Privacy policy

Gerês Equidesafios, lda (hereinafter Gerês Casas), with headquarters at Rua de São João, 93, , 4840-030 Campo do Gerês NIPC 505841517, is a Travel Agency dedicated to managing local accommodation, being the owner of the https domain ://www.Gerês Casas.com/, where your WEBSITE is hosted.

Gerês Casas is committed to protecting the privacy and personal data of its customers and website users, which is why it created and adopted this policy and the practices described here. This privacy policy explains how your personal data is collected and processed, so we advise you to read it to learn about the conditions under which your personal data is collected and used.
1. WHAT IS THIS POLICY ABOUT?
1.1. This Privacy Policy explains how we collect and process personal data that is necessary to provide services that are available through the WEBSITE.
1.2. The objective is for the aforementioned services to be provided in an expeditious and hassle-free manner, describing the practices adopted for this purpose.
2. WHAT ARE PERSONAL DATA?
2.1. Personal data is all information relating to a person and that identifies that person, or makes that person identifiable, regardless of the nature and support of the information and including the sound and image of the person.
2.2. Identifiable must be understood as a person who can be identified, directly or indirectly, in particular by reference to an identification number or other specific elements of their physical, physiological, psychological, economic, cultural or social identity.
3. HOW WILL WE USE YOUR PERSONAL DATA?
3.1. GERÊS CASAS will use the personal data you provide to us for the following purposes:
(a) To create the Guest account;
(b) To contact Owners;
(c) To analyze and respond to your messages, customer support and information requests;
(d) So that we can send you newsletters or other publications that you have requested and/or that may be of interest to you;
(e) For the operations and management of the WEBSITE;
(f) To keep a record of your contact details;
(g) For commercial purposes, such as data analysis, audits;
(h) For fraud prevention and information systems security;
(i) For the adaptation, improvement and modification of services, namely, through the identification of usage trends, or, to determine the effectiveness of promotional campaigns;
(j) For the expansion of GERÊS CASAS’ commercial activities.
3.2. These personal data processing operations are an essential tool for your satisfaction and for the activity of GERÊS CASAS and are carried out in accordance with applicable legislation and best practices.
3.3. Your personal data will not be reused for other purposes that are not previously identified or that have no relationship with those purposes for which they were initially collected.
4. WHAT ARE THE GROUNDS FOR US TO PROCESS THE PERSONAL DATA WE COLLECT?
4.1. The personal data that GERÊS CASAS processes has specific grounds, depending on the purposes for which it is intended.
4.2. In the following table you can see the basis for the purposes identified above:
GOAL
BASIS
To create the Guest account;
Compliance with Pre-Contractual Due Diligence.
For contact with Owners;
Compliance with Pre-Contractual Due Diligence.
To analyze and respond to your messages, customer support and information requests;
Consent for this specific purpose.
So that we can send you newsletters or other publications that you have requested and/or that may be of interest to you;
Consent for this specific purpose.
For the operations and management of the WEBSITE;
Consent for this specific purpose (cookies);
Legitimate interests pursued by GERÊS CASAS.
To keep a record of your contact details;
Consent for that specific purpose;

For commercial purposes, such as data analysis, audits;
Consent for this specific purpose (cookies);
Legitimate interests pursued by GERÊS CASAS.
For fraud prevention and information systems security;
Legitimate interests pursued by GERÊS CASAS.
For the adaptation, improvement and modification of services, in particular, by identifying usage trends, or, to determine the effectiveness of promotional campaigns;
Consent for this specific purpose (cookies);
Legitimate interests pursued by GERÊS CASAS.
For the expansion of GERÊS CASAS’ commercial activities.
Legitimate interests pursued by GERÊS CASAS.
5. WHAT PERSONAL DATA DO WE COLLECT?
5.1. The personal data that GERÊS CASAS collects and processes are only those that are necessary and appropriate for the purposes indicated above.
5.2. GERÊS CASAS will collect and process the following personal data:
GOAL
DATA
To create the Guest account;
“name”, “surname”, “mobile number”, “country”, “password” and “email”.
For contact with Owners;
“name”, “surname”, “email” and “company”.
To analyze and respond to your messages, customer support and information requests;
“name”, “surname”, “telephone”, “email”, “County”, “your message” and “district”.
So that we can send you newsletters or other publications that you have requested and/or that may be of interest to you;
"email".
For the operations and management of the WEBSITE;
Cookies data;
To keep a record of your contact details;
“name”, “surname”, “mobile number” and “email”.
For commercial purposes, such as data analysis, audits;
Cookies data;
For fraud prevention and information systems security;
IP adress; Cookies data;
For the adaptation, improvement and modification of services, in particular, by identifying usage trends, or, to determine the effectiveness of promotional campaigns;
Cookies data;
For the expansion of GERÊS CASAS’ commercial activities.
“name”, “surname”, “mobile number” and “email”.
6. HOW DO WE COLLECT YOUR PERSONAL DATA?
6.1. We will collect your personal data through the forms present on the WEBSITE, but also through the WEBSITE and the communication it makes with your equipment and email messages you send to us.
6.2. Your personal data is collected through your equipment as follows:
(a) Through the account creation and contact forms;
(b) By subscribing to the newsletter;
(c) Through your browser;
(d) Through cookies;
(e) Through pixel tags and other similar technologies;
(f) IP address;
(g) Through your User data.
6.3. GERÊS CASAS is committed to processing your data in accordance with the law and in a legitimate manner.
6.4. GERÊS CASAS will not sell, rent or share your personal data with third parties, except in cases clearly identified in this Privacy Policy (see Point 12 to understand how).
6.5. GERÊS CASAS services are not aimed at minors, and personal data of minors is not intentionally processed.
7. WHAT ARE COOKIES?
7.1. Cookies are small information files that help identify your browser and that can store information, for example, User settings and preferences.
7.2. GERÊS CASAS will store cookies on your device to personalize and make browsing as easy as possible, but also for troubleshooting, statistics, quality assurance, and to monitor system security.

7.3. With the exception of cookies specifically necessary for the performance of the website, the storage of other cookies will always depend on the User's acceptance and consent, and this consent can be withdrawn at any time through specific browser tools.
7.4. To find out more about the cookies we use, you should consult our Cookies Policy.
8. WHAT ARE PIXEL TAGS AND OTHER SIMILAR TECHNOLOGIES?
8.1. Pixel tags (also known as web beacons and clear GIFs) may be used in connection with some services to, for example, track the actions of users of the services (including email recipients), measure the success of our marketing campaigns, and compile statistics on use of the Services and response rates.
8.2. To find out more about pixel tags and other similar technologies that we use, you should consult our Cookies Policy.
9. HOW DO WE PROTECT YOUR PERSONAL DATA?
9.1. Your personal data is kept safe through the adoption of various security measures, of a technical and organizational nature, which ensure that only Employees and the processes that must access them have access to personal data, in accordance with rules created for this purpose.
9.2. To protect your personal data, we only use data center providers that offer us adequate and documented security measures, namely, guarantees that your personal data is stored on servers that are maintained in controlled environments with limited access.
9.3. Personal data is kept on secure servers at [Internet Tourism Solutions SL] (hereinafter, “[Avantio]”) with NIPC [B97090138] and headquarters at [Calle Charles Robert Darwin 5 46980 Paterna, Valencia - España], which we offers adequate security guarantees to protect personal data against dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of illicit processing.
9.4. Likewise, when you browse the WEBSITE, we protect your data with encryption, such as Transport Layer Security (TLS, is a security protocol that protects telecommunications via the internet) and your password is stored using a one-way hash , that is, it cannot be recovered (or disclosed) by anyone, including GERÊS CASAS, and can only be redefined.
9.5. Although we take the care and precautions we deem appropriate to protect the personal data you provide and collect, you must be aware that no security system is impenetrable.
9.6. Therefore, you must take certain precautions, for example, you must keep your password secret and not disclose it to anyone else; If you believe that your password has been misused, you must notify us immediately; You should also be careful to log in and out every time you close your browser.
10. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
10.1. Your personal data will be kept for as long as necessary for the purposes for which they are intended, as listed in this Privacy Policy. Like this:
GOAL
MAXIMUM TIME
To create the Guest account;
During the use of the account, and up to 3 years after the last access.
For contact with Owners;
During the duration of the commercial relationship.
To analyze and respond to your messages, customer support and information requests;
1 year
So that we can send you newsletters or other publications that you have requested and/or that may be of interest to you;
3 years
For the operations and management of the WEBSITE;
2 years
To keep a record of your contact details;
2 years
For commercial purposes, such as data analysis, audits;
2 years
For fraud prevention and information systems security;
2 years
For the adaptation, improvement and modification of services, in particular, by identifying usage trends, or, to determine the effectiveness of promotional campaigns;
2 years
For the expansion of GERÊS CASAS’ commercial activities.
2 years
10.2. If the law provides for a specific or mandatory period, the data retention period will be that. In all other cases, personal data will be kept for a maximum of the times indicated above, periods that GERÊS CASAS understands as sufficient to fulfill the purposes.
10.3. After the retention period ends, all personal data collected will be deleted.

11. HOW YOU CAN EXERCISE YOUR RIGHTS:
11.1. Before we explain how you can exercise your rights, it is important to know what they are. Therefore, the legislation gives you the right to ask us to exercise the following rights:
(a) Access: right to obtain confirmation as to whether or not personal data concerning you are being processed and, if this is the case, the right to access your personal data;
(b) Rectification: the right to obtain the rectification of inaccurate personal data concerning you and to have your incomplete personal data completed;
(c) Erasure: the right to obtain the erasure of your personal data when one of the reasons listed in the legislation applies;
(d) Limitation of processing: the right to obtain limitation of processing if one of the situations listed in the legislation applies;
(e) Opposition: the right to object at any time to the processing of personal data concerning you;
(f) Portability: the right to receive personal data concerning you in a structured, commonly used and machine-readable format.
11.2. You also have the right to lodge a complaint with the competent supervisory authority (in Portugal, the National Data Protection Commission at www.cnpd.pt)
11.3. For the purpose of exercising the rights indicated above, you must contact GERÊS CASAS via the following email [reservas@gerescasas.com].
11.4. If you ask us to delete some or all of your personal data, some of the services requested may not be provided to you and GERÊS CASAS will only retain the personal data necessary to comply with the legal obligations to which it is bound.
12. WHEN DO WE COMMUNICATE DATA TO THIRD PARTIES?
12.1. GERÊS CASAS may use third parties to provide certain services, in terms of maintenance, technical support, marketing, invoicing or payment management, and they may have access to some of the personal data, namely the data necessary for the contractual purposes.
12.2. GERÊS CASAS ensures that the entities that have access to the data are credible and offer high guarantees of protection, with data never being transmitted to them beyond what is necessary to provide the contracted service, however, GERÊS CASAS remains responsible for the personal data made available.
12.3. For example, for data center management purposes, Gerês Casas uses AVANTIO services.
12.4. GERÊS CASAS may also communicate your data to the following entities:
(a) Companies in the business group to which GERÊS CASAS belongs and with which it has commercial partnerships to create and offer benefits; or yet,
(b) Other partners outside your business group (with prior authorization from you).
12.5. GERÊS CASAS may also transmit data to third parties within the scope of investigations, inquiries and judicial and/or administrative proceedings or of a similar nature, provided that it is duly ordered to do so by a court order to that effect.
13. THIRD PARTY WEBSITES
13.1. The WEBSITE may contain links to other websites which may collect and process your personal data, and this processing is the sole responsibility of the owners of these websites, with GERÊS CASAS not having any responsibility for their policies and/or practices.
13.2. Examples of these third parties are Facebook, Instagram or LinkedIn through the buttons that are present on the WEBSITE.
14. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION.
14.1. If data transfers may occur to third countries that do not belong to the European Union, GERÊS CASAS will comply with the legal rules, particularly with regard to the suitability of the destination country in relation to the protection of personal data and the requirements that are applicable to these transfers, and personal data will not be transferred to jurisdictions that do not offer guarantees of security and protection.
15. THE MINORS.
15.1. The WEBSITE is not aimed at minors under the age of 18, so we ask that minors do not provide us with personal data through the WEBSITE, application, social networks and social media or emails.
16. SENSITIVE PERSONAL DATA.
16.1. GERÊS CASAS would like to thank you for not sending us or making us aware of any sensitive personal data, that is, information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, relative data health or data relating to a natural person's sex life or sexual orientation.
16.2. If you still send or disclose these categories of personal data to us, they will be immediately deleted.
17. CHANGES TO PRIVACY POLICY.
17.1. GERÊS CASAS reserves the right to readjust or change this Privacy Policy at any time, with these changes being publicized.
18. OUR CONTACT DETAILS.

18.1. If you have any questions or concerns regarding this Privacy Policy, please contact us in writing via email [reservas@gerescasas.com].

JANUARY 1, 2024. Braga (Portugal)