1. INTRODUCTION
Company: Rota Ouro do Douro – Agência de Viagens, Restauração e Turismo Fluvial e Terrestre, Lda.
Headquarters: Avenida Diogo Leite, 438 – 4400-111 Vila Nova de Gaia
VAT: 504413732
Telephone: +351 22 375 9042
Email: dpo@rotadodouro.pt
At Rota do Douro, we respect all our Customers’ privacy and value their trust in us. Theprocessing of personal data is carried out in strict compliance with the legislation on the protection of personal data, in the terms defined in Regulation (EU) 2016/679 of the European Parliament and Council of April 27 2016, which entered into force on May 25 2018 (General Data Protection Regulation or GDPR) and/or any legislation that regulates, complements, or replaces the aforementioned legislation.
In legal terms, “personal data” is considered to be any information of any nature and regardless of its format, including sound and image, regarding an identified or identifiablenatural person, or ‘data subject’ – any personal data that customers choose to make available to Rota do Douro will be understood as obtained, processed, and transmitted under strict compliance with the GDPR and national legislation.
2. COLLECTION AND PROCESSING OF PERSONAL DATA
The request and subsequent confirmation of reservations with Rota do Douro implies the provision, by the customer, of certain personal data, such as: name, address, Tax Identification Number, date of birth, gender, nationality, telephone number, e-mail, ID number, date of issue, validity – data which are essential for the fulfilment of the requested services.
The data can be collected through the brand’s website, by e-mail, telephone, or face-to-face interaction either at the agency or at events / trade fairs at which the brand is present.
Information on philosophical or political beliefs, political party or trade union membership, religious belief, private life, and racial or ethnic origin, as well as data on health and sex life, including genetic data, shall not be requested.
2.1. COLLECTION AND PROCESSING OF PERSONAL DATA OF MINORS
Rota do Douro’s web pages, newsletters, e-mails, and products are not targeted at minors. In the event that, at any time, it is necessary to process data regarding minors, these data will be collected solely and exclusively for the purpose of carrying out the contracted services and only upon permission given by the minor’s legal guardians.
3. PURPOSES OF THE PROCESSING OF PERSONAL DATA
Personal data are collected and processed for the following purposes:
(i) Provision of services – The activity of travel agents, namely confirmation and management of reservations, involves the collection of customers’ personal data.
(ii) Advertising and/or informative activities– If duly authorised and consented by the customer.
(iii) Customer Information– Customers will need to be contacted in case of an emergency, such as the suspension of services due to navigability conditions.
(iv) Statistical analyses;
(v) Study on how Customers use the services;
(vi) Evaluation of the quality of services – Collecting customer feedback on the
booking experience or reserved services helps us to improve our offer.
(vii) Management, provision, expansion, and improvement of services contracted by the Customer, as well as the adaptation of these services to the user’s
preferences and tastes.
(viii) Transfer to third parties – Rota do Douro uses third party services to complement services provided to its Customers. Consequently, it may be necessary to inform our suppliers (hotels, transport companies, for example) of some of your personal data so that the service requested to our company may be provided.
4. COOKIES POLICY
Cookies are small files with information sent by the websites visited by the User that are stored on the computer being used – these small files are used by most websites in order to increase their efficiency in relation to User preferences.
These files also provide certain data to website owners. At Rota do Douro, we use cookies to improve the service we provide for our Customers, as well as to obtain certain data regarding visitors to our website, such as how many visitors we have on our pages, the websites of origin, which products are of the most interest, and the number of visits.
If you do not wish to consent to the use of cookies by our website, you can change your cookie settings by accessing your browser settings.
5. DATA STORAGE
The Customer’s personal data are kept for the period that is strictly necessary for the purposes for which they were collected, except when there are legal requirements (such as tax or commercial law) that require the storage of these data for a longer period of time.
Whenever there is no specific legal requirement, the data collected for business promotion will be stored for a period of three years, after which we will contact you for consent renewal –during this period, the Customer has the right to contact us to withdraw their consent regarding the preservation of their personal data by Rota do Douro.
6. SECURY MEASURES
Rota do Douro has implemented and will continue to implement the necessary technical and organisational security measures to guarantee the security of the personal data provided. Consequently, we avoid the unauthorised alteration, loss, processing and/or access of the data provided, taking into consideration the current state of technology, the nature of the data stored, and the risks to which they are exposed.
7. TRANSFER TO THIRD PARTIES
By providing their personal data, the customers declare that they authorise and consent to the possible (if applicable) transfer of their data to the suppliers of the services requested by the user in order to confirm the reservation – such as partners related to services contracted from hotels and other tour operators.
8. CUSTOMER RIGHTS
In accordance with the requirements of the laws in force (Portuguese Data Protection Law and GDPR), the user can exercise, at all times, his rights to access, rectification, erasure, restriction, objection, and data portability, by written request (in paper or digital format, sent to the addressees referred to in the introduction of this document) – always including a certified copy of a document proving the identity of the data subject and specifying the right or rights that they wish to exercise.
In regards to the newsletter, the customer can cancel the subscription or change personal data by using the links provided in the newsletter at any time.
The customer has the right to file a complaint with the local Data Protection Authority (DPA). For more information, please see www.cnpd.pt
9. PRIVACY POLICY CHANGES
Rota do Douro reserves the right to change this Privacy Policy whenever necessary – changes to this policy may be required, as our products and offers are periodically changed. The User will have access to the updated version of this document through our website, as well as information regarding the last update date.
UPDATED ON: May 24, 2018