The protection of your personal data is a priority for Carmen Luz. Below, we describe who we are, for what purposes we can use your personal data, how we treat it, with whom we share it,

how long we keep it, and also the ways to get in touch with us and to exercise your rights.

Who are we?

Your data will be treated by Carmen Luz & Simões Lda., registration number 513341099,

(hereinafter referred to as Carmen Luz).

Carmen Luz is the data controller within the meaning General Data Protection Regulation

(hereinafter referred to as GDPR).

Why do we treat your information?

Your personal data may be collected and processed by Carmen Luz & Simões for the following purposes:

a) For the fulfilment of legal obligations to which Carmen Luz is subject, in particular

communications to foreign and border services and billing purposes.

b) For the purpose of performance of Temporary accommodation contract for tourists or the

Local Accommodation Management Contract celebrated with Carmen Luz , particularly payment transactions, management of check-in’s and check-out’s, management of guests, charge a deposit, providing complementary services to the stay as cleaning, transfers and breakfast or grocery services, contractual obligation management or for pre-contractual diligence purposes.

c) For the purpose of mobile and email communications, with information and commercial

communications, digital platforms, within the scope of Carmen Luz marketing strategies,

commercial and contractual information and communications, as well as for requests for

information.

d) For the purpose of protecting property or held assets by Carmen Luz, as well as for statistical analysis purposes.

The non-supply of personal data for the purposes provided for in points (a) and (b) leads

Carmen Luz in non-compliance with statutory obligations and consequently the possibility of

resolution of the Temporary Accommodation Contract for Tourists or the Local

Accommodation Management Contract celebrated, without the right to any compensation, as

well as deficit services provided by Carmen Luz that cannot be attributable to it.

What kind of personal data do we collect?

Within the scope of its activity,Carmen Luz & Simões will collect and process the personal data necessary to provide the contracted services, requests for information or pre-contractual management, namely identification, contact, bank or payment card data.

What do we treat your information for?

The processing of your personal data will be carried out on the basis of the implementation

of the temporary accommodation contract to tourists, of the Local Accommodation

Management Contract and the fulfilment of legal obligations imposed on Carmen Luz, in

particular by legislation on matters of entry, permanence and departure of foreigners in the

national territory and fiscal legislation (article 6 no. 1 (b) and (c) of the GDPR).

In addition, the personal data collected for the purposes provided for in point (c) of the

preceding paragraph are based on the consent by itself rendered to Carmen Luz for their

treatment (article 6 no. 1 (a) of the GDPR).

For the purposes provided for in point (d) of the preceding paragraph, Carmen Luz shall proceed to the processing of personal data, based on the legitimate interest it has pursued (article 6

no. 1 (f) of the GDPR).

How long have do we keep your information?

Without prejudice to legal provisions, regulatory or judicial determination in contrary, the

personal data collected shall be kept only for the minimum period necessary for the

purposes which have motivated their collection or subsequent treatment.

Who can we transmit your personal data?

Carmen Luz & Simões may need to share some of your personal data with other recipients. These

recipients include:

a) Organizations and/or companies affiliated to Carmen Luz whenever they respect an equivalent policy on the protection of personal data.

b) Public entities to which Carmen Luz is legally obliged to provide information, in particular the Foreign and Border Services and the DGCI – Directorate-General for Taxes.

c) Subcontractors providing certain services related to your personal data under the cover of

a sub-contract and with the sole purpose to provide technical assistance to Carmen Luz . These

include, particularly, site hosting providers, mail marketing service providers, cleaning

service companies, lawyers firms, accounting firms and insurance companies.

d) Competent authorities to which Carmen Luz is legally obliged to disclose information during

judicial proceedings or to detect technical and/or security problems, such as judicial entities

or competent control authorities.

Are my data transferred to countries outside the European Union?

Your personal data, collected by Carmen Luz, will not be transferred to any entity established

outside the territory of the European Union.

Exceptionally and subject to certain conditions, Carmen Luz  may transfer your personal data to countries outside the territory of the European Union, in accordance with the applicable

legislation, namely for the purposes of data hosting or storage, technical processing

subcontracting, back-up and recovery of hosted data, development of services.

Carmen Luz  assures you that it will not transfer your personal data to countries that do not

guarantee an adequate level of protection, in accordance with the provisions of the GDPR.

What are my rights?

At any time, in accordance with GDPR, you may request access to your personal data, as

well as to its rectification or deletion, limitation of the treatment performed, the right of

opposition and the right to data portability.

If the applications submitted are manifestly unfounded or excessive, in particular due to their

repetitive nature, Carmen Luz   may require payment of a reasonable fee taking into account the administrative costs of providing the information or communication, or taking the measures requested or refusing to comply with the request.

In the case of personal data whose treatment by Carmen Luz   is legitimate in the consent granted by you, the right to withdraw the consent is granted, without the exercise of such right being able to compromise the lawfulness of the treatment carried out with on the basis of the consent previously given, nor the subsequent processing of the same data, based on another legal basis, such as the fulfilment of the contract or the legal obligation to which

Carmen Luz   is subject.

It also has the right to file a complaint with the National Data Protection Commission.

Security and confidentiality

We are committed to keeping your data secure and we use appropriate security measures to

ensure your personal data are protected and to prevent access to them by unauthorised

persons. However, the transmission of data over the Internet is not completely secure and

we cannot provide an absolute guarantee of the security of the information transmitted

through our site.

We also respect the confidentiality of your information. Therefore, we do not sell, distribute

or make your information commercially available in any other way, to any third party. Carmen Luz  undertakes to keep your information confidential in accordance with this Privacy Policy and with the applicable legislation.

Do you have any questions?

If any doubts remain in relation to the processing of your personal data, or if you wish to

exercise any of your rights, please contact us:

E-mail: geral@carmenluz.pt

Adress:Rua da Praça nº 8 RC DTO, 7645-218 Vila Nova de Milfontes

Please keep in mind that Carmen Luz  occasionally updates this Privacy Policy. Therefore, please review this document from time to time to ensure you have the latest information.