PRIVACY AND DATA PROCESSING POLICY

Regulation (EU) 2016/679 of the European Parliament and of the Council is the General Data Protection Regulation (GDPR), in force since the 25th of May, 2018 in the European Union. The GDPR sets out the rules on the processing by an individual, company or organization of personal data relating to individuals in the EU.

DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A. is committed to protecting and respecting the privacy of users of the website https://www.dunaparquegroup.com/ by processing their data in a fair and transparent manner, guaranteeing confidentiality and security regarding the information requested and ensuring that it will only be used for the expressly indicated and authorized purposes.

This privacy policy applies to all personal data collected through the website https://www.dunaparquegroup.com/

Data Controller

DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A., NIPC 501595015, with headquarters at Eira da Pedra, 7645-291, Vila Nova de Milfontes, Portugal, with the email address geral@dunaparque.com, is the entity responsible for processing your personal data.

Purposes of the Processing

The personal data we process through this page will only be used for the following purposes:

– Communication with customers and clarification of queries;

– Processing requests from information;

– Direct marketing communications (if you have consented to the processing of your personal data for this purpose);

– Request for services/products.

Retention Period

We only keep your data for as long as is necessary for the purpose for which it was collected.

Consent

By registering on the website or by consenting to this privacy and data processing policy, you are freely giving your explicit consent for the personal data submitted to be processed for the purposes and under the terms described in this Policy and in accordance with the laws and regulations in force relating to personal data. If consent is legally necessary for the processing of the personal data, the data subject has the right to withdraw his/her consent at any time, although this right does not compromise the lawfulness of the processing carried out based on the consent previously given nor the subsequent processing of the same data, based on another legal basis, such as a legal obligation to which DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A. is subject. To withdraw your consent, you can contact us by letter or by email at geral@dunaparque.com

User Rights

The user may exercise their rights of access, consultation, rectification, deletion, limitation, opposition and portability at any time, by making a request through any of the following means:

Letter: Eira da Pedra, 7645-291, Vila Nova de Milfontes, Portugal

Email: geral@dunaparque.com

The holder may also submit complaints about data processing to the National Data Protection Commission.

The data subject has the right to object to the continued processing of his/her personal data, to be informed, upon request, about the purposes of the processing, the categories of data involved, the identity of the recipients to whom they have been disclosed and the retention period of his/her personal data, as well as to receive the personal data concerning him/her that he/she has provided and send them to another data controller.

Communication of Personal Data

The personal data may be made available to the courts and other competent authorities, in strict compliance with the provisions of the law, in particular when they are necessary for the resolution of disputes and for activities relating to the protection of public safety, the defense and security of the State and the prevention, investigation or detection of criminal offences.

Data Transmission

The processing of user data may be carried out by a suitable service provider, contracted by DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A. When this happens, DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A. takes appropriate measures to ensure that the entities that have access to the data offer the highest guarantees with regard to data protection. Therefore, any subcontractor will process users’ personal data, on behalf of and on behalf of DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A., strictly complying with legal standards on personal data protection, information security and other applicable standards.

International Data Transfers

DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A. may, within the scope of the purposes described, transfer your user data outside the territory of the European Economic Area (EEA). In these cases, it will strictly comply with the applicable legal provisions, in particular with regard to determining the suitability of the destination country(ies) with regard to the protection of personal data and the requirements applicable to such transfers.

Mandatory nature of the requested data

The data contained in the costumer registration are mandatory to fulfill the established purpose. As such, if the user does not provide them, DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A. will not be able to fulfill the request.

Automated Decisions

DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A. may create user profiles, which allow the adoption of automated decisions, based on personal characteristics, preferences, behavior history and location. In these cases, the user will have the right to obtain human intervention in the decision, to express his/her point of view and to challenge the decision adopted.

Personal Data Protection Measures

DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A. applies various appropriate technical and organizational measures to protect users’ personal data.

Minors

Minors under the age of 16 must obtain authorization from their parents or guardians before accessing or providing personal data on the website.

The responsibility for identifying the content and pages that minors under the age of 16 access lies with their parents or legal guardians.

Changes to the Privacy and Data Processing Policy

DUNA PARQUE – GESTÃO DE EMPREENDIMENTOS TURÍSTICOS S.A. reserves the right to, at any time, make adjustments or changes to this Privacy and Personal Data Processing Policy.

We ask that you periodically review this document to stay up to date.