For the purposes of the General Data Protection Regulation (GDPR) the data controller is Favoriterainbow Unipessoal Lda.
Collection of personal information
We receive and store any information you knowingly provide to us when you publish content, including but not limited to on our social media pages, make a purchase, fill any online forms on the Website, send us an email or contact us by phone. You can choose not to provide us with certain information, but then you may not be able to take advantage of some of the Website’s features. We will request and collect only the data necessary for the provision of the service, according to the explicit indications on the website. You are free to access, correct, or delete your data. We will not pass your information on to any third party.
When you visit the Website our servers automatically record information that your browser sends. This data may include information such as your device’s IP address, browser type and version, operating system type and version, language preferences or the webpage you were visiting before you came to our Website, pages of our Website that you visit, the time spent on those pages, information you search for on our Website, access times and dates, and other statistics.
Use and processing of collected information
Any of the information we collect from you may be used to personalize your experience; improve our Website; improve customer service and respond to queries and emails of our customers; process transactions; send newsletters; send notification emails such as password reminders, updates, etc; run and operate our Website and Services. Non-Personal Information collected is used only to identify potential cases of abuse and establish statistical information regarding Website usage. This statistical information is not otherwise aggregated in such a way that would identify any particular user of the system.
We may process Personal Information related to you if one of the following applies: (i) You have given your consent; (ii) Provision of information is necessary for the performance of an agreement with you; (iii) Processing is necessary for compliance with a legal obligation to which you are subject; (iv) Processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us; (v) Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.
Data Integrity and Security
All Personal Information we hold is protected by us in accordance with the Principles (Article 5) of the GDPR including the use of two-factor access control and encryption wherever possible. We use reasonable efforts to maintain accurate information and use physical and technical safeguards to secure your data. We use third-party providers to provide the technology required to provide our Services including hardware, networking, software and storage. These facilities may be located outside of the European Economic Area. By submitting your personal information, you agree to this. Although we will use reasonable efforts to secure network communications and our Sites, we cannot guarantee that the information submitted to, maintained on, or transmitted from our systems will be completely secure.
Disclosure of personal details and audiovisual materials
By completing a booking, you agree to receive an invitation to complete our guest review, which review can also be completed anonymously. By completing the guest review, you agree that the completed guest review can be uploaded to our website at the relevant information page for the sole purpose of informing (future) customers on the service (level) and quality.
You also give us all rights in the audiovisual material collected or recorded during the Services and activities, and allow its use for promotional purposes, including but not limited to our website and social media channels.
Information transfer and storage
Depending on your location, data transfers may involve transferring and storing your information in a country other than your own. We may transfer your Personal Data to other entities that will treat such for the purposes of providing contracted services. Personal Data are treated with the level of protection legally required to guarantee their security and prevent unauthorized alteration, loss, treatment or access, taking into account the state of technology.
We undertake that whenever we access any of your Personal Data we will (i) store them by means of legally enforceable security measures of a technical and organizational nature that guarantee their security, thus avoiding unauthorized alteration, loss, processing or access, in accordance with the current state of technology, to nature of the data and the possible risks to which they are exposed; (ii) use the data exclusively for the purposes previously defined; (iii) make sure that the data are processed only by our coworkers whose intervention is necessary for the provision of the service and they are bound by the duty of secrecy and confidentiality. Should the information be disclosed to third parties, they should be required to keep the confidentiality in accordance with the provisions of this document.
The rights of users
You may exercise certain rights regarding your information processed by us. In particular, you have the right to do the following: (i) to withdraw consent where you have previously given your consent to the processing of your information; (ii) to object to the processing of your information if the processing is carried out on a legal basis other than consent; (iii) to learn if information is being processed by us, obtain disclosure regarding certain aspects of the processing and obtain a copy of the information undergoing processing; (iv) to verify the accuracy of your information and ask for it to be updated or corrected; (v) to restrict the processing of your information, in which case, we will not process your information for any purpose other than storing it; (vi) to obtain the erasure of your Personal Information from us; (vii) to receive your information in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that your information is processed by automated means and that the processing is based on your consent, on a contract which you are part of or on pre-contractual obligations thereof and to the extent that legal provisions are not prohibiting or limiting such.
Any requests to exercise the above rights can be directed to us through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by us as early as possible and always within one month.
Privacy of children
We encourage parents and guardians to spend time with their children online, and to be familiar with the sites their children visit. No information is permitted to be either submitted to, or posted on, our sites by users under the age of 13. We rely on our users to be truthful in responding to the question of age. We will not provide any Personal Information about users under the age of 13, regardless of its source, to any third party for any purpose whatsoever without first requesting parental permission.
We offer electronic newsletters to which you may voluntarily subscribe at any time. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included on the Website or by contacting us. However, you will continue to receive essential transactional emails, if any.
Do Not Track signals
Some browsers incorporate a Do Not Track feature that signals to websites you visit that you do not want to have your online activity tracked. Tracking is not the same as using or collecting information in connection with a website. For these purposes, tracking refers to collecting personally identifiable information from consumers who use or visit a website or online service as they move across different websites over time. How browsers communicate the Do Not Track signal is not yet uniform. As a result, this Website is not yet set up to interpret or respond to Do Not Track signals communicated by your browser. Even so, as described in more detail throughout this Policy, we limit our use and collection of your personal information.
We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of Personal Information in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed. Therefore, while we strive to protect your Personal Information, you acknowledge that (i) there are security and privacy limitations of the Internet which are beyond our control; (ii) the security, integrity, and privacy of any and all information and data exchanged between you and our Website cannot be guaranteed; and (iii) any such information and data may be viewed or tampered with in transit by a third-party, despite best efforts.
In the event we become aware that the security of the Website has been compromised or users Personal Information has been disclosed to unrelated third parties as a result of external activity, including, but not limited to, security attacks or fraud, we reserve the right to take reasonably appropriate measures, including, but not limited to, investigation and reporting, as well as notification to and cooperation with law enforcement authorities. In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe that there is a reasonable risk of harm to the user as a result of the breach or if notice is otherwise required by law. When we do, we will send you an email.
We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Changes and amendments
We reserve the right to modify this Policy relating to the Website or Services at any time, effective upon posting of an updated version of this Policy on the Website. When we do we will revise the updated date at the bottom of this page. Continued use of the Website after any such changes shall constitute your consent to such changes.
Acceptance of this policy
If you have any questions about this Policy, please contact us at firstname.lastname@example.org
This document was last updated on April 13, 2020