Introduction

The privacy of the user, who must be of legal age, is duly ensured through the application of the rules of this document, with the company being responsible for the processing of personal data of visitors to its website.

This Privacy Policy aims to provide all users with information about the nature of the data collected and the purposes of its processing.

By visiting the website, the user agrees to these rules.

Mode of Use of Personal Data

Usage data may include IP address, geographical location, browser type and version, operating system, referral source, visit duration, page views, and navigation paths on the website, as well as information about the time, frequency, and pattern of service use.

The statistical analysis system is the source of the data.

These usage data may be processed for the purpose of analyzing the use of the website, mobile applications, and services.

Service data may be processed for the purpose of operating and ensuring security on the website and mobile applications, as well as in the provision of services.

It is lawful to process information that the user themselves publishes on the website and mobile applications or through our services (“publication data”).

Publication data may be processed for the purpose of enabling it.

It is also lawful to process information that the user has shared with the company through an inquiry directed to us regarding goods and/or services (“inquiry data”).

Inquiry data may be processed for the purpose of offering, marketing, and selling goods and/or services relevant to the user.

The processing of notification data, correspondence data (which may include the content of communication and metadata), and order data depends on the user’s consent.

Personal data may, when necessary, be intended for obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice, or for fulfilling a legal obligation, particularly in the context of any legal action.

Disclosure of Personal Data to Third Parties

Personal data may be disclosed to any entity with which the company is in a simple participation, control, or group relationship, to the extent reasonably necessary for the purposes and on the legal bases established.

The same possibility applies to the company’s suppliers and subcontractors, with the aforementioned conditions and for the purpose of allowing them to contact the user so they can offer, market, and sell relevant products or services.

International Transfers of Your Personal Data

In the case of international data transfers to countries outside the European Economic Area, the company will apply and comply with the General Data Protection Regulation, promoting, in particular, an adequate level of protection and safeguarding the legal rights of data subjects.

Retention and Destruction of Personal Data

Personal data will be retained for as long as necessary to fulfill their purposes.

Notwithstanding, it will be possible to retain personal data in the context of fulfilling a legal obligation.

Security of Personal Data

Data sent from the browser to the server or vice versa will be protected by encryption technology, with the user acknowledging that the transmission of unencrypted or poorly encrypted data is insecure.

Your Rights

The user, as the data subject, enjoys the following rights:

• Right of access;
• Right to rectification (of any inaccurate personal data and to complete any incomplete personal data);
• Right to erasure if:
  • The personal data are no longer necessary for the purposes for which they were collected;
  • You have withdrawn consent for data processing based on it;
  • You object to the processing under the applicable data protection legislation rules;
  • The processing is for direct marketing purposes and the personal data have been unlawfully processed.
• Right to restriction of processing;
• Right to object;
• Right to data portability;
• Right to lodge a complaint with a Supervisory Authority;
• Right to withdraw consent, which can be declared at any time;
• Right to detailed information about the purposes of processing, categories of personal data, and their recipients.

The right to erasure mentioned above may be excluded in cases of exercising the right to freedom of expression and information, compliance with a legal obligation, or for the establishment, exercise, or defense of legal claims.

The right to restriction of processing may be exercised in the following cases:

• If the data subject contests its accuracy;
• If the personal data are no longer necessary for the purposes of processing, but the data subject needs them for the establishment, exercise, or defense of legal claims;
• If the data subject objects to the processing, pending verification of the objection.

In the event of restriction of processing, the storage of personal data will be maintained, but it can only be used in the following cases:

• With the consent of the data subject;
• For the establishment, exercise, or defense of legal actions;
• For the protection of the rights of another natural or legal person;
• For important reasons of public interest.

Objection to the processing of personal data will occur in the following cases:

• Performance of a task carried out in the public interest;
• For the satisfaction of the legitimate interests of the company or third parties.

If an objection is made, the company will no longer be able to process personal data, except in the case of valid reasons, namely for the satisfaction of public interest, rights and freedoms, or for the establishment, exercise, or defense of legal claims.

If the user considers that the processing of their personal data violates the laws that protect them, they have the legal right to file a complaint with the competent authorities.

The exercise of any of the rights recognized to the user must be formalized through written notification to the contacts indicated below.

Third-Party Websites

The website and mobile applications, including their details, include links to third-party websites.

The company is not responsible for the privacy policies and practices of third parties, so the user should consult the respective Privacy Policy.

Updating Information

The user is obliged to communicate to the company any errors in their personal data or their update.

Contacts

This website or mobile application is owned and operated by the company Proper Hotels Portugal, Lda., NIPC 516 942 450, headquartered at Rua do Chantre 80, 4465-780 Leça do Balio, parish of Leça do Balio, municipality of Porto, Portugal, and with the following contacts:

• Email: contact@vilabelawines.pt;
• Postal address: the address of its headquarters.