Casa do Soutinho Casa do Soutinho

Privacy Policy

1. The protection and privacy of personal data is a commitment of Casa do Soutinho

Casa do Soutinho has a fundamental commitment to protect personal data of their clients and users, on the digital platforms on which they are present.

The following document seeks to explain what personal data is, which data is collected and what their purpose is, how they are processed, how long they are kept for and how the user can exert his/her rights.

 

2. General Regulation about Data Protection

The new General Data Protection Regulation (GDPR) establishes analogous rules regarding to the treatment of people’s data from European Union (EU). Regardless of the technology used to handle data, the GDPR protects personal data regardless of the technology used for processing that data.

It’s irrelevant the way how personal data is stored in an IT system, through video surveillance, or on paper; in all cases, personal data is subject to the protection requirements set out in the GDRP.

 

3. What is personal data?

Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, such as a name, identification number, location data, an online identifier (such as an IP Address or a cookie identifier), or one or more elements, which collected together can lead to the identification of a particular person, also constitute personal data.

 

4. Who is responsible for the treatment of personal data?

Casa do Soutinho with the address at Lugar de Carvalhais,Alvarenga, 4540-028 Arouca, legal person to 5031641143 and it’s responsable for the treatment os personal data, within the ambit of GDPR.

 

5. Personal data treatment, scope and modification of Privacy Policy

By making available the collection of personal data to Casa do Soutinho, the person consents that the data is treated according to the current Privacy Policy and with the rules and principles presented in the Terms and Conditions of Casa do Soutinho’s digital platforms.

The current Privacy Policy applies to the data that has been granted directly from the respective holder or collected by accessing the digital platforms from Casa do Soutinho.

The entity shall process its users’ personal data upon the consent of the same. Casa do Soutinho undertakes to treat personal data in a way to ensure the confidentiality, security and protection of data against their unauthorized or unlawful treatment and also against its loss, destruction or damage.

 

6. Which type of personal data is collected and what’s its purpose?

For Casa do Soutinho to be able to provide services and send communications, personal data needs to be collected.

In order to simplify the purposes of collecting personal data, we chose to list them below:

Purpose:

Client Management and Provision of Services:

  • Contacts, information or requests management;
  • Billing, charges and payments management;
  • Identification of customers before competent legal entities in the event of supervision.

Contabilistic, Fiscal and Administrative Management:

  • Billing and Accounting;
  • Commissions Management;
  • Fiscal information.

Marketing and Sales:

  • Marketing or selling products or services;
  • Sending Newsletters.

In case there is a need to obtain additional personal data, for the previous mentioned reasons or other finalities, Casa do Soutinho will always be attentive to communicate that situation to the person or entity in cause. For that to happen, we will always request your consent beforehand and give you all the necessary information for the holder to comprehend the motive and the conditions for that occurrence.

 

7. What is the time limit for processing and retaining personal data?

Casa do Soutinho treats and retains the data of its users during the period of time necessary to fulfill the purposes that motivated them to collect it. These are treated according to the rules, orientation and decision of CNPD or according what may be relevant, until the person who’s involved withdraws their consent, exercises his right of opposition, or forgetfulness.

However, there are situations when the law establishes the data retaining for a required minimum period of time. For example, the traffic data and localization are stored for a period of 10 years for the detention and prosecution of serious crimes from Autoridade Tributária.

After the minimum time period established elapses, the entity will remove or will anonymize the personal data.

 

8. Holder Rights about Personal Data

Within the scope of the GDPR terms and other applicable legislation, the personal data holder has the right to information, access, rectification or removal of the personal data, as well as the right to their data portability, to limit or oppose the treatment of the same data.

The holder can withdraw, at any time, the consent that he/she previously gave for his/her personal data treatment, under the GDPR framework. The withdrawal of consent won’t affect the licitude of the personal data acquired until the moment of the repeal, based on the consent you previously provided.

 

9. What are the procedures of security that guarantee the protection of personal data?

Casa do Soutinho takes all the necessary precautions and legally required to guarantee the personal data privacy that is treated and/or transmitted through their digital platforms.

These precautions guarantee the online and offline safety of that information.

Whenever that information is collected or sensitive information is used, the data will be encrypted through the SSL protocol. This technology is called Secure Socket Layer and it’s used to improve the security of data transmission through Internet, encrypting and protecting the data and sensitive information while using the HTTPS protocol. The SSL ensures to the original data holder that the data shall not be intercepted in a fraudulent way and all the information is treated with the maximum security.

 

10. How we use “COOKIES”

A “cookie” is a small piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing. These “cookies” are only used by the entity and it’s use is limited to these following finalities:

  • Allows you to have a good performance of all the functionalities present on the website;
  • Allows Casa do Soutinho to know who the user is in order to provide a better, more secure and personalized service;
  • Using Google Analytics- It’s a web analysis service provided by Google Inc. (“Google”). The information is generated by the “cookie” about the digital platforms you recently used (including your IP address) and that is transmitted and stored by Google Servers, in United States. Google will use this information with the purpose of evaluating the utilization of the platforms, whilst compiling reports about the activity from the sites, apps and among other digital platforms to the operators and providing other services related to activity from the website and utilization of the internet. Google can, equally, transfer this information to third parties, if required by the law, or in case these ones processed the information in the name of Google. Google will not associate the user IP address to any other data collected by Google;
  • At any given moment, the user can manage their internet browser settings in order to accept or reject new cookies, and also deactivate previously cookies stored in your device. The rejection of allowing cookies to be collected on the digital platforms of Casa do Soutinho can limit or make it impossible to access some areas and contents or limit the reception of personalized information.

 

11. Privacy Policy Updates

The current Privacy Policy can be reviewed and updated, which will be divulgated through the Internet site of Casa do Soutinho.

General Regulation about Data Protection (GRDP): Regulation (EU) 2016/679 of European Parliament and Council of 27 of April of 2016, relative to the protection of singular people with regard to the personal data treatment and to free circulation of these data and revoke to the Directive 95/46/CE (General Regulation about Data Protection).

 

12. How can you exert your rights?

For any alteration or information regarding how Casa do Soutinho treats, manages or processes personal data of the user, the person must contact the entity through the following e-mail: info@casadosoutinho.pt.

For any complaint, you are able to do it through the Portuguese Data Protection Authority.

For more information, access www.cnpd.pt.