship with the client, before, during and after the stay;
d) Compliance with legislation in force;
e) Continuous improvement of hotel services.

To guarantee the security of processing, technical and organizational measures are implemented to protect personal data against unauthorized access or disclosure, accidental or unlawful destruction, loss or alteration, in relation to data stored or subject to any other type of processing. The measures implemented are regularly tested and their effectiveness assessed in order to guarantee the security of the processing.

There are no plans to transfer personal data to third parties established outside the European Union.

The Albergaria Quim Barreiros website saves cookies (text files) on the visitor's computer, making it possible to personalize the visit according to the user's preferences. In this case, no personal data is collected and the cookies are only stored for as long as is necessary for their intended purpose. Modern browsers allow you to block or delete installed cookies. In the "Help" menu of the User's browser you can find instructions for making these settings.

The main rights of data subjects, according to the GDPR, are:
a) right of access;
b) right to rectification;
c) right to erasure;
d) right to restriction of processing;
e) right to data portability;
f) right to object;
g) right to lodge a complaint with the National Data Protection Commission (CNPD) or another supervisory authority.

If you have any questions regarding our use of your personal data, you should first contact the Data Protection Department at reservas@albergariaquimbarreiros.com or by letter to the following address: Av. Ramos Pereira n 115 - 4910-432 Vila Praia de Âncora.At any time, you have the right to lodge a complaint with the National Data Protection Commission (CNPD) or another supervisory authority.

This Privacy Policy may be updated from time to time. We suggest that you consult it regularly, particularly when making a reservation at our hotel.

Last updated and published in May 2023.