Privacy Policy
Identification of the responsible for the treatment of of personal data
Company: NOOR PROPERTIES, UNIPESSOAL LDA (d’Alma Boutique Hotel)
Head Office: Rua do Almada, n.º 97 e 101, 4050-036 Porto
Telefone: +351926965450
E-mail: info@dalmaboutiquehotel.pt
Our commitment
The Personal Data Protection Act (Law No. 58/2019 of 8 August, hereinafter "LPDP") and the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, hereinafter "GDPR") ensure the protection of natural persons with regard to the processing of personal data.
The privacy and protection of personal data of our customers and employees is one of the essential pillars of the Policy of d’Alma Boutique Hotel, so we comply and enforce the data protection legislation in force.
In accordance with the RGPD, "personal data" is considered to be any information relating to an identified or identifiable natural person, whereby an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier or to one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of that natural person.
Customers, job seekers and/or other users of our website, available at www.dalmaboutiquehotel.pt, should read this Privacy Policy (hereinafter also referred to as the "Policy") before submitting their personal data.
Customers with children under the age of 18 should ensure that children do not submit personal data without their permission.
Within the scope of this Policy, d’Alma Boutique Hotel undertakes to:
- Explaining the purpose and manner of processing any personal data requested;
- Processing personal data only for the purposes mentioned in this Policy;
- Request only the personal data necessary for the execution of the purposes of processing;
- Keep personal data for the time necessary to process it, in accordance with the applicable legislation;
- To provide customers, suppliers, job seekers and/or other users of our website with the necessary means to access, change, correct or request the erasure of their personal data;
- Keep personal data received confidential and protected by applying appropriate technical and organisational security measures.
1. Collection and processing of personal data
We inform you that the users of the website may browse and use our website without providing any personal information, without prejudice to the navigation data necessary for the correct management of the website, although the use of certain features of the website may require the provision of personal data - see section 7. Cookies.
The personal data that d’Alma Boutique Hotel processes is only those strictly necessary to provide the services, obeying the principle of data minimization provided for in RGPD.
As a customer of d’Alma Boutique Hotel, you may be asked for the following personal data and/or the personal data of members of your family:
- Identification data(name, nationality, ID card number, tax identification number and date of birth);
- Contact data(address, telephone number, e-mail);
- Methods of payment details: credit card details;
- Information on arrival and departure dates from our hotel/restaurante;
- Identification details of minor children: name, ID card number, date of birth and age;
- Data concerning interests and preferences: preferred room location, preference for room type and bed requested, desired newspaper, etc;
Possible comments from the customer during or after the stay.
As a job applicant or intern at d’Alma Boutique Hotel, you may be asked for the following personal details:
- Identification data( name, date of birth);
- Contact data(address, telephone number, e-mai);
- Data related to interests and motivations of the application;
- Academic data and professional experience (education, qualifications, certifications, languages, CV).
We do not request or process special categories of personal data ("sensitive data") such as religious or philosophical beliefs, political opinions, data concerning health, racial or ethnic origin, data concerning sex life or sexual orientation or trade union membership.
Personal data may be requested in different circumstances, including (without limitation) the following:
- Participation in advertising programmes/direct marketing (subscribe to newsletters to receive offers/promotions);
- Hotel activity (e.g. room or table reservations, check-in and check-out; complaints or requests);
- Provision of information about tour operators, travel agencies or online booking systems;
The user is not obliged to accept the policy, he/she only has to be aware of it, in this way d'Alma is obliged to pass on all relative information.
2. Purposes and grounds for lawfulness and grounds for lawfulness
Personal data is processed for the following purposes, on the grounds of lawfulness:
- Customer reservation and stay management
The processing of these personal data is based on the execution of a contract whose terms are governed by the Terms and Conditions and, where these are not applicable, by the general principles of law.
- Personalisation and Improvement of the services provided in our hotel, restaurant and other services
We process your personal data to understand your needs and to exceed your expectations. This processing is based on the legitimate interest of d’Alma Boutique Hotel in adapting the services it provides within the scope of its activity and business.
- Sending newsletters, promotions and advertising materials
This treatment is based on your consent. Customers and other users may cancel their subscription to the e-mail communications service at any time, either through their personal account settings, or by clicking on the link in each communication that we send by e-mail;
- Applications
The processing of this data is necessary for the purposes of recruitment, selection and hiring of employees at d’Alma Boutique Hotel, based on pre-contractual procedures at the request of the user/candidate.
If the basis of lawfulness for the processing of personal data is consent or legitimate interest, the user may respectively withdraw consent or oppose processing at any time, without this being of any consequence, but without this compromising the lawfulness of the processing previously carried out.
3. Conservation of personal data
We comply with the principle of limited conservation, conserving the users' personal data only for the time necessary for the purposes for which they were processed, after which they will be eliminated or anonymised.
The period for which the data is kept varies depending on the purpose for which the information is processed.
There are legal requirements and obligations which require us to retain data for a minimum period of time and, in these circumstances, we are obliged to respect these for as long as legally provided.
If the processing is based on the consent of customers and other users, we will retain the data until you withdraw that consent or the purpose of our processing no longer takes place.
4. Sharing of personal data
d’Alma Boutique Hotel may share, disclose and/or transfer the personal data of customers, candidates and other users with:
- The employees of d’Alma Boutique Hotel who necessarily need this data, namely to provide the services requested and/or to manage the customer databases;
- Entities that provide services ("Subcontractors") to d’Alma Boutique Hotel, to the extent necessary and for the purposes and purposes mentioned above, under the terms of the contracts entered into with them;
- The Group companies, for internal administrative purposes, if there is a legitimate interest in intra-group data sharing .
- The authorities or third parties, if the transmission is carried out in compliance with a legal and/or contractual obligation, a resolution of the CNPD or other relevant supervisory body, or a court order.
In case of transmission of personal data to service providers located outside the European Union, data protection obligations under applicable law will be strictly complied with, safeguarding that such third parties use the personal data in the appropriate way and promoting the transfer under an adequacy decision of the European Commission or the Standard Contractual Clauses under Commission Implementing Decision (EU) 2021/914 of 4 June 2021 (or analogous), approved by the European Commission.
5. Rights of data subjects
Customers, applicants and other users, as data subjects, may at any time request the right to access, update, rectification, erasure, limitation of processing, portability, objection and not to be subject to automated decisions.
In addition, you may accept, refuse or configure your preferences through our cookie notice through the website.
To exercise any of these rights, you must contact d’Alma Boutique Hotel, through written request by any of the following means, always including a document proving the identity of the data subject and specifying the right or rights you wish to exercise:
Mail: Rua do Almada, nºs 97 e 101, 4050-036, Porto
E-mail: info@boutiquehoteldalma.com
Such requests will be processed as soon as possible.
6. Personal data security
d’Alma Boutique Hotel has implemented the necessary technical and organizational measures, in compliance with legal requirements, in order to protect the personal data of customers, users and employees, preventing misuse, unauthorized access to data, disclosure, loss, improper or inadvertent alteration or destruction.
d’Alma Boutique Hotel commits to:
- Store the data by means of legally required security measures, of a technical and organisational nature, that guarantee their security, thus avoiding alteration, loss, treatment or unauthorised access, in accordance with the state of technology at each moment, the nature of the data and the possible risks to which they are exposed;
- Use the data exclusively for the purposes previously defined;
- Ensure that the data is only processed by those employees whose intervention is necessary for the provision of the service, who are bound by the duty of secrecy and confidentiality. If there is the possibility of the information being revealed to third parties, these shall be obliged to keep it confidential in accordance with the provisions of this document.
The personal data of the customers is incorporated in a computer application (Ynnov Booking) owned by (insert name of the company that owns the application). The access to the information on file by the d’Alma Boutique Hotel staff is only possible with the insertion of access passwords, and the record is documented. The alteration of existing data in the files is, however, possible, with a record of the date and code of the user responsible for the alteration. Personal data is treated with the legally required level of protection to guarantee its security and avoid its alteration, loss, treatment or unauthorised access, taking into account the state of technology, with the user being aware and accepting that Internet security measures are not impregnable.
d’Alma Boutique Hotel is equipped with technical infrastructures for peripheral control, namely network firewalls and private circuits that meet security requirements. The computer servers are hosted in a datacenter operator, which provides a digital information protection service for the hosted servers. The service includes file backup (security copy), stored in accordance with the policy defined at the request of d’Alma Boutique Hotel.
It is, however, the responsibility of users to guarantee and ensure that devices and equipment used to access our website are adequately protected, for example, against harmful software, computer viruses and worms.
In addition, when data is collected over open networks such as the internet, the data may circulate unsecured and there is a risk that it could be viewed and used by unauthorised third parties.
The user is forbidden from giving third parties the password and any other data allowing access to his or her account on the website.
7. Cookies policy
d’Alma Boutique Hotel uses cookies on its website to improve its functioning and optimize user experience.
The purpose of this information is to clarify any questions that users may have regarding the use of cookies on the d’Alma Boutique Hotel website.
7.1 What are cookies?
Cookies are small text files that are introduced into the user's device (computer, mobile phone or tablet) when the user visits the d’Alma Boutique Hotel website with a browser. Cookies allow the identification of that device of the user, as well as the pages and elements accessed.
7.2 What are cookies for and why does d’Alma Boutique Hotel use them on its website?
d’Alma Boutique Hotel uses cookies to understand the importance, usefulness, interest, volume and frequency of visits to its online content and find the best way to present information that is truly relevant to users. Cookies help d’Alma Boutique Hotel understand how a customer came to the website (internet search, recommendation from another site, advertisement, etc.) and how the customer navigates through its pages. Cookies also allow us to know your browsing preferences, such as the language you use. However, the cookies used on the website do not collect personal information that allows the user to be personally identified, only keeping generic information, namely the form or place/country of access of the user and the way they use the website.
7.3 Are all cookies the same?
No. There are different types of cookies that are used depending on the type of information that you wish to analyse and collect and the time that they remain installed on the user's device.
7.4 What type of cookies does the d’Alma Boutique Hotel website use?
The cookies used by the d’Alma Boutique Hotel website have different functionalities. On the one hand, the website uses cookies that analyse how users navigate on the website and how they reach us. These cookies allow us to study the website's analytical data and improve navigation and content. In addition, it uses cookies that record some user preferences such as your preferred language or access credentials to reserved areas.
Strictly Necessary Cookies
Strictly necessary cookies are those that are essential for the correct use of the website. We do not store any confidential information on them.
Marketing cookies
This website uses Google Analytics to collect information such as the number of visitors or the most popular pages.
We use Google Tag Manager to add advanced functionality.
8. Control authority
In legal terms, without prejudice to any other administrative or judicial remedy, the data subject may lodge a complaint regarding the protection of personal data with the competent supervisory authority, the National Commission for Data Protection (CNPD), if he/she believes that the processing of his/her personal data by d’Alma Boutique Hotel violates the legal regime in force.
9. Revisions
This Privacy Policy may, at any time, be revised and updated, so we recommend its regular consultation. These changes will be duly advertised through the website, at www.dalmaboutiquehotel.pt.
The last update of this Privacy Policy dates from May 15, 2023.