Privacy Policy

I - Introduction

Welcome to www.subarestaurante.com

This section is dedicated to our privacy policy.

It allows the User to know the origins and use given to the information collected and processed during the consultation of our website, as well as allowing them to know their rights.

This policy is important to you as a User, who wants a positive and trustworthy experience with our services, and it is therefore important to us, who strive to meet your expectations as best we can.

II - Data protection

• Responsible for Treatment

By providing the website hosted at www.subarestaurante.com, the company TLC - THE LISBON CLUB - Actividades Hoteleiras, S.A. under the legal person number 513353380, with registered office at Rua de Santa Catarina, n.º1, 1200-401 Lisboa, acts as Data Controller.

Any contact regarding data protection should be made via email: info@verridesc.pt

Under the terms of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016), hereinafter referred to as the GDPR, personal data are any data that allow, directly or indirectly, the identification of a natural person (not applicable to legal persons).

TLC - THE LISBON CLUB - Actividades Hoteleiras, S.A., may ask the User to provide personal data that allows it to be identified and/or contacted and/or execute the purchase contract it requests.

• Purposes and legal basis of data processing

TLC - THE LISBON CLUB - Actividades Hoteleiras, S.A. is a company that carries out hotel and business management activities, as well as activities involving the preparation and sale for consumption on the premises of meals served with table service. In the latter context, it manages and operates the SUBA restaurant, located in the Hotel Verride Palácio de Santa Catarina.

The personal data processed by TLC - THE LISBON CLUB - Actividades Hoteleiras, S.A. is used for the following purposes:

• Handling reservations and organizing events;
• Communications with customers/users;
• Sending relevant institutional or promotional information;
• Compliance with legal obligations, where applicable;

Customer data is processed in accordance with the purposes for which it was collected and is stored in such a way as to guarantee its security and confidentiality,

In particular, the data may consist of identification data, contact data and other data that is collected in the context of the relationship with the client.

Our newsletters always provide an opt-out option if the user does not wish to be included in our mailing list.

If you no longer wish to receive our newsletter, you can send us this information via email to: info@verridesc.pt

• Communication of data to third parties

User data is only intended for us, however it may be passed on to third parties when necessary to fulfill the contract, or comply with legal obligations to which we are bound.

• Transfer of data to third countries

We do not transfer personal data outside the European Union.

• Data retention period

We will only keep your data for the period necessary to fulfill the purposes for which it was collected or, in certain cases, for longer periods if required by law.

• Withdrawal of consent

In cases where the processing of data is based on the consent of the User, at any time, without compromising the lawfulness of the processing carried out on the basis of the consent previously given, it may be withdrawn.

III - What are the user's rights?

Right of Access

The User, as Data Subject, has the right to obtain confirmation from the Data Controller, Global Press, as to whether or not their data is being processed, as well as the right to access this and the following information:

• The purposes of the processing.
• The categories of personal data in question.
• The recipients to whom the data has been or will be disclosed.
• If possible, the time limits laid down for storing the data, or the criteria for setting these time limits.
• The right to request rectification, erasure, restriction or objection to processing;
• Right to lodge a complaint with the supervisory authority.
• The existence of autonomous decisions, including the definition of profiles.
• If the data has not been collected from the owner, information is available as to its origin.
• Guarantees regarding the transfer of data to third countries or international organizations.

Right of Rectification

The Data Subject has the right to obtain, without undue delay, the rectification of inaccurate personal data concerning him/her, as well as the right to request that incomplete personal data be completed.

Right to data erasure

The Data Subject has the right to request the erasure of his/her personal data without undue delay when:

• The data is no longer necessary for the purpose for which it was collected or processed.
• Withdraw the consent on which the processing is based, if there is no other legal basis for the processing.
• If you object to the processing under the terms of the Regulation.

Right to restriction of treatment

The Data Subject has the right to obtain from the Data Controller, TLC - THE LISBON CLUB - Actividades Hoteleiras, S.A., the restriction of processing, applying, among others, one of the following situations:

• Having challenged the accuracy of the data for the period necessary to verify its accuracy.

• If the Data Controller no longer needs the data for the purposes of the processing, but they are required by the Data Subject for the purposes of declaring, exercising or defending a right in legal proceedings.
• When there is opposition to processing, until it is established that the legitimate reasons of the Controller prevail over those of the Data Subject.

Right to data portability

If processing is based on consent, the Data Subject has the right to receive the data that has been communicated, in a commonly used and machine-readable digital format, or to request its direct transmission to another entity that will become the new Data Controller.

The provisions of the GDPR regarding the right to erasure apply without prejudice to this right.

Right to object and automated decisions

The Data Subject may object to the processing of his or her data, in the specific cases set out in the Regulation, when he or she demonstrates that his or her particular situation should be relevant to the exercise of functions in the public interest, public authority or legitimate interests, including the definition of profiles on the basis of the provisions relating to these.

The Data Subject also has the right to object to the processing of their data that includes profiling for direct marketing purposes, and the personal data must no longer be processed for this purpose.

The Data Subject has the right not to be subject to any decision taken solely on the basis of automated processing, including profiling, which produces effects in his or her legal sphere or significantly affects him or her, except where it is necessary for the performance of a contract, is based on his or her explicit consent or is authorized by Community or national law.

Right to lodge a complaint

The Data Subject has the right to lodge a complaint with the supervisory authority in the Member State of his/her habitual residence, place of work or place where the infringement is alleged to have taken place, if he/she considers that the processing of personal data concerning him/her violates the General Data Protection Regulation.

The Data Subject has the right to take legal action against legally binding decisions of the supervisory authorities concerning him/her.

You also have the right to take legal action if you consider that your rights have been violated, under the terms of the General Data Protection Regulation.

https://www.cnpd.pt/

Right to withdraw consent

If the data is processed on the basis of your consent, you may withdraw it at any time, although this right does not compromise the lawfulness of the processing previously carried out on the basis of that same consent.

If you wish to exercise any of your rights, you should contact us in writing to the email address [info@verridesc.pt], or by letter to the address [R. de Santa Catarina nº1, 1200-401 Lisboa].

IV - Security and confidentiality

We are committed to guaranteeing the confidentiality of our Users' data, to which end we have employed the appropriate security measures to ensure that it is not accessed by unauthorized persons. We subject our systems to regular security checks to ensure that your data is protected and secure. However, the transmission of information via the internet is not completely secure, so we cannot absolutely guarantee the security of information transmitted via our website.

We respect your right to the confidentiality of the data you transmit to us, so we do not transmit your data to third parties for any purpose other than to comply with legal obligations.