WHO ARE WE?
Casa Calmar is a brand owned by the company Loftreference, Atividades Turísticas Lda.
Casa Calmar is committed to protecting the personal data of Clients/Users of Casa Calmar products and services, as well as personal data in all situations where personal data is processed. In this context, this Policy has been developed, which is based on its commitment to respecting personal data protection rules.
WHY THIS PERSONAL DATA PROTECTION POLICY?
This Policy aims to inform Clients/Users about the general rules for the processing of personal data, which are collected and processed in strict compliance with the provisions of the personal data protection legislation in force at any given time, namely Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (“GDPR”).
Casa Calmar adheres to the best practices in the field of security and personal data protection, having taken the necessary technical and organizational measures to comply with the GDPR and ensure that the processing of personal data is lawful, fair, transparent, and limited to authorized purposes.
Casa Calmar is committed to the protection and confidentiality of personal data, having adopted measures it deems appropriate to ensure the accuracy, integrity, and confidentiality of personal data, as well as all other rights that pertain to the respective data subjects.
The rules set out in this Data Protection Policy complement the provisions regarding the protection and processing of personal data included in the contracts that Clients/Users enter into with Casa Calmar, as well as the rules set out in the terms and conditions governing the offer of various products and services, which are duly advertised on the website.
WHAT DOES THIS DATA PROTECTION POLICY COVER?
This Data Protection Policy applies exclusively to the collection and processing of personal data for which Casa Calmar is responsible, within the scope of the services and products provided to its Clients/Users, and in all situations where Casa Calmar processes personal data.
On Casa Calmar's website, there may be links to other websites that are not operated by Casa Calmar. These links are provided in good faith, and Casa Calmar cannot be held responsible for the collection and processing of personal data carried out through those websites. Casa Calmar also does not assume any responsibility for such websites, including their accuracy, credibility, and functionalities provided therein.
WHAT ARE PERSONAL DATA?
Personal data is any information, of any nature and regardless of its format, including sound and image, relating to an identified or identifiable natural person.
An identifiable natural person is considered to be someone who can be identified, directly or indirectly, particularly by reference to a name, identification number, location data, electronic identifiers, or one or more specific factors relating to their physical, physiological, genetic, mental, economic, cultural, or social identity.
WHAT DOES THE PROCESSING OF PERSONAL DATA CONSIST OF?
The processing of personal data consists of an operation or set of operations carried out on personal data or sets of personal data, whether by automated means or not. This includes collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction of data.
WHO IS RESPONSIBLE FOR DATA PROCESSING?
The entity responsible for the processing of personal data is Casa Calmar itself, which determines the purposes and means of the processing.
For this purpose, if the data subject needs to contact the data controller, they can do so through the following means and contacts provided below:
www.calmar.pt, +351912431748, geral@calmar.pt
WHO IS THE DATA PROTECTION OFFICER?
The Data Protection Officer plays a significant role in the processing of personal data, ensuring, among other aspects, compliance of data processing with current legislation, verifying adherence to this Data Protection Policy, and defining clear rules for the processing of personal data. They ensure that all individuals who entrust their personal data processing to Casa Calmar are aware of how their data is handled and what rights they have in this regard.
Therefore, data subjects, if they wish, can address a communication to the Data Protection Officer regarding matters related to the processing of personal data, using the following contacts: www.calmar.pt.
WHAT TYPES OF PERSONAL DATA ARE PROCESSED?
Casa Calmar, in the scope of its activities, processes personal data necessary for providing services and/or supplying products, as well as for social intervention purposes. This includes data such as name, address, telephone number, and email address, as detailed information provided to data subjects.
Subject to compliance with legal norms regarding the retention and transmission of data for the purpose of investigating, detecting, and prosecuting serious crimes, as well as other legally mandated processing, Casa Calmar will process traffic data, geographic location, profile, and/or consumption data of Clients/Users to the extent necessary for providing services. Thus, based on location, profile, and/or consumption, Clients/Users will have access to specific service functionalities, content suggestions, and proximity-based informational services.
Information about location may also be recorded and transmitted to organizations legally authorized to receive emergency calls, for the purpose of responding to received calls.
Personal data, traffic data, geographic location, profile, and/or consumption data are also processed for marketing purposes or for promoting offers of goods or services from Casa Calmar, if the respective data subject has authorized it.
Personal data will also be processed, if the respective data subject has authorized it, for the purpose of disseminating informational services and directories within the scope of universal service, including transmission to third parties for publication of such directories and provision of informational services.
If the Client/User has given prior consent, they may withdraw it at any time. However, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
WHEN AND HOW DO WE COLLECT YOUR PERSONAL DATA?
Casa Calmar collects your personal data, primarily through telephone communication, written correspondence, and via the website, ensuring that prior consent of the data subject is obtained when necessary.
Some personal data are essential for the execution of the contract, and in case of absence or insufficiency of such data, Casa Calmar may not be able to provide the product or service in question.
If the data subject is not a Client/User of Casa Calmar, their personal data will only be processed when they are provided, particularly through subscribing to newsletters, in which case the rules of this Data Protection Policy will apply.
The personal data collected may be processed both electronically and manually, ensuring strict compliance with personal data protection legislation. They will be stored in specific databases created for this purpose, and under no circumstances will the collected data be used for purposes other than those for which they were collected or consented to by the data subject.
WHO ARE THE RECIPIENTS OF PERSONAL DATA?
In addition to the recipients mentioned throughout this Data Protection Policy, Casa Calmar may disclose the personal data of the Client/User to comply with legal obligations, including to police, judicial, tax, and regulatory authorities.
WHAT ARE THE PURPOSES OF PROCESSING PERSONAL DATA?
In general, the personal data collected are collected and intended for managing the contractual relationship, providing contracted services, and adjusting services to the needs and interests of the Client/User. Casa Calmar may also, if legally permissible, use the personal data provided by the data subject for other purposes, such as sending suggestions, disseminating institutional information about the brand, informing about campaigns, promotions, advertising, and news regarding Casa Calmar products and/or services, as well as conducting market research or evaluation surveys.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
The period for which personal data is stored and retained varies depending on the purpose for which the information is processed.
Indeed, there are legal requirements that mandate the retention of data for a minimum period of time. Therefore, unless there is a specific legal requirement, personal data will be stored and retained only for the minimum period necessary to fulfill the purposes for which it was collected or further processed, as defined by law.
WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?
As data subjects, Clients/Users are guaranteed, at any time, the right of access, rectification, updating, limitation, and erasure of their personal data (except for data that are essential for providing services by Casa Calmar, duly identified in the Form as mandatory or for compliance with legal obligations to which the data controller is subject), the right to object to the use of their data for commercial purposes by Casa Calmar, the right to withdraw consent without affecting the lawfulness of processing based on consent before its withdrawal, and the right to data portability.
HOW CAN YOU ACCESS, RECTIFY, UPDATE, LIMIT, ERASE, OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA, OR WITHDRAW CONSENT?
Without prejudice to the provisions of the GDPR, the data subject may exercise these rights directly or by written request addressed to the Data Controller, using the contact details provided for this purpose in this document, as well as other contact information provided by Casa Calmar.
HOW CAN YOU OBJECT TO RECEIVING MARKETING CONTACTS?
Casa Calmar may promote marketing actions to its Clients/Users regarding new products or services, including via telephone, email, SMS, MMS, or any other electronic communications service, provided that the data subject has given their consent for such communications.
If the data subject no longer wishes to receive such communications, they can withdraw their consent for the use of their data for marketing purposes at any time.
HOW CAN YOU MAKE A COMPLAINT?
Without prejudice to the ability to file complaints directly with Casa Calmar using the contact details provided for this purpose, Clients/Users can also lodge complaints directly with the supervisory authority, which is the Comissão Nacional de Proteção de Dados (CNPD), using the contact information provided by this entity for that purpose.
WHAT MEASURES DOES CASA CALMAR ADOPT TO ENSURE THE SECURITY OF YOUR PERSONAL DATA?
Casa Calmar is committed to ensuring the protection and security of the personal data provided to it, having approved and implemented stringent rules in this regard. Compliance with these rules is a legal obligation for all those who access them.
Given Casa Calmar's commitment and concern for the protection of personal data, various security measures, both technical and organizational, have been adopted to safeguard the personal data provided against unauthorized disclosure, loss, misuse, alteration, processing, or unauthorized access, as well as against any other unlawful forms of processing.
Additionally, third-party entities that, as part of service provision, process personal data of the Client/User on behalf of Casa Calmar, are required in writing to implement appropriate technical and security measures that, at all times, comply with the requirements set forth in current legislation and ensure the defense of the data subject's rights (including the protection of privacy and personal data of Clients/Users).
In this regard, on Casa Calmar's website, the forms for collecting personal data enforce encrypted browser sessions, and all personal data provided is securely stored in Casa Calmar's systems, which are hosted on Casa Calmar's servers. These systems are protected by all physical and logical security measures deemed necessary by Casa Calmar for the protection of personal data.
Despite the security measures adopted by Casa Calmar, Casa Calmar advises all internet users to take additional security measures. This includes ensuring they use an up-to-date PC and browser with properly configured security patches, an active firewall, antivirus, and anti-spyware software. Users should also verify the authenticity of websites they visit on the internet and avoid visiting websites whose reputation they do not trust.
UNDER WHAT CIRCUMSTANCES ARE DATA SHARED WITH OTHER ENTITIES (THIRD PARTIES AND SUBCONTRACTORS)?
Casa Calmar, as part of its activities, may engage third parties to provide certain services. Sometimes, providing these services requires these entities to access personal data of Clients/Users. When this happens, Casa Calmar takes appropriate measures to ensure that these entities accessing the data are reputable and provide the highest guarantees in this regard. This is duly established and safeguarded through contracts between Casa Calmar and the third party entities involved.
Therefore, any subcontracted entity by Casa Calmar will process personal data of our Clients/Users on behalf of and under the responsibility of Casa Calmar, adopting necessary technical and organizational measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, and against any other unlawful forms of processing.
In any case, Casa Calmar remains responsible for the personal data provided to it.
UNDER WHAT CIRCUMSTANCES DO WE TRANSFER YOUR PERSONAL DATA?
The provision of certain services by Casa Calmar may involve transferring your data outside of Portugal, including outside of the European Union or to International Organizations.
In such cases, Casa Calmar will strictly comply with applicable legal provisions, particularly regarding the determination of the adequacy of the destination country(ies) concerning the protection of personal data and the requirements applicable to such transfers. This includes, where applicable, entering into appropriate contractual instruments that ensure and respect the legal requirements in force.
HOW CAN YOU FIND OUT ABOUT ANY CHANGES TO CASA CALMAR'S PERSONAL DATA PROTECTION POLICY?
Casa Calmar reserves the right to make adjustments or changes to this Personal Data Protection Policy at any time, and such changes will be duly publicized on Casa Calmar's various communication channels.