Official Website: Guaranteed Best Rate
Best Online Rate

Privacy & Cookie Policy

Legal information — natural person

Portugal Alma
Website: portugalalma.com
Phone: +351 226 106 312
Email: reservas@portugalalma.com

Privacy & Cookie Policy

This privacy notice (hereinafter the “Policy”) aims to explain the rules governing the various processing operations that may be carried out while using our website accessible at the URL: portugalalma.com (hereinafter the “Site”).

The processing of personal data carried out through the Site is the responsibility of two co-data-controllers of the data controller.

The data controllers of your personal data are as follows:

Portugal Alma

Data Protection Officer email within the organization: reservas@portugalalma.com

As the controller of your personal data, we do everything reasonably possible to protect your privacy when you visit the Site.

This Policy allows you to better understand the origin and use of your personal data and the browsing information processed when you visit our website.

For the purposes of this Policy, the term “Personal Data” refers to all data that relate exclusively to you and allow you to be identified directly or indirectly, regardless of the Terminal you are using.

The term “Terminal” refers to the physical device (computer, tablet, smartphone, phone, etc.) used to view and browse the Site.

The term “Regulation” refers to the personal data regulation, in particular Regulation No. 2016/679, known as the General Data Protection Regulation (GDPR), the French Data Protection Act No. 78-17 of January 6, 1978 and French Act No. 2018-493 on the protection of personal data.

By using our Site, the user declares to accept the terms of this Policy in their entirety.

If you do not agree with any of these terms, you are free to stop using our Site.

This privacy notice is updated regularly. To ensure you are informed in advance of any significant change, we will notify you by means of notices on the relevant services or, if applicable, by email.

The Site will always show the most up-to-date version of this Privacy Notice.


1. Protection of your personal data

In accordance with the Regulation, we list all processing operations in a processing register which we make available to the competent authorities.

All information you provided to us during your visits to the Site is strictly confidential. Such information is necessary for the purposes for which it is processed.

1.1. What personal data are collected and processed?

The information that may be collected and processed are the following:

  • Identification and contact details: first name, last name, sex, postal address, telephone number, e-mail address, language and country from which you interact with us;

  • Financial and payment data: your bank details (please note that all payment operations are encrypted by the receiving bank or accredited storage center and we do not retain any credit card numbers), information about your bookings, etc.;

  • Connection, geolocation (only with your consent) and browsing data; and

  • Personal preferences: includes cookie preferences.

When we ask you to enter your personal data to access a function, some data are mandatory fields because they are data we need to enable you to access that function (for example, to register your booking we need your first and last name).

It is important that the personal information concerning you is correct and up to date.

We do not process personal data that could be qualified as “sensitive” (information concerning racial or ethnic origin, political, philosophical or religious opinions, trade union membership, health status or sexual life) within the meaning of the Data Protection Regulation.

In this respect, it is specified that our site is not intended for children and therefore we do not process any data relating to them.

We undertake not to transfer your personal data to third parties, unless otherwise indicated in article 1.3.

1.2. For which purposes are your personal data collected and processed?

The Personal Data listed above may be collected and processed for the following purposes:

Booking management
The processing of your data is necessary to keep you informed about the status of your booking, the summary of your booking, accept payment, etc.

Access to customer service
We process your personal data within our customer service to respond to your requests, in particular when using the contact form.

Improving our services
We process your browsing and booking data for analysis and statistics. These data, in fact, allow us to analyze how you use our site and to improve its ergonomics and quality.

Marketing
As part of your subscription to our newsletter, we process your data to manage your subscription and send you targeted information by e-mail or SMS according to your preferences. We may also contact you via push notifications if you subscribe to that service.

Processing for marketing purposes requires your consent. You may unsubscribe from our communications at any time.

Where you gave us your consent to receive our communications, whether via our newsletter or via push notifications, we may use the information you provided for the following purposes:

  • Share information about our current events, products, services, offers;

  • Provide recommendations about certain products or services that may be of interest to you; and

  • Conduct customer research to better understand your expectations regarding products and services offered through the Site.

1.3. Who are the recipients of your personal data?

During the use of our site, the user may receive information from third parties with whom we cooperate in order to provide certain services. This may concern:

  • Financial institutions and accredited storage centers;

  • Fraud detection and prevention entities; and

  • Service providers relating to marketing, communication and advertising.

The personal data collected by the Site are mainly processed by Portugal Alma’s internal services.

However, we may share your information with the third parties listed above for the following (among other) reasons:

  • to make payments to recognized financial institutions and clearing centers;

  • to verify credit and identity with fraud detection and prevention entities; and

  • to optimize your experience on our site and improve our services for providers of services related to marketing, communication and advertising.

We require third parties who receive your personal data to commit to comply with the Regulation on personal data. The above third parties may only use your personal information in accordance with our instructions and not for their own purposes.

Login and browsing data may also be transferred to Google Analytics.

We may also disclose your personal data to respond to an order from judicial authorities.

1.4. How long are your personal data retained?

Your data will be kept for a period of ten (10) years after your last booking in order to respond to any queries or complaints or to retain any data necessary to meet legal, accounting or analytical requirements (Article L.123-22 of the French Commercial Code).

We may also retain your data for research or statistical analysis; they will then be anonymized.

As part of a newsletter subscription, we will no longer contact you if you have not opened our newsletters for more than twelve (12) months.

Any change to this policy will be made on this page and you will be notified by e-mail in the event of material change.

The Data Controller may also retain your data for research or statistical analysis. Since these are then anonymized, the Regulation does not impose any retention period as it is no longer possible to “re-identify you” afterward.

1.5. Hosting your personal data

The Data Controller has implemented appropriate technical measures to maintain the security of your personal data.

1.6. What are your rights?

1.6.1. Consent

Your consent must be given clearly and unambiguously. This is why, when you agree to fill in the Site contact form:

  • you are informed of the use that will be made of your personal data;

  • you must tick a box to validate consent; and

  • children under 13 cannot give their consent.

1.6.2. Other rights

In accordance with the Regulation, you have the following rights regarding your personal data:

  • Right of access: this right allows you to receive a copy of the Personal Data we hold about you;

  • Right to rectification: this right allows you to request correction of inaccurate or incomplete Personal Data concerning you;

  • Right to erasure of your Personal Data: this right allows you to request that we delete your Personal Data if one of the legal grounds is satisfied:

    • The Personal Data are no longer necessary for the purposes for which they were collected;

    • You have withdrawn the consent on which the processing is based;

    • You have objected to the processing and exercised your right of opposition;

    • The processing of your Personal Data is unlawful; or

    • Your personal data must be deleted pursuant to a legal obligation.

  • Right to restrict processing: such a restriction may be made when:

    • The user contests the accuracy of his personal data;

    • The user does not request deletion of his Personal Data in the context of unlawful processing but requests restriction;

    • Your Personal Data are no longer used by our services but their retention is necessary only for the establishment, exercise or defense of legal claims; or

    • The user objects to the use of his Personal Data by exercising the right of opposition;

  • Right to data portability: you can contact us to receive your personal data or have them transmitted directly to another controller in a structured, commonly used machine-readable format;

  • Right to object: you can contact us when:

    • The processing is carried out in the public interest or for purposes related to our legitimate interests; the user may object to the processing only for reasons related to his situation; or

    • The processing is carried out for marketing purposes; the user may object at any time and without giving reasons.

  • Right to determine the fate of your personal data after your death (the e-Will): one of the specific features of French law allows you to send us your instructions on how we should process your personal data after your death. In this way, you can choose whether to have them deleted or transmitted to a relative.

Regardless of the purpose or legal basis on which we process your data, you may at any time and free of charge send us an e-mail to exercise your rights at the following address: reservas@portugalalma.com

Alternatively, send us a letter to the following contact:

Portugal Alma — portugalalma.com

Please note, however, that we may not always be able to comply fully with your request for legal reasons that we will bring to your attention, if necessary, after receiving your request.

In any case, we remind you that you have the right to lodge a complaint with the competent supervisory authority.

1.7. What are the legal bases for processing?

For the processing of your data, we rely on legal bases that depend on how you interact with our site.

When you purchase products from our site, we collect and process your personal data to perform the contract between you and us. For example, we need your postal address to deliver your order or your banking details to process payment.

We also rely on other legal bases, such as our legitimate interests. For example, we consider it in your interest that your identity cannot be used for fraudulent purposes, that our customer service staff have access to information about your order to serve you better, or that we can better understand your use of our site to improve its usability and the services we offer you.

Finally, where personal data are processed for prospecting (marketing) purposes, the legal basis for processing is the user’s consent (see the previous Article 1.6.1).


2. Internet browsing security

2.1. Integrity of your data on the Internet

The Site has adequate security measures to prevent loss, unauthorized use or access, alteration or disclosure of your personal data.

All personal data collected are stored on secure servers. The Data Controller has also implemented procedures for handling any personal data breaches.

2.2. Malicious uses

It is recommended to connect only to secure networks, preferably private networks. Be aware of the risks associated with public Wi-Fi networks.

Regardless of the Controller to whom you have voluntarily transmitted your personal data and taking into account the nature of the Internet network, other operators, without any connection to the Controller, may collect them without your consent, in particular during your Internet browsing. Therefore, it is recommended to install antivirus and anti-spyware software on your computer and update it regularly.

2.3. Identity theft / Phishing

The Data Controller will never ask you by e-mail to obtain personal information.

If you receive an e-mail claiming to be from the Data Controller asking you to provide sensitive personal data (banking details, personal life data, etc.), please do not reply and forward this e-mail to us so that we can take the necessary actions.

You should only provide account information after logging into the Site directly from your browser.


3. Cookie Notice

A cookie is a cookie, that is, a text file that can be stored in a dedicated space on the hard drive of your Terminal when you visit a website. A cookie allows the issuer to identify the Terminal in which it is stored, during the validity or registration period of the cookie.

When consulting the Site, information relating to the browsing of your Terminal (computer, tablet, smartphone, etc.) may be recorded through the cookies installed on the Terminal, depending on the cookie choices you make and which you can modify at any time.

3.1 What are our website cookies used for?

Only the issuer of a cookie can read or modify the information contained in it.

When the user connects to the Site, the Data Controller may, at the user's choice, install various cookies on the terminal to recognize the terminal's browser during the validity period of the cookie in question. Cookies we issue are used for the purposes described below.

The cookies we issue allow us to:

  • carry out studies and establish statistics and volumes of visits and use of the various elements that make up our Site (sections and contents visited, paths), enabling the Data Controller to improve the interest and ergonomics of its services;

  • adapt the presentation of the Site to the display preferences of the Terminal (language used, screen resolution, operating system used, etc.) when visiting the Site, according to the display or reading hardware and software that the Terminal contains; and

  • implement security measures, for example when you are asked to reconnect to content or a service after a certain period of time.

3.2 Your choices regarding cookies

There are different ways to manage cookies. Any setting made by the user may affect Internet browsing and access to certain services that require the use of cookies.

You can choose at any time to express and modify your cookie preferences by the means described below.

In particular, you can configure your browser software so that cookies are stored on the terminal or, conversely, are rejected, systematically or according to their origin.

You can also configure your browser software so that you have the option to accept or reject cookies from time to time, before a cookie can be stored on the device. For more information, see “How to make your choices, depending on the browser used” in section 4.2.3. below.

3.2.1 Cookie consent

The registration of a cookie on a Terminal is essentially subject to the will of the Terminal user, who may express and modify it at any time and free of charge through the choices offered by his browser.

If you have accepted the registration of cookies in your browser terminal, the cookies embedded in the pages and contents displayed may be temporarily stored in a dedicated area of your terminal. They will be readable only by their transmitter.

3.2.2 Cookie refusal

If the user refuses to accept cookies on his Terminal, or deletes those already stored on the Terminal, the quality of the operation of the services offered by the Site will not be compromised.

However, it will no longer be possible to benefit from a number of functions that may be necessary to navigate certain areas of the Site. This would be the case if you attempted to access content or services for which the installation of cookies is strictly necessary (for example, booking a stay). This also applies if the Controller — or its service providers — are not able to recognize, for technical compatibility reasons, the type of browser used by your terminal, its language and display settings or the country from which the terminal appears to be connected to the Internet.

If necessary, the Controller declines all responsibility in relation to the consequences connected to the operation of its services resulting from the impossibility for it to register or consult the cookies necessary for their operation and which you have refused or deleted.

Please note that some cookies cannot be deleted because they are strictly necessary for the technical operation of the Site.

3.2.3 How to make your choices, depending on the browser you use?

For managing cookies and your choices, the configuration of each browser is different. It is described in the help menu of your browser, which will allow you to find out how to change cookie preferences.

For Internet Explorer:
http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies

For Safari:
https://support.apple.com/en-gb/guide/safari/sfri11471/mac

For Google Chrome:
http://support.google.com/chrome/bin/answer.py?hl=frlrm=ennswer=95647

For Firefox:
http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies

3.2.4 Deleting cookies

You can delete all your cookies or only those you want. Deleting cookies does not prevent browsing or reinstallation while browsing. This allows you to control your browser's cookie library at a given time. Technical cookies necessary for navigation will be reinstalled if the Site is visited.

Below, we explain the procedure to follow depending on your browser.

Chrome
In the Chrome menu, select “Settings”.
Show advanced settings.
Go to “Privacy” section.
Click on “Content settings”.
In the “Cookies” paragraph (first paragraph), click on “Cookies and site data”.
Search for the cookies you want to delete and click “OK”. You can also choose to delete all your cookies.

Firefox
In the Firefox menu, go to “Tools” then “Options”.
In the “Privacy” tab, click on “Show cookies”.
Search for the cookies you want to delete and click “Remove Cookie”.

Internet Explorer
Internet Explorer does not allow cookie management on a case-by-case basis. To delete all cookies:
Click “Tools” then “Internet Options”.
In the “General” tab, under “Browsing history”, click “Delete”.
Select the “Cookies” box and click “Delete”.

Safari
In the Safari menu, select “Preferences”.
In the window that opens, go to the “Security” tab.
Click on “Show Cookies”.
In the window that opens, find and select the cookies you want to delete and click “Delete”.

3.2.5 Private browsing

The “Private Browsing” mode, now offered by all browsers, mainly allows browsing the Internet without retaining the history of pages visited or downloads. Regarding cookies, all cookies that were saved during browsing will be deleted when the browser is closed. It is therefore not a solution to refuse cookies; however, their life span remains limited to the duration of your browsing.

3.2.6 Disabling third-party cookies

Disabling third-party cookies makes it possible to accept only cookies placed by the Site, which you also have the possibility to disable, delete or limit. Below is the procedure to follow, depending on the browser, if you wish to refuse third-party cookies:

Chrome
In the Chrome menu, select “Settings”.
Show advanced settings.
Go to the “Privacy” section.
Click on “Content settings”.
In the “Cookies” paragraph (first paragraph), check the box “Block cookies and site data from third parties”.
Save changes by clicking “OK”. You can also choose to delete all your cookies.

Firefox
In the Firefox menu, go to “Tools” then “Options”.
In the “Privacy” tab, tick the “Accept cookies” box.
For the “Accept third-party cookies” setting, select “Never”.
Save changes by clicking “OK”.

Internet Explorer
In the Internet Explorer menu, go to “Internet Options”.
In the “Privacy” tab, click the “Advanced” button.
Accept internal cookies, refuse third-party cookies.
Save changes by clicking “OK”.

Safari
In the Safari menu, select “Preferences”.
In the window that opens, go to the “Security” tab.
To choose “Accept cookies”, select “Only from sites I visit”.

3.2.7 Your choices expressed directly online with us

If you do not want:

  • us to collect data about your browsing,

  • that in the context of a registration through a special operation we can identify the original special operation,

you can choose to disable all third-party cookies, which are not essential for navigation of the Site.

We will then store a cookie on your Terminal whose sole purpose is to disable the placement of these cookies on your computer. This cookie will be valid for twelve (12) months.

Please note that honoring your choice is based on a cookie. If you delete all cookies stored on your device (via your browser), the Data Controller — or its service providers — will no longer know that you have chosen this option.