Privacy and Data Policy

---

Privacy policy

For the purposes of personal data protection legislation, the rural tourism establishment Chão do Rio – Green Farm Stays, located in Travancinha, owned by Yellowtree Unipessoal, Lda., NIF 510214819, informs that the personal data of the Customers and potential Customers that are collected are treated for the following purposes:

• Reservations and/or any service provided by our establishment;
• Check-in;
• Compliance with legal obligations, including, with the Tax Authority, communication
to the Foreign and Borders Services (SEF), Consulting and Audit;
• Authorisation of access to buildings;
• Provision and invoice services;
• Contract management and evaluation with the client;
• Adapting services to customer needs and interests;
• Use of the website;
• Information and marketing actions;
• Response to questions, suggestions and complaints made by customers;
• Quality control of the services provided.

For the purposes mentioned above, Yellowtree Unipessoal Lda., through Chão do Rio - Turismo de Aldeia, may collect and process the personal data of Customers and/or potential Customers, as well as copies documents, duly authorised for its reproduction, which contain the following information:

• Identification info;
• Telephone / e-mail contact,
• Financial information (credit card details)
• Preferences with regard to the services to be provided during the stay;
• Technical information regarding electronic devices
• Correspondence (the exchange of any correspondence is private).

Under the terms of the applicable legislation, the Client and Potential Customer are guaranteed the right of access to the data collected that directly concern him or her, and may request its correction or addition by contacting Chão do Rio through the email chaodorio@chaodorio.pt.

The Customer and/or potential Customer may also, at any time, oppose the processing of the data, except for those strictly necessary to provide the service, and/or require the deletion of its data for marketing or listing purposes of subscribers and information services, and for this purpose, contact Chão do Rio by e-mail chaodorio@chaodorio.pt.

In accordance with current data protection law, your personal data will be incorporated into a file owned by our Company, with the purpose of maintaining the commercial and contractual relationship. We further inform you that security measures and technologies have been adopted by our company to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction, in accordance with applicable privacy and data protection laws. Each section Chão do Rio keeps personal information in a safe place and we have taken steps to ensure that only designated persons have access to that information.

Most of the personal data is of mandatory for the provision of the service. Chão do Rio – Green Farm Stays will inform of this obligation and, in the event of lack or incorrect supply of required data, Chão do Rio will not be able to provide the contracted service.

The provision of incorrect or inaccurate data is your sole responsibility.
The person responsible for the processing of personal data is the manager of the establishment Chão do Rio: Catarina Isabel da Cruz Vieira.

Personal data, databases, service platforms and other operations may, under legally defined terms and conditions, be hosted, shared and communicated to the subcontracting companies for all or part of the purposes identified above, as well as for the maintenance, accommodation and management of their computer
systems and equipment, in the terms allowed by the legislation that regulates the processing of personal data, these entities being obliged to keep confidentiality and ensure security regarding the data of the customers of Chão do Rio. have access to, and should not use, such data for any other purpose, or for their own benefit, nor to relate them to other data that they possess.

Personal data may also be made available to the courts and other competent authorities, in strict compliance with the provisions of the law, in particular, when necessary for the resolution of disputes relating to billing and for activities related to the protection of public security, defence and the prevention, investigation or detection of criminal offences.

Your personal data are only preserved for the period of time necessary for the provision of the service or product, or for the fulfilment of legal obligations of Chão do Rio – Green Farm Stays.

Finally, the data may also be kept until the period during which any invoice may be legally challenged or payment claimed, or for periods legally defined for purposes of investigation and criminal prosecution.

Privacy and Personal Data Policy - applicable to Users of this Hospitality Business when making a reservation

Data Controller (we): The Hospitality Business which will provide to you, the user, the requested service. Our identification and contact details are available on the website you used to make your reservation / to pose your questions to us. They will also appear on our invoice which we'll send to you.

Data Compliance Officer: Not applicable to Data Controllers' activities.

User: You, who filled-in the reservation form or any other documentation related to it.

Purpose: The purpose of processing the data provided through this form is to manage the reservations made by you, user and/or to answer to the questions / requests you posed.

Legal basis:
- Either the need to perform our contract with you, user / the need to take steps at your request prior to entering into a contract.
- Or the consent of you, the user, by ticking in the box of acceptance of the Terms and Conditions of which this Privacy and Personal Data Policy is an integral part.

Duration: We will store the data provided by you, the user, during the time necessary for the management of the reservation you made, as well as of the accommodation services you requested. Once the management is finished, your data will be kept for six (6) months. If you consent to receive marketing and/or commercial information, your data will be stored until you revoke your consent.

Processor: We engage our partner Guestcentric Group (www.guestcentric.com ) for carrying out the reservations engine of our business. Guestcentric acts under our authority and we have signed a contract with Guestcentric Group for the provision of their services. We have instructed Guestcentric Group in written as per how the processing should be done.

Data subjects different from the users: Where you, user, provide us with personal data pertaining to a different data subject from yourself, you are responsible for such acts as well as for obtaining the respective consent of such data subjects for the provisioning of their data.

Transfer of Data: We shall not transfer personal data to a third country outside the EEA (European Economic Area).

Data Subject Rights: Data Subjects can exercise their rights of access, rectification, cancellation and opposition by sending an email or through the postal service to the contact details on our reservation website and on our invoices.

Supervisory Authority: If a data subject considers their rights affected, they can also appeal to the competent supervisory authority of the Member State concerned. More info at: https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en