Privacy Policy

https://www.hotelsantajustalisboa.com/

Who is responsible for the collection and processing of the data?

Hotel Santa Justa Lisboa **** / RNET – 4164

is the entity responsible for the collection and processing of personal data and may, in the course of its activity, use subcontracted entities for the purposes indicated herein.

I. PRIVACY AND DATA PROTECTION POLICY

In accordance with the provisions of current legislation, Hotel Santa Justa (hereinafter also referred to as the Website) undertakes to adopt the necessary technical and organisational measures, in line with the appropriate level of security for the risk associated with the data collected.

Legislation included in this privacy policy

This privacy policy is adapted to the current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

  • Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

  • Royal Decree 1720/2007 of 21 December, approving the Regulation implementing Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).

  • Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the controller responsible for the processing of personal data

The controller responsible for the processing of personal data collected at Hotel Santa Justa is: HOPREVIP, S.L., with Tax ID/VAT number: B82978172. The contact details are as follows:

Address: R. dos Correeiros 204, 1100-170 Lisbon, Portugal
Contact telephone: 914544400
Contact email: info@hotelsantajustalisboa.com

Record of personal data

In accordance with the GDPR and LOPD-GDD, we inform you that the personal data collected by Hotel Santa Justa through the forms on its pages will be incorporated into and processed in a file under our responsibility with the purpose of facilitating, streamlining and fulfilling the commitments established between Hotel Santa Justa and the User or to maintain the relationship established in the forms completed by the User, or to respond to a request or enquiry. Likewise, except where otherwise provided in Article 30.5 of the GDPR, a record of processing activities will be maintained, specifying, according to its purpose, the activities carried out and the other circumstances established in the GDPR.

Principles applicable to the processing of personal data

The processing of the User’s personal data shall comply with the following principles established in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018 of 5 December:

  • Principle of lawfulness, fairness and transparency: the User’s consent will be required at all times, with clear information about the purposes of the collection.

  • Principle of purpose limitation: personal data will be collected for specific, explicit and legitimate purposes.

  • Principle of data minimisation: only data strictly necessary in relation to the purposes will be collected.

  • Principle of accuracy: data must be accurate and up to date.

  • Principle of storage limitation: data will be kept only for as long as necessary.

  • Principle of integrity and confidentiality: data will be processed securely and confidentially.

  • Principle of accountability: the controller shall ensure compliance with the previous principles.

Categories of personal data

The categories of data processed at Hotel Santa Justa are exclusively identification data. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is consent. Hotel Santa Justa undertakes to obtain the User’s explicit and verifiable consent for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw their consent at any time, and withdrawing it is as simple as giving it. As a general rule, withdrawal of consent does not affect the use of the Website.

Purposes of the processing of personal data

Personal data are collected and managed by Hotel Santa Justa with the purpose of facilitating, streamlining and fulfilling the commitments established between the Website and the User, maintaining the relationship established in the completed forms, or responding to requests or enquiries.

Additionally, the data may be used for commercial purposes, operational personalisation and statistics, and activities related to the corporate purpose of Hotel Santa Justa, as well as for extraction, storage and marketing studies aimed at tailoring the content offered to the User and improving the quality, functioning and browsing of the Website.

Retention periods for personal data

Personal data will be kept only for the minimum time necessary for the purposes of their processing and, in any case, for the following period: 12 months, or until the User requests their deletion.

Recipients of personal data

The User’s personal data will not be shared with third parties.

Personal data of minors

In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018 of 5 December, only those over 14 years of age may give their legal consent for the processing of their personal data by Hotel Santa Justa. In the case of minors under 14 years, parental or guardian consent will be required, and processing will only be lawful to the extent that such consent has been given.

Confidentiality and security of personal data

Hotel Santa Justa undertakes to adopt the necessary technical and organisational measures, in accordance with the appropriate level of security for the risk, to ensure the security of personal data and to prevent their destruction, loss, alteration, disclosure or unauthorised, accidental or unlawful access.

The Website has an SSL (Secure Socket Layer) certificate that ensures data is transmitted securely and confidentially.

Acceptance and changes to this privacy policy

Use of the Website implies acceptance of this Privacy Policy.

Hotel Santa Justa reserves the right to modify its Privacy Policy according to its own criteria, or due to legislative, jurisprudential or doctrinal changes from the Spanish Data Protection Agency. Users are advised to check this page periodically.

This Privacy Policy was last updated to comply with Regulation (EU) 2016/679 and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights.