Privacy and Personal Data Policy
General Data Protection Regulation (GDPR)
On 25 May 2018, the new General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data was adopted by all EU members, Portugal included.
Our goal is to inform you how your personal data will be handled, your inalienable rights and how you can manage your data consent, in a direct and simple manner.
Only for the purpose of offering you increasingly better service, G|R Suites is responsible for treating your personal data and protecting your privacy, according to law, in any form of data collection or treatment.
Entity responsible for Data Treatment: G|R Suites
Endereço do Encarregado de Proteção de Dados: geral.galaxyrrofs@gmail.com or grsuites@gmail.com
Privacy and Personal Data Policy: applied when a User books accomodation on this Hospitality Business.
Data Controller (us, G|R Suites): This Hospitalty Business will provide you, the User, the requested service. Our identification and contacts are available on our site, where you book your accomodation, as well on the receipt we will send you.
Data Protection Officer: Not applicable to Data Controllers.
User: You, that you filled a booking form or any other related document.
End Goal: Your data will be processed for the management of your bookings, as well as to help you with any contact you may establish with us.
Legal Basis:
– The need to perform our contract with the user / the need to take action on the user’s behalf before performing a contract.
– The user consentment (yours) when checking the Terms and Conditions checkbox, on which this privacy and personal data policy is a part of.
Timeframe: Your data, the user’s, will be kept by us during the time needed to process your booking and its associated services. When these services are considered provided, after the end of your stay, your data will be kept for six (6) months. If you wish to be informed for commercial and marketing purposes, your data will be kept until you end your consent.
Data Processor: Our partner Impactzero ( www.impactzero.com ) is trusted by us with our booking infrastructure. Impactzero acts on our behalf with our permission and a contract was signed between us and Impactzero to provide their services to us. We provided Impactzero with formal information on how to process bookings.
Users not providing their own data: The moment you, the user, provide personal data that is not yours, you will be held accountable for these actions. This is also applicable to the associated data consent, obtained from its legitimate owner.
Data Transfer: No data is transfered to any country outside the EEA (European Economic Area).
Data holders’ rights: Data holders have the right to access, correct, cancel and oppose the handling of personal data. To enforce these rights, an e-mail or postal services can be sent to us by using our contact information in our site or receipts.
Data Protection Authority: If a data holder feels their rights were not fulfilled, the data protection authority from the member state can enforce them.
More info in: https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en