Basic information on Personal Data Protection

In compliance with the General Personal Data Protection Regulation, the data subject is hereby informed of the following:

1. DATA CONTROLLER

Identity:

The Vintage House Hotel, SA

Postal address:

Rua António Manuel Saraiva, 5085, Lugar da Ponte, Pinhão, PT

CIF:

PT503974242

Website:

2. PURPOSE OF PROCESSING

The data will be processed for the management of the reservation, the provision of the service and commercial prospecting of our services/products, as well as to avoid duplication with other restaurants that share reservation software.

The personal data provided will be kept for the time that is strictly necessary, as long as the deletion of the same is not requested, or until they no longer meet the purpose for which they were collected.

3. LEGITIMATION

The legal basis on which the data processing is based is as follows:

• Unequivocal and express consent of our customers to receive the service provided.

• Execution of a contract or pre-contractual measures.

• Legitimate interest.

• Follow-up of legal obligations.

4. TARGET

Data may be transferred to suppliers or for statistical purposes.

The data is transferred to RESTAURANT BOOKING SOLUTIONS SL (CoverManager) for the management of reservations under a data processor contract. More info about CoverManager’s privacy policy at https://www.covermanager.com/politica-privacidad/. Data may also be transferred to other restaurants that share the same reservation software only for the purpose of detecting duplicates.

5. RIGHTS

You are entitled to the following rights under the RGPD:

• Right to request access to personal data, you may request information from the person responsible for a file on whether your personal data is being processed.

• Right to request rectification allows you to request the modification of data that are inaccurate or incomplete.

• The right to object to the processing, allows you to request that the data cease to be processed under the legally established requirements.

• Right to request its deletion: to revoke the consent given and request the deletion of personal data.

• Right to limitation of processing: the right to demand that measures be applied to such data in order, among other things, to prevent their modification or, where appropriate, their erasure or deletion.

• Right to data portability: o request that the information be provided in a structured and clear format to another Data Controller.

How to exercise these rights?

- By writing to Rua António Manuel Saraiva, 5085, Lugar da Ponte, Pinhão, PT.

- By e-mail addressed to visit@croft.pt

In addition, at any time if the data subject considers that his or her data is not being treated in an appropriate manner or as required by the data subject, he or she may file a complaint with the Spanish Data Protection Agency (www.agpd.es).