Privacy Policy

General information
By accepting this Privacy Policy, the user gives his express and informed consent for the personal data provided through the website www.casadagranja.com to be included in a file under the responsibility of Casa da Granja.

This privacy policy aims to explain Casa da Granja's personal data treatment policy. If you have any questions about our Privacy Policy, please contact us at geral@casadagranja.com

Responsible for Data Treatment
Casa da Granja is a brand operated by Costa da Granja – Activities Turisticas e Desportivas, Lda, dedicated to tourist accommodation and is the entity responsible for the processing of personal data, from collection, organization and conservation to disposal.

Collected Data
Casa da Granja is concerned with the privacy of its customers. Bear in mind that, at no time, the customer is obliged to provide Casa da Granja with their personal data that we may ask for. However, if you exercise your right to object, we cannot guarantee the correct use of our online services and products. Thus, the lack of personal data may prevent the order processing or other personalized service that the website provides.

Personal data can also be processed through automated means. Automated data processing takes place without the intervention of any human being involved in the decision process involving your personal data. We will not proceed with any resolution, based solely on automated decisions, that has a significant impact on you. If we do, we will notify you and provide you with clear information as to whether our decision was based on automated processing and the legal basis for this.

3.5. Certain categories of personal data, such as those revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, genetic data, biometric data to unequivocally identify a person, data relating to health or relating to sexual life or sexual orientation, are classified as “special categories of personal data” and benefit from additional protection under the General Data Protection Regulation (“RGPD”). Casa da Granja limits as much as possible the circumstances in which it collects and processes these special categories of data, doing so only when you have given your consent.

Purpose of Data Processing
All data required on our website are used to:

• Reservation and pre-booking purposes (email address, delivery address, credit card number and telephone number)
• Customer support (name, email and mobile number)
• Ensure the proper functioning of our website, how to remember the chosen accommodation and some features you have chosen (cookies)
• Enter into our contract with you (for the provision of services purchased on our website);
• Respect legal requirements (such as creating invoices)

Your personal data may be communicated to Casa da Granja service providers, in order to ensure the provision of services (such as transport companies, for example) or to judicial, tax and regulatory authorities, in order to comply with impositions cool. Your data will be shared with some external entities in order to:

• Provide electronic payment services
• Process the sale/reservation;
• Solve problems associated with booking
• Payment receipt
• Comply with applicable legislation
• Respond to judicial and government inquiries
• Protect rights at Casa da Granja

Security and Retention Term
Casa da Granja does not sell any user data to third parties. “Personal data” means all data that, directly or indirectly, allow the identification of an individual, such as name, surname, telephone number, date of birth, email address, postal address or IP address.

Casa da Granja guarantees the confidentiality of all data provided by its customers. Even so, despite obtaining the data securely, the collection in an open network allows the circulation of personal data without security conditions, with the possibility of being seen and used by third parties. We are committed to informing all customers if any such situation arises. The security of the data saved during the registration process and entered during the purchase process is guaranteed by encryption through SSL certificates.

5.3. Your data will only be kept for as long as necessary, within the scope of the purposes described in this Privacy Policy, unless the personal data in question are necessary to prove compliance with legal obligations, until the limitation period of rights respective, or if there is a longer period imposed by law. When your details are not required, they will be removed from our records.

Rights
We process your data based on the consent you give us. However, you have the right to withdraw consent at any time. Under current data protection legislation, you have the right to access, rectify, erase, limit, oppose and portability.

To do this, just send us an email to geral@casadagranja.com.

You have the right to file a complaint with your national data protection authority. (Comissão Nacional de Proteção de Dados – CNPD | Rua de São Bento, n.o 148, 3o, 1200-821 Lisboa | Tel: 351 213928400 | Fax: +351 213976832 | e-mail:geral@cnpd.p|www.cnpd.pt).