PRIVACY POLICY

Hotel Castrum Villae

PRIVACY POLICY OF THE WEBSITE www.hotelcastrumvillae.pt

IDENTIFICATION OF THE DATA CONTROLLER

Name: Principal Segmento, Lda
Registered Office: Lugar de Vila, Castro Laboreiro * 4960-061 Melgaço
NIF / Tax ID: 514045841
Telephone: +351 251 460 030 (call to national fixed network)
E-mail: reservas@hotelcastrumvillae.pt

DUTY TO INFORM

The protection of personal data of natural persons is protected in Portugal by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and by Law No. 58/2019 of 8 August, which ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data.

“Personal data” is considered to be any information, of any nature and regardless of its format, including sound and image, relating to an identified or identifiable natural person; therefore, this protection does not cover the data of legal entities.

An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity (for example, their name associated with their telephone number or email address).

By reading this Privacy Policy, the User is informed about the processing of their personal data carried out by Principal Segmento through the website www.hotelcastrumvillae.pt .

PURPOSES OF THE PROCESSING OF PERSONAL DATA

The personal data we collect and process through the above-mentioned Website will only be used for the following purposes:
a) To manage the contracting of services made through the Website, such as contact requests or reservation management;
b) To periodically send communications with news related to the activity of Principal Segmento and the sector to which it dedicates its activity;
c) Anonymous and aggregated analysis of the use of services, to identify habits and trends of Users, in order to improve the services offered and satisfy the specific needs of Users;
d) In the event of hiring, the data collected on this Website, together with other data obtained within the scope of the contractual relationship, will be used for human resources management, to ensure compliance with legal obligations and to provide employees with the necessary means to carry out their professional activity;
e) Compliance with national and international legal provisions, or to execute an order from competent judicial authorities;
f) Compliance with legal obligations derived from applicable data protection legislation, as well as for the exercise of data subjects’ rights, in particular, the defence of a right in judicial proceedings.

The personal data we collect and process through the above-mentioned Website will only be used for the following purposes:
a) To manage the contracting of services made through the Website, such as contact requests or reservation management;
b) To periodically send communications with news related to the activity of Principal Segmento and the sector to which it dedicates its activity;
c) Anonymous and aggregated analysis of the use of services, to identify habits and trends of Users, in order to improve the services offered and satisfy the specific needs of Users;
d) In the event of hiring, the data collected on this Website, together with other data obtained within the scope of the contractual relationship, will be used for human resources management, to ensure compliance with legal obligations and to provide employees with the necessary means to carry out their professional activity;
e) Compliance with national and international legal provisions, or to execute an order from competent judicial authorities;
f) Compliance with legal obligations derived from applicable data protection legislation, as well as for the exercise of data subjects’ rights, in particular, the defence of a right in judicial proceedings.

The personal data we collect and process through the above-mentioned Website will only be used for the following purposes:
a) To manage the contracting of services made through the Website, such as contact requests or reservation management;
b) To periodically send communications with news related to the activity of Principal Segmento and the sector to which it dedicates its activity;
c) Anonymous and aggregated analysis of the use of services, to identify habits and trends of Users, in order to improve the services offered and satisfy the specific needs of Users;
d) In the event of hiring, the data collected on this Website, together with other data obtained within the scope of the contractual relationship, will be used for human resources management, to ensure compliance with legal obligations and to provide employees with the necessary means to carry out their professional activity;
e) Compliance with national and international legal provisions, or to execute an order from competent judicial authorities;
f) Compliance with legal obligations derived from applicable data protection legislation, as well as for the exercise of data subjects’ rights, in particular, the defence of a right in judicial proceedings.

LEGITIMACY FOR THE PROCESSING OF PERSONAL DATA

Principal Segmento processes Users’ data:

  1. when they provide their free, specific, informed and unambiguous consent for the processing of their personal data for specific purposes; and/or
  2. when it is necessary for the performance of a contract to which the data User is a party, or for taking pre-contractual steps at the User’s request; and/or
  3. to comply with legal obligations to which Principal Segmento is subject; and/or
  4. for the purposes of the legitimate interests pursued by Principal Segmento or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data.

The User guarantees that the information provided is true, accurate, complete and up to date, and is responsible for any damage or loss, whether direct or indirect, that may be caused as a result of breaching this obligation.

Where the data provided belongs to a third party, the User guarantees that they have informed the said third party of the aspects contained in this document and have obtained their authorisation to provide their data to Principal Segmento for the purposes indicated.

RETENTION PERIOD

Principal Segmento only retains and processes your personal data for the period that is necessary or required to fulfil the purposes described above, applying appropriate data retention criteria for each processing activity and in accordance with the applicable legal and regulatory obligations.

Principal Segmento keeps personal data in its systems in such a way that data subjects can be identified according to the following criteria:

  • for a period of time no longer than necessary to fulfil the purposes for which they were collected, unless legal or contractual obligations provide otherwise;
  • to comply with specific legal or contractual obligations;
  • where applicable and lawful, until the Data Subject submits a request to object or erase their data.

DATA DISCLOSURE

In addition to disclosures made in compliance with legal obligations, the Data Subject’s personal data may be accessed, in addition to Principal Segmento, by:

  • external service providers of Principal Segmento, in their capacity as data processors;
  • national and international companies belonging to the same group as Principal Segmento;
  • authorities in general, administrations, entities and public bodies, both national and international;
  • Principal Segmento.

INTERNATIONAL DATA TRANSFERS

The personal data collected will be processed within the European Economic Area, and there are no international transfers of data to third countries or international organisations.

In the event of any processing of personal data outside the European Economic Area, such processing will only take place upon the adoption of appropriate safeguards and the required level of protection, in accordance with personal data protection legislation.

INFORMATION SECURITY

Principal Segmento has implemented appropriate technical and organisational security measures to ensure the security of the personal data provided by the User, in order to prevent its alteration, loss, processing and/or unauthorised access, taking into account the current state of technology, the nature of the data stored and the risks to which they are exposed.

Personal data is processed with the level of protection legally required to ensure its security and prevent its alteration, loss, processing or unauthorised access, taking into account the current state of technology. The User acknowledges and accepts that security measures on the Internet are not infallible.

Where Principal Segmento subcontracts other entities to provide services involving the disclosure of personal data, those entities will be required to adopt the necessary technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access or any other type of unlawful processing.

EXERCISE OF RIGHTS

In accordance with the provisions of the GDPR, the User may exercise their rights of access, rectification and, where applicable, restriction of processing, erasure, data portability, objection and withdrawal of consent, under the terms of the GDPR, by submitting a written request through any of the following means, specifying the right or rights they wish to exercise:

SUPERVISORY AUTHORITY

The User also has the right to lodge a complaint with the National Data Protection Commission regarding matters relating to the exercise of their rights and the protection of their personal data, if they consider that their data protection rights have been infringed.

THIRD-PARTY WEBSITES

The Website may contain advertising, links or other content that link to or redirect users to pages and services provided by suppliers, advertisers, affiliates, sponsors of Principal Segmento and other third parties.

However, Principal Segmento does not control the content or links that appear on these pages and is not responsible for the practices used by such pages or websites. Principal Segmento recommends that Users review the privacy policy of such pages, as well as their terms and conditions.

Searching or interacting with any other website, including those that have an external link to the Website, is subject to the terms and conditions of that website. Under no circumstances shall Principal Segmento be responsible for such access and use.

PROCESSING OF DATA CARRIED OUT BY THE COMPANY THAT DEVELOPS AND MANAGES THE WEBSITE AS AN INDEPENDENT DATA CONTROLLER

Without prejudice to the fact that the processing of data collected through the Website is the responsibility of Principal Segmento, as identified above in Section 1 of this Privacy Policy, we inform the User that MIRAIFUTURE PORTUGAL, LDA., with registered office at Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil, and with NIPC 515 139 092, may, in specific situations, act as the Data Controller, independently determining the purposes and means of the processing.

This applies, in particular, to data processed to ensure the operation, maintenance and security of the booking engine.

In such cases, the User’s data will be processed in accordance with the information provided below:

  • Purpose: to ensure the operation, security and continuous improvement of the Website;
  • Lawful basis: legitimate interest;
  • Retention period: for the period strictly necessary to fulfil these purposes.

Mirai ensures that, even in these situations, it only processes the data strictly necessary, adopting appropriate technical and organisational measures to guarantee its security and confidentiality.

The User may exercise the rights referred to in Section 9 by submitting a written request through any of the following means, specifying the right or rights they wish to exercise:

  • Email: portugal@mirai.com;
  • Postal address: Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil

The User may also exercise the rights provided for in Section 10.

CHANGES TO THE PRIVACY POLICY

In order to ensure that this document remains up to date, Principal Segmento reserves the right to review this Privacy Policy at any time it deems appropriate. Therefore, Users are advised to check this Privacy Policy regularly and/or each time they access the Website.

Updated on 29/04/2026.