General Data Protection Regulation (GDPR)
If you wish to continue receiving the newsletter and/or news and events published and held, indicate your data, provide your consent for the processing of your personal data, knowing the data protection and privacy policy of Living Place – Animação Turística, Lda., and then choose Subscribe to Newsletter.
The confidentiality and integrity of your personal data is one of the main concerns of the company Living Place – Animação Turística, Lda (Living Place).
The entry into force of the new General Data Protection Regulation (GDPR) on May 25, 2018, is an opportunity to update your preferences and help us reinforce good data protection practices.
By doing this you are contributing to secure processes and in accordance with the best privacy protection rules. This choice is essential to ensure your right to information.
The lack or omission of your confirmation of consent will prevent Living Place from directing any electronic communication to your personal contacts.
Therefore, to guarantee and confirm your free, informed and explicit consent, under the terms required by the GDPR, you must read our DATA PROTECTION AND PRIVACY POLICY and then subscribe to our newsletter by clicking on Subscribe to Newsletter to continue receiving information about the company’s activities, events and promotions.
LIVING PLACE DATA PROTECTION AND PRIVACY POLICY
At Living Place we understand that the use of your personal data requires your trust. We maintain strict privacy standards in our business and will only use your personal data for clearly identified purposes and in accordance with your data protection rights.
The confidentiality and integrity of your personal data is one of our main concerns.
I. PERSONAL DATA
Living Place, headquartered at Rua Joaquim Pires, Nº32, 3050-402 Pampilhosa, in carrying out its activities collects and processes personal data, such as:
- Name
- Postal contact
- Email contact
- Mobile phone contact
- Date of birth
- TIN (Taxpayer Identification Number)
II. ON THE PROCESSING OF PERSONAL DATA
The processing of personal data is the responsibility of Living Place (without prejudice to the provisions of VIII.) and consists of the operation or set of operations carried out on those personal data, by automated or non-automated means, such as:
- Collection
- Registration and conservation
- Organization
- Adaptation or change
- Consultation and use
- Limitation, erasure or destruction
III. CONSENT OF THE OWNER OF PERSONAL DATA
Living Place requires the holder of personal data, in all cases, to give their free, specific, informed and explicit consent for the processing of their data, using models created on a case-by-case basis, depending on the specific type and extent of said processing.
Consent of minors
Under the terms of article 8 of the GDPR, the personal data of minors may only be processed based on the consent provided for in paragraph a) of paragraph 1 of article 6 of the GDPR and relating to the direct offer of information society services when they have already completed 13 (thirteen) years of age.
If the minor is under 13 (thirteen) years of age, processing is only lawful if consent is given by their legal representatives, preferably using secure authentication methods, such as the Citizen Card or the Digital Mobile Key.
IV. RESPONSIBLE FOR PROCESSING PERSONAL DATA
Living Place is aware of and complies with the rules laid down for the processing of personal data, as set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, GDPR), without prejudice to all national legislation to which it is subject.
Living Place is responsible for the processing of personal data, whether by automated means or not, from its collection, organization, storage to elimination.
Living Place has an internal process for continuously and up-to-date recording of the personal data processing activities it carries out.
V. PURPOSES AND BASIS FOR PROCESSING PERSONAL DATA
Personal data will only be processed for a set of specific purposes, also considering a set of legal grounds for such processing, which include:
- Pursuit of Living Place's goals and purposes
- Compliance with current legislation and all other legal requirements
- Legal duties of preservation and integrity of documentation
- Preparation of applications and projects
- Intervention as a processor within the meaning of Article 4(8) of the GDPR
VI. DATA STORAGE PERIOD
Personal data will be kept for a period of time defined by legal or regulatory standards or, in the absence thereof, for the period that is necessary to achieve the respective purpose, taking these into account and the legal grounds for processing mentioned above, as well as all legally defined requirements and deadlines, in particular the limitation periods of the corresponding rights. Accordingly, in all cases where there is a data retention period imposed by law, the right to erasure provided for in Article 17 of the GDPR can only be exercised after that period.
Living Place guarantees the retention of personal data for the period strictly necessary to fulfill the purpose of its specific processing, as well as its deletion (or anonymization, if and when applicable/necessary) immediately after that period has elapsed and/or upon request by the respective holder, always and in all cases considering the aforementioned requirements and legally defined deadlines.
VII. RIGHTS OF THE PERSONAL DATA SUBJECT
The data subject has the right, at any time and free of charge, to request from Living Place:
- Access to your personal data
- The rectification or correction of your personal data
- The deletion of your data (without prejudice to the provisions of VI. on the data retention period)
- Limitation of the processing of your personal data (idem)
- Opposition to the processing of your data
- The portability of your data to an entity indicated by it, as long as it concerns personal data stored electronically.
In all cases, if there is a legally imposed rule or obligation that overrides these rights, Living Place reserves the right not to execute the order (or for this order to be subject to restrictions or conditions, if and when applicable), always indicating the respective reason to the interested party in all cases.
The holder of personal data may submit any complaint to the National Data Protection Commission (hereinafter, CNPD), as the Supervisory Authority in Portugal, as defined in numbers 21 and 22 of article 4 and in article 51 of the GDPR.
VIII. TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES AND INTERVENTION OF SUBCONTRACTORS
Transmission to third parties
Living Place, in the course of its activity, may transmit personal data in its possession to third parties, defined under the terms of number 10 of article 4 of the GDPR, in compliance with legal, regulatory, pre-contractual or contractual duties, in particular to public authorities responsible for control and auditing duties and/or to partners in activities, projects or services, even if this is imposed by law or regulation or is essential for the performance of its activities.
To this end, Living Place will request the competent and prior consent of the holders of the personal data subject to this type of processing, respecting all the requirements set out in the GDPR for this purpose.
Intervention of subcontractors
Living Place, in the course of its activity, may subcontract third parties (as defined in number 8 of article 4 of the GDPR) to process personal data on its behalf. If this happens, Living Place will request the competent and prior consent of the holders of the personal data subject to this type of processing, respecting all the requirements set out in the GDPR for this purpose.
IX. COOKIES
Without prejudice to the information and data collected through other technical means, Living Place additionally collects anonymous information through its Website, in particular information relating to the type of internet browser used, operating systems and date and time of access to the website, using control technologies (cookies) to gather this information.
X. PROTECTION COMMITMENT
Living Place will ensure the implementation of all formal and operational procedures for the protection of personal data subject to processing, as well as for the current and updated recording of all processing activities, as well as carrying out the competent prior study of personal data processing activities to be launched in the future, ensuring their compatibility with the GDPR.
Living Place will make its best efforts to guarantee and maintain in operation all technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access and misappropriation of personal data provided to it by the holders, without prejudice to the fallibility of Internet security measures.
Living Place declines any responsibility for damages suffered by users and whether or not caused by third parties, through illegitimate access to data transmitted by these users through its Internet portal and/or its IT infrastructure.
Living Place undertakes to notify the CNPD under the terms and deadlines provided for in article 33 of the GDPR, if it becomes aware of any event of personal data breach, as defined in number 12 of article 4 of the GDPR.
XI. CONTACTS
The holder of personal data may exercise his/her rights to rectify, modify or cancel such data or request any information regarding its processing by means of a written request addressed to Living Place at the address indicated in I. or to the electronic address mailto:geral@livingplace.pt.
XII. FINAL PROVISIONS
Living Place may, at any time and without prior notice, change this Policy, especially due to the need to adapt it to possible legislative changes or recommendations from the CNPD, in which case Living Place will make the changes made available in an area accessible to all its users.
