PRIVACY POLICY

The protection of your personal data is a priority for Quinta do Ti Carlitos. Below, we explain who we are, the purposes for which we may use your personal data, how we process it, with whom we share it, how long we retain it, as well as how you can contact us and exercise your rights.

1. Who are we?

Quinta do Ti Carlitos is the entity responsible for processing your personal data, in accordance with the General Data Protection Regulation (hereinafter referred to as the GDPR).

2. Why do we process your personal data?

Your personal data may be collected and processed by Quinta do Ti Carlitos for the following purposes:

a) Compliance with the legal obligations to which Quinta do Ti Carlitos is subject, namely reporting to the immigration and border authorities and for invoicing purposes.

b) Performance of the temporary tourist accommodation agreement or the local accommodation management agreement entered into with Quinta do Ti Carlitos, particularly with regard to payment transactions, check-in and check-out procedures, guest management, security deposit collection, provision of additional services during the stay, such as cleaning, transfers, breakfast or grocery shopping services, management of contractual obligations or the completion of pre-contractual procedures.

c) Communications by mobile phone and email, including the sending of information and commercial communications through digital platforms, as part of Quinta do Ti Carlitos' marketing strategies, as well as the sending of commercial and contractual information and responses to information requests.

d) Protection of Quinta do Ti Carlitos' assets and property, as well as the performance of statistical analyses.

Failure to provide the personal data necessary for the purposes set out in paragraphs a) and b) may prevent Quinta do Ti Carlitos from fulfilling its legal obligations and may consequently result in the termination of the temporary tourist accommodation agreement or the local accommodation management agreement entered into, without any right to compensation, as well as the inability of Quinta do Ti Carlitos to provide certain services, where such inability is not attributable to it.

3. What types of personal data do we collect?

In the course of its activities, Quinta do Ti Carlitos will collect and process the personal data necessary to provide the contracted services, respond to information requests or manage pre-contractual procedures.

This data includes, in particular, identification data, contact details and bank account or payment card details.

4. On what legal basis do we process your personal data?

Your personal data will be processed on the basis of the performance of the temporary tourist accommodation agreement, the local accommodation management agreement and compliance with the legal obligations imposed on Quinta do Ti Carlitos, particularly those arising from legislation governing the entry, stay and departure of foreign nationals from Portuguese territory and tax legislation, pursuant to Article 6(1)(b) and (c) of the GDPR.

Furthermore, the processing of personal data collected for the purposes set out in paragraph c) of the previous section is based on the explicit consent given by you to Quinta do Ti Carlitos, pursuant to Article 6(1)(a) of the GDPR.

For the purposes set out in paragraph d) of the previous section, Quinta do Ti Carlitos will process personal data on the basis of its legitimate interests, pursuant to Article 6(1)(f) of the GDPR.

5. How long do we retain your personal data?

Unless otherwise required by law, regulation or court order, the personal data collected will only be retained for the minimum period necessary to fulfil the purposes for which it was collected or for any subsequent processing.

6. With whom may we share your personal data?

Quinta do Ti Carlitos may need to share some of your personal data with other recipients.

These recipients include:

a) Organisations and/or companies associated with Quinta do Ti Carlitos, provided that they comply with an equivalent personal data protection policy.

b) Public authorities to which Quinta do Ti Carlitos is legally required to provide information, namely the Immigration and Borders Service and the Directorate-General for Contributions and Taxes (DGCI).

c) Data processors providing certain services related to your personal data, under a data processing agreement and exclusively for the purpose of providing technical assistance to Quinta do Ti Carlitos.

These include, in particular, website hosting providers, email marketing service providers, cleaning companies, law firms, accounting firms and insurance companies.

d) Competent authorities to which Quinta do Ti Carlitos is legally required to disclose information in connection with legal proceedings or for the purpose of detecting technical and/or security issues, namely judicial authorities or competent supervisory bodies.

7. Is my personal data transferred to countries outside the European Union?

Your personal data collected by Quinta do Ti Carlitos will not be transferred to entities established outside the European Union.

Exceptionally, and subject to certain conditions being met, Quinta do Ti Carlitos may transfer your personal data to countries outside the European Union, in accordance with applicable legislation, particularly for data hosting or storage, outsourcing of technical data processing services, backup and recovery of hosted data, and service development.

Quinta do Ti Carlitos guarantees that it will not transfer your personal data to countries that do not ensure an adequate level of protection, in accordance with the provisions of the GDPR.

8. What are my rights?

At any time, and in accordance with the GDPR, you may request access to your personal data, as well as its rectification or erasure, request the restriction of processing, exercise your right to object and your right to data portability.

If the requests submitted are manifestly unfounded or excessive, particularly due to their repetitive nature, Quinta do Ti Carlitos may charge a reasonable fee, taking into account the administrative costs associated with providing the information or communications, taking the requested action or, alternatively, refuse to act on the request.

With regard to personal data processed by Quinta do Ti Carlitos on the basis of your consent, you have the right to withdraw that consent.

Exercising this right does not affect the lawfulness of processing carried out on the basis of consent given prior to its withdrawal, nor does it prevent the subsequent processing of the same data on another legal basis, particularly the performance of a contract or compliance with a legal obligation to which Quinta do Ti Carlitos is subject.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

9. Security and Confidentiality

We are committed to keeping your personal data secure and use appropriate security measures to ensure its protection and prevent access by unauthorised persons.

However, the transmission of data over the Internet is not completely secure, and therefore we cannot absolutely guarantee the security of information transmitted through our website.

We also respect the confidentiality of your information. For this reason, we do not sell, distribute or make your information commercially available to third parties by any means.

Quinta do Ti Carlitos undertakes to maintain the confidentiality of your information in accordance with this Privacy Policy and applicable legislation.

10. Do you have any questions?

If you have any questions regarding the processing of your personal data or wish to exercise any of your rights, you may contact us through the following channels:

Email: aquintadoticarlitos@gmail.com

Address: Rua Principal Nº1, 2460-613 Aljubarrota, Portugal

Please note that Quinta do Ti Carlitos may occasionally update this Privacy Policy.

For this reason, we recommend that you review this document periodically to ensure that you have access to the most up-to-date version.