Privacy Policy
Privacy Policy
Please read this Privacy Policy carefully, as the processing of the personal data you provide implies knowledge and acceptance of the conditions contained herein.
Definitions and Key Concepts
For the purposes of this Privacy Policy, the following terms shall mean:
“Personal Data” – information relating to an identified or identifiable natural person (“Data Subject”).
“Data Subject” – in the context of the activities carried out by 550º Restaurant & Bar, this concept includes (but is not limited to): employees and former employees, workers, partners, job applicants, partners’ employees, suppliers and service providers and their employees, claimants and complainants, visitors, and all individuals who maintain a relationship with 550º Restaurant & Bar and to whom the Personal Data relates.
“Identifiable Person” – a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, electronic identifiers, or one or more factors specific to that natural person’s physical, physiological, genetic, mental, economic, cultural, or social identity.
“Processing of Personal Data” – any operation or set of operations performed on personal data, whether by automated means or not, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
“Data Controller” – the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
“Cookies” – small text files containing relevant information that the devices used to access (computers, mobile phones, or portable mobile devices) download via the internet browser when a website is visited by a Citizen or User.
Who is responsible for the collection and processing of your data?
Bernardino Gomes – Gestão Hoteleira S.A., headquartered at Rua Quinta do Paizinho, no. 11, Edifício Holiday Inn Express, 2790-236, Carnaxide, corporate ID 509.884.350, holder of the 550º Restaurant & Bar brand, is the entity responsible for the collection and processing of personal data. In the course of its activity, it may engage subcontracted entities for the purposes set out herein.
What personal data is collected and processed?
Bernardino Gomes – Gestão Hoteleira S.A. collects and processes personal data within the scope of its relationship with clients, employees and former employees, workers, partners, job applicants, partners’ employees, suppliers and service providers and their employees, claimants and complainants, visitors, and all individuals who maintain a relationship, and in compliance with applicable legal and regulatory obligations, such as:
-
Reservations: name, email address, phone number, payment method, and booking details
-
Recruitment: name, phone, email address, date of birth, and résumé
-
Newsletter: name, email address, and country
While browsing the website, Bernardino Gomes – Gestão Hoteleira S.A. may collect information about your computer, including IP address, operating system, and browser type, for administrative purposes and to provide aggregate information to advertisers.
How are your data collected?
Personal data may be collected through the following means:
-
Email
-
Website
-
Telephone calls
-
In person
The data collected are processed and stored electronically, in strict compliance with personal data protection legislation, and stored in specific databases created for this purpose by Bernardino Gomes – Gestão Hoteleira S.A., or by entities subcontracted by it.
Some personal data collected on the website are mandatory. If these data are missing or insufficient, Bernardino Gomes – Gestão Hoteleira S.A. may not be able to provide you with the requested services or information. In each specific case, you will be informed whether the provision of personal data is mandatory.
What are the purposes and legal grounds for processing your data?
In accordance with the Principles of Data Protection, Bernardino Gomes – Gestão Hoteleira S.A. may only process your personal data for specific purposes and if it has a legal basis to do so. Your data may be used for the following purposes:
-
To comply with legal obligations;
-
In the performance of contracts to which data subjects are party, or for pre-contractual steps at their request;
-
To pursue the legitimate interests of 550º Restaurant & Bar;
-
For activities of service provision or R&D;
-
On the basis of the Data Subject’s consent.
Specific purposes include (illustrative, not exhaustive):
-
Accounting, Tax, and Administrative Management
-
Access Control Management
-
Recruitment and Human Resources Management
-
Project Management
-
Litigation Management
-
Electronic Communications Management
-
Compliance with Legal Obligations
Examples:
-
Execution of employment contracts
-
Payroll processing (including payments, deductions, tax withholdings, and contributions)
-
Compliance with occupational health and safety obligations
-
Compliance with mandatory work accident insurance obligations
-
Professional training and performance evaluation
-
Attendance and punctuality control [biometric data may be used for this purpose]
-
Statistical operations related to payroll processing
-
Salary garnishments as required by law
-
Other legal obligations or judicial decisions applicable to 550º Restaurant & Bar
For customers, more specifically:
-
Based on contract:
-
Reservation management
-
Quotes, information requests, booking confirmations
-
Preference registration (services, mobility, newspapers/magazines, etc.)
-
Billing and payment verification
-
Provision of necessary service information
-
Customer support
-
-
Based on consent:
-
Newsletter subscription (if not already a client)
-
Marketing communications (if not already a client)
-
Loyalty programs
-
-
Based on legal obligations:
-
Complaint management
-
Other regulatory obligations
-
-
Based on legitimate interest:
-
Satisfaction surveys
-
Market research and statistical analysis
-
Contact agenda management
-
Email marketing
-
For these purposes, Bernardino Gomes – Gestão Hoteleira S.A. may interconnect collected data to update and complete them.
With whom are your data shared?
The data collected and held by Bernardino Gomes – Gestão Hoteleira S.A. may be transmitted, with respect for confidentiality and purpose limitation, to the following entities:
-
Other entities within Bernardino Gomes – Gestão Hoteleira S.A.
-
Judicial or administrative authorities, where mandatory
-
Recruitment and selection companies
-
Subcontractors that process data on behalf of Bernardino Gomes – Gestão Hoteleira S.A., for the purposes defined by it
Cookies
Cookies are small pieces of information that can help identify your browser and may store user information such as settings and preferences.
Bernardino Gomes – Gestão Hoteleira S.A. may store cookies on your device to personalise and facilitate browsing. These cookies do not provide personal data references.
For more information, please read our Cookie Policy.
What are your rights?
Under the Data Protection Law, you have the right to access, update, rectify, erase, port, and delete your personal data. You may also lodge complaints with the Portuguese Data Protection Authority (CNPD).
You also have the right to object to the use of your data for marketing purposes, informational communications, or inclusion in mailing lists. If you did not exercise this right at the time of data collection, you may do so later.
550º Restaurant & Bar has implemented a data protection incident management system. If you wish to report a personal data breach (accidental or unlawful destruction, loss, alteration, disclosure, or unauthorized access), please contact us at: rgpd@realhotelsgroup.com or by post at:
Bernardino Gomes – Gestão Hoteleira S.A.
Rua Quinta do Paizinho, no. 11, 2790-236 Carnaxide | Portugal
How long are your data stored?
The retention period depends on the purpose of the processing. Where no specific legal requirement exists, data will be stored only for the minimum necessary time, after which they will be deleted.
Are your data processed securely?
Bernardino Gomes – Gestão Hoteleira S.A. is committed to ensuring data security. Technical and organisational measures have been adopted to protect personal data against disclosure, loss, misuse, alteration, unauthorised access, or unlawful processing.
Subcontractors and partners are required to apply equivalent security measures.
Nevertheless, users must also adopt additional security measures, such as using updated and secure devices and browsers, active firewalls, antivirus and antispyware, and ensuring the authenticity of the websites they visit.
Communications
Bernardino Gomes – Gestão Hoteleira S.A. may communicate user data in the context of mergers, acquisitions, or corporate restructuring. Such communication does not constitute transfer to third parties.
Data may also be disclosed in investigations, judicial or administrative proceedings, where required by court order.
Data transfer
If personal data are transferred to third countries outside the EU/EEA, Bernardino Gomes – Gestão Hoteleira S.A. will ensure compliance with the law, only transferring data to jurisdictions offering adequate safeguards.
Use of social media platforms by Bernardino Gomes – Gestão Hoteleira S.A. may imply data transfers to service providers located outside the EU/EEA. The company is not responsible for personal data shared by users on those platforms.
Consent
By freely providing your personal data, you acknowledge and accept the terms of this Policy. By using the channels provided or by submitting personal data, clients and citizens expressly authorise their processing according to the rules defined herein.
Changes to the Privacy Policy
To ensure ongoing development and improvement, Bernardino Gomes – Gestão Hoteleira S.A. reserves the right to update or amend this Privacy Policy at any time. Updates will be duly published at: https://www.550graus.pt/politica-privacidade
Confidentiality
In its activity, 550º Restaurant & Bar does not sell, rent, distribute, or commercially provide Personal Data to third parties, except where necessary to share with financing entities, service providers for the purposes established herein, or to third parties in order to comply with legal obligations.