Personal Data Protection Policy

Aqualuz Troia – Exploration Hoteleira e Imobiliária, SA (hereinafter referred to as Aqualuz Troia), headquartered in Troia, parish of Carvalhal, municipality of Grândola, with share capital of €2,500,000.00, registered in the competent Commercial Registry Office under the legal person identification number 504 807 269. Before completing your check in and giving your consent, we would like to give you some important information regarding our use of your personal data.

Your personal data indicated below will be processed, under the contract for the provision of accommodation services that you enter into with us, for the following purposes:

1. For the purpose of managing reservations: i) Customer identification and contact details: name, title, e-mail addresses, mobile/phone number, address, city, country; ii) billing details: credit card iii) booking details: arrival and departure date, number of nights, number of rooms, number of adults and children per room, room type, price per night, amount of the stay, notes and special requests and other preferences for your stay; iv) health information when disclosed and relevant to the provision of services (such as allergies, food intolerances and the like).

2. For the purposes of customer management: i) Customer identification and contact details: name, title, e-mail addresses, mobile/phone number, company, agency or group, identification card number, date, place and country of issue, nationality, birthday, preferred room number, address, city, country; ii) data on stays: date of arrival and departure, number of nights, number of rooms, number of adults and children per room, type of room, value of the stay, services/products used/purchased and respective dates and values, special requests and other preferences for your stay; iii) health information when disclosed and relevant to the provision of services (such as food allergies and intolerances); iv) data on stays of foreign citizens for the purpose of complying with the legal obligation of reporting them to the SEF, pursuant to Law no. 23/2007, of 4 July: data from the accommodation bulletin: gender, card no. of identification, date, place and country of issue, place and country of birth, expiry date and copy of the identification document.

3. For payment and collection management purposes: name, number of nights, arrival and departure date, payment method, type of card, card number, expiry date, name of holder, security code, TIN, room type and booking status.

4. For billing management purposes: billing status; arrival and departure date, company, group, rate code, number of people, type of room, details of services purchased (date, description and value).

5. For the purpose of managing complaints: data contained in the complaint form: name, address, nationality, telephone, identification document, e-mail, reason for the complaint, copy of the complaint itself and signature.

6. For the purposes of managing suggestions and compliments: name, compliments, complaints, suggestions and respective dates, data contained in the satisfaction surveys, which relate to data that we have a legitimate interest in processing, namely because it is data that makes it possible to monitor the satisfaction of our customers regarding the services provided.

Additionally, and if you give us your consent, we will process your personal data for marketing purposes and analysis of consumption profiles: i) for marketing purposes: name, email, telephone number, number of adults and children and ii) for the purpose of analyzing consumption profiles: reservation number, hotel unit name, reservation status, reservation date, guest number, arrival and departure date, number of adults and children, market segment ( leisure, corporate, etc), room type, room recipe, food/beverage recipe, other recipes, total revenue, travel agency, company, group, guest name, language, address, region, birthday, telephone, and email, average stays, special requests, preferences and reason for stay. At any time, you can withdraw authorization for these two treatments.

If you authorize us to process data for marketing purposes, we may send you informational messages, newsletters, customized events and promotions via SMS or email. At any time, you may withdraw your authorization to receive these communications by emailing dataprotection@editoryhotels.pt.

The person responsible for the use of your personal data is Aqualuz Troia. If you need to contact Aqualuz Troia, you can do so through the following means: Telephone: 265 499 000 and E-mail: dataprotection@editoryhotels.pt.

In the case of the processing of personal data for the purposes of communications, marketing and booking management when these are made through the website www.editoryhotels.com, Aqualuz Troia will be jointly responsible for the use of your personal data, as well as the following entities of the same economic group as Aqualuz Troia: Porto Palácio Hotel – Exploration Hoteleira SA (“Porto Palácio”), headquartered at Avenida da Boavista nº 1269/1281, 4100-130 Porto, with the corporate identification number 501 321 551; Troiaresort – Investimentos Turísticos, S.A. (“Troiaresort”), headquartered in Troia, parish of Carvalhal, municipality of Grândola, with the corporate identification number 500 286 159; The Artist Porto Hotel & Bistro - Hotel Activities, S.A. (“The Artist”), headquartered in Lugar do Espido, Via Norte, parish and municipality of Maia, with the identification number of legal person 503 407 208; The House Ribeira Hotel – Exploration Hoteleira, S.A. (“The House”), headquartered in Lugar do Espido, Via Norte, parish of Cidade da Maia, municipality of Maia, with the identification number of legal person 513 645 381; Aqualuz - Turismo e Lazer, Unipessoal, Lda. (“Aqualuz”), headquartered at Rua Sacadura Cabral, Lote K, Rossio da Trindade, 8600-593 Lagos, with corporate body number 502 557 931; 2NDROOM - Exploration Hoteleira, S.A. (“2NDROOM”), headquartered at Lugar do Espido, Via Norte, 4470-177 Maia, with the corporate number 515 086 312; SC HOSPITALITY, S.A. (“SC Hospitality”), headquartered at Lugar do Espido, Via Norte, 4470-177 Maia, with the corporate number 509 011 977; Imobeauty, S.A. (“Imobeauty”), headquartered in Lugar do Espido, Via Norte, parish of Cidade da Maia, municipality of Maia, with the identification number of legal person 502 982 446; and Golf Time - Golfe Investimentos Turísticos, SA (“Golftime”), headquartered in Lugar do Espido, Via Norte, parish of Cidade da Maia, municipality of Maia, with the legal entity identification number 506 360 059. will jointly process your personal data for the purposes of communications, marketing and management of reservations made through their website, sharing, within the scope of The Editorial Collection Hotels brand, resources in order to ensure greater efficiency in these activities, and it is their responsibility to , jointly or separately, within the scope of the processing of personal data, guarantee the provision of information to the holders of personal data and access to their personal data.

Your personal data are only provided to entities whose collaboration is essential for the provision of our services, such as entities that manage and process hotel management and management software. The data of the Client who is a foreign citizen will, in compliance with the legal obligation to communicate the respective accommodation bulletin, communicated to SEF, as indicated in point 1 above.

If you need to contact the Data Protection Officer, you can do so through the following means: Telephone: + 351 22 040 29 88 and E-mail: dpo@editoryhotels.pt.

We only keep your personal data for a period of 2 years after the term of the contracted accommodation (that is, 2 years after the Client's stay), except for the data relating to the accommodation bulletin which is kept for a period of 1 year after the stay; billing and payment data that are kept for a period of 10 years under the terms of the CIVA and the data relating to claims that are kept for a period of 3 years, under the terms of Decree-Law No. 156/2005, of 15 September . For the purposes of marketing and analysis of consumption profiles, we retain your personal data after your stay and as long as you consent to its processing.

As the holder of your personal data, you may at any time: access or rectify them, request their deletion, limit their treatment, their transmission to another entity, oppose their treatment, or in the case of treatments to marketing purposes and analysis of consumption profiles, the right to withdraw your consent at any time, by sending an email to dataprotection@editoryhotels.pt. If necessary, you can also file a complaint with the National Data Protection Commission (CNPD).

We assure the data subject the adoption of adequate technical and organizational measures to guarantee the security of the treatments carried out, as well as by the entities that we subcontract, and the protection of the information.

Our establishments are equipped with video surveillance systems with image recording, with the purpose of protecting people and property, in order to pursue the legitimate interest of security within their premises. Aqualuz Troia is the entity responsible for processing the data, and the data is intended to be exclusively used and communicated in accordance with the criminal procedure law, although the private security entity subcontracted for this purpose may be in charge of its processing. The collected data are kept for a period of 30 days. You will be able to exercise the right of access regarding data concerning you, which may not involve access to third-party images, which will be hidden or anonymized, and may also file a complaint with the CNPD. Aqualuz Troia may, at any time, limit or remove the video surveillance system of its establishments, and periods may occur when they are not in operation, namely for maintenance needs, technical reasons or power cuts.