Global Personal Data Protection and Privacy Policy
Last updated: 30/12/2022
Date: 30/12/2022
Costa do Vizir Beach Village & SPA respects your right to privacy. This Data Protection Policy explains who we are, how we collect, share and use your personal information and how you can exercise your privacy rights. This Data Protection Policy applies when you visit our website at https://costadovizir.com the conclusion of any contracts, the provision of information, content or any telephone contacts, as well as in all situations in which Personal Data is processed by Costa do Vizir Beach Village & SPA. The rules and procedures referred to in this Data Protection Policy may be further detailed in other internal Costa do Vizir Beach Village & SPA policies.
Costa do Vizir Beach Village & SPA is a service provider in the area of camping, caravanning and complementary accommodation for vacations and weekends, offering various services. Its range of services also includes tourist apartments and bungalows. For more information about Costa do Vizir Beach Village & SPA, please consult our website, particularly the terms of the general conditions of admission.
The purpose of this policy is to inform you of the general rules governing the processing of Personal Data, which is collected and processed in strict compliance with the provisions of the personal data protection legislation in force, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, “Data Protection Regime”, hereinafter “GDPR”.
Costa do Vizir Beach Village & SPA respects the best practices in the field of security and protection of personal data, and to this end has taken the necessary technical and organizational measures in order to comply with the GDPR and ensure that the processing of personal data is lawful, fair, transparent and limited to the authorized purposes.
Costa do Vizir Beach Village & SPA is committed to the protection and confidentiality of Personal Data, and has adopted the measures it deems appropriate to ensure the accuracy, integrity and confidentiality of Personal Data, as well as all the other rights of the respective owners.
The rules laid down in this Data Protection Policy complement the provisions on the protection and processing of Personal Data laid down in the contracts that Customers, Employees, Job Applicants, Suppliers, Partners and Service Providers enter into with Costa do Vizir Beach Village & SPA, as well as the rules laid down in the terms and conditions governing the offer of the various products and services advertised on the respective website.
Personal data is any information of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person.
An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to a name, an identification number, location data, an electronic identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
The processing of Personal Data consists of an operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, namely collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The entity responsible for processing Personal Data is Costa do Vizir Beach Village & SPA, Lda, with registered office at Parque de Campismo Costa do Vizir, Monte Branco, 7520-437 Porto Covo, legal person no. 508450160, with the general telephone number +351 269959100 cost of a call to the national fixed network; e-mail address info@costadovizir.com
To this end, if the holder of the Personal Data needs to contact the data controller, he/she may do so through the means of contact indicated below:
– At the reception of Costa do Vizir Beach Village & SPA;
– By writing to the person responsible for processing, to Costa do Vizir Beach Village & SPA, Monte Branco, 7520-437 Porto Covo, or by email to info@costadovizir.com.
This Data Protection Policy applies to the collection and processing of Personal Data for which Costa do Vizir Beach Village & SPA is responsible, within the scope of the services and products made available to its Customers and in all situations in which Personal Data is processed by Costa do Vizir Beach Village & SPA, in any sector of Costa do Vizir Beach Village & SPA, whether campsites, restaurants, bars or other points of sale. SPA, be they campsites, restaurants, bars or other points of sale, and the data subject is, without restriction, the Customer and/or former Customers, potential Customers, Investors, Partners, Employees and former Employees, Employees of partners, Suppliers and Service Providers and their Employees, Job Applicants, Visitors and any person captured on video surveillance images – CCTV, as well as all natural persons who have a relationship with Costa do Vizir Beach Village & SPA and to whom personal data is disclosed. SPA and to whom the personal data relates.
Book on our website at https://costadovizir.com
– Costa do Vizir Beach Village & SPA uses the UNIXDATA / THELISRESA booking engine belonging to a third-party service provider.
– All data entered will be processed by UNIXDATA under the terms established by the GDPR legislation and always with the declared consent of the clients.
– The customer must give their consent at the time of booking and may at any time have the right to access the files, rectify them, cancel them or object to them under the terms established in the GDPR legislation.
When you access UNIXDATA’s booking engine, some contact information may be collected, such as your name, surname, date of birth, personal identification document number, postal address, email address, telephone number and cell phone number, only when you and/or your companions make a reservation using the form available on our website, which allows you to make reservations and provide the information or clarification requested.
Only when Costa do Vizir Beach Village & SPA receives the Personal Data of Customers/Users, which is communicated by the Thelisresa / UNIXDATA interface to Costa do Vizir Beach Village & SPA’s reservation system, will Costa do Vizir Beach Village & SPA also be responsible for Processing this data.
We collect and use Personal Data to the extent necessary to carry out our activities and, to this end, we process personal data from a number of categories of Data Subjects.
The Personal Data that Costa do Vizir Beach Village & SPA collects always depends on the nature of the interaction, but may include, as appropriate, the following:
– Identification and contact details: (e.g. name, marital status, date and place of birth, affiliation, postal address, telephone number, cell phone number, e-mail address, identification document, tax identification number, nationality, cell phone number and/or other similar contact information.
– Biographical data: date of birth, gender, nationality, place of birth, marital status, general education and professional history, information about the household, as well as data of general interest about work.
– Commercial data for the provision of services and/or products: data related to the provision of services or supply of products, billing data, payment data and/or information in the context of responding to any questions, requests or complaints.
– Payment and return data: credit/debit card numbers, security code numbers, payment dates, amounts owed or payments received and/or other relevant information regarding related invoicing, as well as in the case of deposit returns, the request for the bank IBAN.
– How you purchase or subscribe to products and/or services, your transaction, billing history and assistance in the context of the Costa do Vizir Beach Village & SPA services you use or any other related information.
– Data relating to the owner’s stay that is transmitted to us by the booking engine belonging to Unix Data / Thelisresa, which allows us to make the reservations and provide you with the information or clarification requested.
– Data relating to necessary and relevant information with a view to registering for modalities, training actions, promoting events or activities, as well as sharing with partners with a view to disseminating information about products or services.
– Preference Data: Information on the preferences and interests of the holder, insofar as this is related to the products and/or services and the way in which they prefer to receive communications, which are only requested on receipt of the Park.
– Data from social networks: Information shared on social networks in interaction with Costa do Vizir Beach Village & SPA, where transparency is guaranteed through the existence of appropriate privacy policies.
– Demographic data: Country, gender, age, preferred language, general education and professional background, as well as data of general interest about the job.
– Video surveillance: Our facilities have CCTV devices with fixed cameras to control entry, detect intrusion and unauthorized access to the Costa do Vizir Beach Village & SPA facilities, so your image can be recorded when you access our facilities.
– IT usage data: user ID, functions, rights, login times, computer name, IP address.
– Other data: e.g. social security number and/or passport or other identification documents in certain specific circumstances.
Depending on the nature of the interaction, the following personal information may be collected:
Customer data: as part of the provision of services/supply of products, we collect identification and contact data, commercial data, payment data, among other data necessary for the creation, execution and termination of the commercial relationship and the fulfillment of the contractual and legal obligations associated with it. The data provided will be used specifically to process orders for services, issue invoices, provide support after services have been provided, in particular to manage any complaints, respond to requests for information and provide associated services. When you access our premises, your images may be captured and recorded by the video surveillance-CCTV system.
Data relating to Suppliers: within the scope of the contractual relationship (contracting supplies and services), we collect identification and contact data, commercial data, payment data, among other data necessary for the creation, execution and termination of the commercial relationship and the fulfillment of the contractual and legal obligations associated with it. The data provided will be used specifically to managerequests for quotes, supplier proposals and sending relevant information to the counterparty in the business relationship, invoice processing, namely scanning and processing, including the financial settlement of invoices. When you access our premises, your images may be captured and recorded by the video surveillance-CCTV system.
Workers’ data: for the conclusion, execution and fulfillment of the employment relationship, we collect identification and contact data, biographical data, data relating to professional activity, elements relating to remuneration, data relating to family situation, among other data necessary for the creation, execution and termination of the employment relationship. The data provided will be used for the purposes of drawing up the employment contract; tax framework and salary processing; vocational training; obligation to take out occupational accident insurance; obligations in the field of occupational health and safety and vocational training; management of working hours, among other purposes, which will be previously communicated to employees when the employment contract is signed, and they will also be provided with the information provided for in Article 13 of the GDPR. When employees access our premises, their images may be captured and recorded by the video surveillance-CCTV system that exists there.
Data relating to Candidates: in the context of the recruitment and selection of candidates, we collect the data strictly necessary for the respective recruitment process, and the personal data collected and processed by Costa do Vizir Beach Village & SPA consists of all the information provided by the candidate in their curriculum vitaeThe data collected includes full name, date of birth, gender, marital status, identification number or passport, nationality, address, location, telephone contact details, email address, educational qualifications, driving license details, without prejudice to other data that may be requested from the candidate at a later date, should this prove necessary. The data collected is used and processed solely for the purpose of recruiting and selecting candidates, and they are also provided with the information provided for in Article 13 of the GDPR. If the candidate accesses our premises, their images may be captured and recorded by the video surveillance-CCTV system that exists there.
Costa do Vizir Beach Village & SPA does not voluntarily or directly request or collect Personal Data from minors under 18 years of age.
If Costa do Vizir Beach Village & SPA discovers that it has inadvertently collected Personal Data from a minor under the age of 18, it will immediately delete the records containing that minor’s personal data.
However, Costa do Vizir Beach Village & SPA may collect Personal Data relating to minors under the age of 18 when provided by their parents or a legal guardian who expressly consents to such collection or when it is collected through CCTV systems.
Costa do Vizir Beach Village & SPA collects Personal Data directly (directly from the Data Subject) or indirectly (through a third party), guaranteeing, whenever necessary, the prior consent of the Data Subject.
– Direct collection is carried out: in person, in writing, by telephone and by e-mail.
– Indirect collection is carried out: through a booking engine belonging to a third party (Thelisresa / Unixdata) or other tour operators, which after collection are communicated to the Costa do Vizir Beach Village & SPA UNICAMP PMS booking system.
Some Personal Data is indispensable for us to be able to provide you with products and services or to comply with our legal obligations and if it is missing or insufficient Costa do Vizir Beach Village & SPA will not be able to provide the product or service in question.
If the holder of the Personal Data is not a Client of Costa do Vizir Beach Village & SPA, their Personal Data will only be processed when made available, namely by subscribing to newsletters, in which case the rules of this Data Protection Policy will apply.
The Personal Data collected may be processed by manual or automated means, guaranteeing in all cases strict compliance with personal data protection legislation, being stored in specific databases created for this purpose and under no circumstances will the data collected be used for purposes other than that for which it was collected or given consent by the data subject.
However, you are solely responsible for providing incorrect or inaccurate data.
The development and realization of the various activities pursued by Costa do Vizir Beach Village & SPA means the existence of a relevant set of specific, explicit and legitimate purposes for the processing of your Personal Data, thus and in general, your personal data collected has the following purposes and respective legal grounds:
– For the purpose of providing services and/or supplying products, we process your personal data on the legal basis of contractual performance and the legitimate interest in providing you with our services.
– In order to comply with the various legal obligations to which we are bound, we process your personal data on the legal basis of complying with legal obligations. (examples: investigation, detection and prosecution of serious crimes, response to judicial, regulatory and supervisory bodies).
– For invoicing and administrative management, we process your personal data on the legal basis of contractual performance and compliance with legal obligations. (examples: accounting, invoicing, commission management, tax information, including sending information to the Tax Authority).
– For the purpose of responding to your requests, requests for clarification or complaints we process your personal data on the legal basis of our legitimate interest in providing you with a quality service and, where applicable, to carry out the necessary pre-contractual steps at the request of the holder of the personal data.
–For the purpose of sending commercial communications, information on products and services, promotional offers, news (newsletters and other information), we process your personal data on the legal basis of your consent. Failure to provide your consent will prevent us from sending you commercial communications related to our activity. This consent may be withdrawn at any time, without, however, rendering the processing of personal data carried out on the basis of that consent unlawful until the date on which it is withdrawn.
– For the purpose of event management (sending invitations, registering participants, publicizing events) Costa do Vizir Beach Village & SPA processes your personal data on the legal basis of our legitimate interest in organizing events related to our professional activity and, if applicable, your consent. Failure to provide your consent will prevent you from receiving information and participating in the events. This consent may be withdrawn at any time, without, however, rendering the processing of personal data carried out on the basis of that consent unlawful until the date on which it is withdrawn.
–For the purpose of using a video surveillance system, which includes the collection of images by CCTV devices, we process your personal data on the legal basis of our legitimate interest in seeking to ensure the protection and security of people and goods within our premises.
–For satisfaction surveys to improve our services. We sometimes ask our clients to fill in an evaluation questionnaire, either in person or by email. We process your personal data on the legal basis of your consent. Failure to provide your consent will prevent us from sending you satisfaction surveys to evaluate our services. This consent may be withdrawn at any time, without, however, rendering the processing of personal data carried out on the basis of that consent unlawful until the date on which it is withdrawn.
– For the exercise or defense of a right in judicial or extrajudicial proceedings we process your personal data on the legal basis of our legitimate interest in defending the rights of Costa do Vizir Beach Village & SPA. (examples: judicial and extrajudicial collection and management of other conflicts).
–For the purpose of recruiting and selecting candidates, which includes analyzing applications and CVs, as well as the internal process of selecting employees according to the needs detected, we process your personal data, based on your express consent. Failure to provide your consent will prevent us from analyzing your application. This consent may be withdrawn at any time, without, however, rendering the processing of personal data carried out on the basis of that consent unlawful until the date on which it is withdrawn.
–For the conclusion, execution and fulfillment of the employment relationship, we process the personal data of our Employees on the legal basis of contractual execution and compliance with legal obligations.
The period of time during which Personal Data is stored and retained varies according to the purpose for which the information is processed.
Therefore, and whenever there is no specific legal requirement, the data will be stored and kept by Costa do Vizir Beach Village & SPA, only for the minimum period necessary for the pursuit of the purposes that motivated its collection or subsequent processing, under the terms defined by law.
However, Costa do Vizir Beach Village & SPA may be obliged to keep some Personal Data for a longer period, due to factors such as:
– Legal obligations to keep Personal Data for a certain period;
– Limitation periods under the laws in force;
– (possible) Disputes;
– Guidelines issued by the Competent Data Protection Authorities.
As a rule, we will keep your personal data for the following periods:
– Provision of services and/or supply of products: We will retain your personal data for the maximum period required to comply with applicable legal and regulatory obligations or another period related to our operational requirements, with a view to facilitating the management of the contractual relationship, and responding to requests addressed to us. Most customer information is kept for the duration of the contractual relationship, and for some time after it has ended. For example, for the purposes of complying with tax obligations, personal data relating to invoicing may be kept for a period of 10 years from the time of the act.
– Compliance with the various legal obligations to which we are bound: during the time necessary to comply with the legal obligations that are applicable in each case.
– Invoicing and administrative management: for a period of 10 years from the act.
– Responding to requests, requests for clarification or complaints: until such time as the personal data is no longer necessary for the fulfillment of these purposes.
– Sending commercial communications related to our activity: for a maximum period of 5 (five) years from the date of collection of consent or the last contact with the holder of the personal data, without prejudice to the fact that consent may be withdrawn at any time.
– Management of Costa do Vizir Beach Village & SPA events: for the time strictly necessary for registration, organization and subsequent evaluation of the event.
– Use of the video surveillance system: the image recording is kept for a period of 30 (thirty) days after it is taken, after which it will be destroyed, unless the judicial authorities require it to be kept.
– Exercising or defending rights in judicial or extrajudicial proceedings: Until the date of the administrative decision, the final judgment of the decision in question, until the date of its extrajudicial settlement.
– Recruitment and selection: the personal data of the Candidate for the vacancy for which he/she applied is kept for 1 (one) year in the case of an application for a specific vacancy or for 6 (six) months in the case of a spontaneous application:
˃ from the date of submission of the application or curriculum vitae, if the candidate is not selected; and
˃ during the period in which the professional relationship with Costa do Vizir Beach Village & SPA is maintained in all other cases.
The Candidate must submit a new application after this period if they wish to continue to be included in the Costa do Vizir Beach Village & SPA recruitment files or send their consent in writing (on paper or electronically) so that they can continue to be included in the recruitment file after the period mentioned.
– Employees: for a period of 1 (one) year after termination of employment, without prejudice to (i) that such period extends for the duration of any legal proceedings or proceedings before an administrative body, and (ii) deadlines for keeping documents imposed by law, namely by labor, tax and social security legislation (iii) or guidelines issued by the Competent Data Protection Authorities.
In the event that personal data is used for several purposes, which require us to keep it for different periods, we will apply the longest period.
While your Personal Data is being processed, Costa do Vizir Beach Village & SPA guarantees that it will be processed in accordance with this Privacy Policy. As soon as your data is no longer needed, Costa do Vizir Beach Village & SPA will delete it securely.
As the Owner of the Personal Data processed by Costa do Vizir Beach Village & SPA, you have the right to exercise the following rights at any time:
Right to information
The data subject has the right to obtain clear, transparent and understandable information about how Costa do Vizir Beach Village & SPA uses their personal data and what their rights are.
Right of access to personal data
The data subject has the right to obtain confirmation of what personal data is being processed and information about it, such as the purposes for which it is being processed, the retention periods, etc.
Right to rectification of personal data
The holder may request, at any time, the rectification or updating of their Personal Data that is inaccurate (for example, to correct spelling errors in their name, a new address or telephone number).
Right to erasure of personal data or (Right to be forgotten)
The data subject may request that their personal data be deleted in certain situations: (i) if the personal data is no longer necessary for the purpose for which it was collected or processed, (ii) if the data subject withdraws the consent on which the data processing is based and there is no other legal basis for it, (iii) if the data subject objects to the processing and there are no overriding legitimate interests, (iv) if the personal data has been processed unlawfully, (v) if the personal data have to be erased under a legal obligation, or (vi) if the personal data has been collected in the context of the provision of information society services).
The right to erasure does not apply when processing is necessary, in particular for the following purposes:
(I) exercising freedom of expression and information; (II) compliance with a legal obligation that requires processing and that applies to Costa do Vizir Beach Village & SPA; (III) reasons of public interest in the field of public health; (IV) archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, in so far as the exercise of the right to erasure would seriously prejudice the achievement of the purposes of such processing; or (V) declaration, exercise or defense of a right in legal proceedings.
Right to limit the processing of personal data
the data subject may request the restriction of the processing of their personal data in the following situations: (i) when contesting the accuracy of your personal data; (ii) when the processing is unlawful and you have objected to it and requested the restriction of the use of your personal data; (iii) when Costa do Vizir Beach Village & SPA no longer needs to process your personal data, but needs it for the exercise or defense of rights in an administrative, judicial or extrajudicial process; (iv) when you have objected to the processing of your personal data and there is no overriding legitimate interest.
Right to portability of personal data
The data subject may request that Costa do Vizir Beach Village & SPA deliver the personal data they have provided in a structured, commonly used and machine-readable format. You also have the right to request that Costa do Vizir Beach Village & SPA transmit this data to another data controller, provided that this is technically possible. The right of portability only applies in the following cases: (i) where the processing is based on express consent or the performance of a contract; and (ii) when the processing in question is carried out by automated means.
Right to object to treatment
The data subject may object to the processing of their Personal Data at any time, for reasons related to their particular situation, in the following situations: (I) When the processing is based on the legitimate interest of Costa do Vizir Beach Village & SPA; or (II) When the processing is carried out for purposes other than those for which the data were collected, but which are compatible with them. Costa do Vizir Beach Village & SPA will stop processing your Personal Data in such cases, unless it has legitimate reasons for doing so and these reasons outweigh its interests.
The right not to be subject to automated individual decisions
Costa do Vizir Beach Village & SPA does not adopt automated individual decisions, including profiling, that produce effects in its legal sphere or significantly affect it in a similar way.
Right to withdraw consent
The data subject has the right, in cases where the processing of their data is based on their consent, for example in the case of data processing for marketing purposes, to withdraw consent at any time, without this, however, making the processing of personal data carried out on the basis of that consent unlawful until the date on which it is withdrawn.
If you withdraw your consent, your personal data will no longer be processed, unless there is another basis, such as the contract, legal obligations or the legitimate interest of Costa do Vizir Beach Village & SPA, which justifies such processing by Costa do Vizir Beach Village & SPA.
13.How can you access, rectify, update, limit, erase, object to the processing of your personal data, or withdraw consent?
To exercise any of the above rights or for any further clarification on the processing of your Personal Data by Costa do Vizir Beach Village & SPA, simply send a written request to the Data Controller using the contact details provided for this purpose in this Data Protection Policy.
Costa do Vizir Beach Village & SPA will respond in writing (including by electronic means) to requests within a maximum period of one month from receipt of the request, except in cases of particular complexity, where this period may be extended to two months.
If the requests submitted are manifestly unjustified or excessive, particularly due to their repetitive nature, Costa do Vizir Beach Village & SPA reserves the right to charge administrative costs or refuse to comply with the request.
Costa do Vizir Beach Village & SPA may promote new products or services to its Customers, namely by telephone, e-mail, SMS, MMS or any other electronic communications service, if the holder of the Personal Data has given their consent.
If the holder of the Personal Data does not wish to continue receiving these communications, they may at any time withdraw their consent to the use of their data for marketing purposes or for sending informative communications.
Without prejudice to being able to submit complaints directly to Costa do Vizir Beach Village & SPA through the contacts provided for this purpose, you can complain directly to the supervisory authority, which is the National Data Protection Commission (CNPD), using the contacts provided by this entity for this purpose.
Personal Data will be processed by Costa do Vizir Beach Village & SPA, in the context of the purposes identified in this Policy, in accordance with the policy and internal rules of Costa do Vizir Beach Village & SPA and using appropriate technical and organizational measures to promote their security and integrity, in particular in relation to the unauthorized or unlawful processing of personal data and their accidental loss, destruction or damage.
Without limitation, Costa do Vizir Beach Village & SPA uses logical and physical security requirements and measures to guarantee the protection of Personal Data by preventing unauthorized access, ensures that information is stored on secure computers in a closed information center and that data is encrypted whenever possible, implements auditing and control procedures to ensure compliance with security and privacy policies and periodically reviews security policies and procedures to ensure that systems are safe and secure.
However, given that the transmission of information over the Internet is not completely secure, Costa do Vizir Beach Village & SPA cannot guarantee the security of its data when transmitted over an open network, and therefore warns everyone who browses the Internet to adopt additional security measures, namely ensuring that they use a PC and Browser that are up-to-date in terms of “properly configured security patches, with an active firewall, anti-virus and anti-spyware.
Costa do Vizir Beach Village & SPA does not sell, rent, distribute or otherwise make available Personal Data to any third party, except in cases where it needs to share information with service providers and partners for the purposes set out in this Data Protection and Privacy Policy. Costa do Vizir Beach Village & SPA preserves the confidentiality and integrity of your Personal Data and protects it in accordance with this Policy and other laws in force.
“Subcontractors”
Your Personal Data may be shared with companies responsible for providing services at Costa do Vizir Beach Village & SPA.
The companies in charge of providing the services are bound to Costa do Vizir Beach Village & SPA by a written contract and may only process your Personal Data for the purposes specifically established and are not authorized to process your Personal Data, directly or indirectly, for any other purpose, for their own benefit or that of a third party.
“Third parties”
– In compliance with legal and/or contractual obligations, Personal Data may be transmitted to third parties with whom Costa do Vizir Beach Village & SPA establishes partnerships, who will comply with the applicable data protection rules depending on the purposes of the Processing carried out.
– In compliance with legal and/or contractual obligations, Personal Data may also be transmitted to judicial, administrative, supervisory or regulatory authorities, as well as to entities that lawfully carry out data compilation actions, actions to prevent and combat fraud, market studies or statistics.
By way of example processing may include, in particular, making personal data available to the competent authorities in cases where this is justified and required, such as the Social Security Agency, the Tax and Customs Authority, the Courts, the Police, Supervisory and Regulatory Authorities, banks, insurers and health authorities in the case of preventive and occupational medicine).
“With your consent”
At your request and with your consent, Personal Data may be shared with other entities.
The Personal Data collected and used by Costa do Vizir Beach Village & SPA is not made available to third parties established outside the European Union. If, in the future, such a transfer takes place, Costa do Vizir Beach Village & SPA undertakes to ensure that the transfer complies with the applicable legal provisions, in particular with regard to determining the suitability of such country with regard to data protection and the requirements applicable to such transfers, although personal data will not be transferred to jurisdictions that do not offer guarantees of security and protection. However, personal data may be shared within and outside the European Union when required by law or to respond to legal requirements.
You can consult the existing adequacy decisions at www.eur-lex.europa.eu..
A Personal Data breach occurs when we are dealing with a breach of security that causes the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored or otherwise processed.
In the event of a data breach and insofar as such breach is likely to entail a high risk to the rights and freedoms of the Data Subject, Costa do Vizir Beach Village & SPA undertakes to communicate the Personal Data breach to the Data Subject concerned within 72 hours of becoming aware of the incident, unless the breach does not result in a risk to the rights and freedoms of the Data Subject.
Under legal terms, communication to the Data Subject is not required in the following cases:
– If Costa do Vizir Beach Village & SPA has applied appropriate protection measures, both technical and organizational, and such measures have been applied to the Personal Data affected by the breach, in particular measures that render the Personal Data unintelligible to any person not authorized to access such data, such as encryption;
– If Costa do Vizir Beach Village & SPA has taken subsequent measures to ensure that the high risk to the rights and freedoms of data subjects is no longer likely to materialize;
– If the communication to the Data Subject implies a disproportionate effort for Costa do Vizir Beach Village & SPA. In this case, Costa do Vizir Beach Village & SPA will make a public announcement or take a similar measure through which the Data Subject will be informed.
Costa do Vizir Beach Village & SPA uses cookies to collect information about the use of the website. Whenever you use the website, Costa do Vizir Beach Village & SPA processes Personal Data collected through the use of Cookies in accordance with our Cookie Statement.
For more information on the use of cookies, we recommend that you read and review our Cookie Statement on our website, which explains what these technologies are and why we use them, as well as your rights to control how we use them.
If you have any questions or concerns about how we use your personal information or our information security practices, please contact us using the contact details provided in this Data Protection Policy.
Costa do Vizir Beach Village & SPA reserves the right at any time to make adjustments or changes to this Data Protection and Privacy Policy, as well as any other specific data protection and privacy statement, and these changes will be duly publicized in the various communication channels of Costa do Vizir Beach Village & SPA.
