Privacy and Data Protection Policy
VVV – Soluções para Hotelaria, S.A. recognizes the importance of protecting personal data and is committed to ensuring that such data is processed lawfully, fairly, and transparently, in strict compliance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”).
This Privacy Policy aims to inform website users, clients, suppliers, and business partners about how their personal data is collected, used, stored, and protected.
Access to and use of the VVV – Soluções para Hotelaria, S.A. website, as well as the provision of personal data through it, imply knowledge of and acceptance of the terms of this Privacy Policy.
Personal Data
For the purposes of this Policy, “personal data” means any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier such as a name, email address, telephone number, postal address, or other elements specific to that person’s identity.
1. Personal Data Collected
In the course of its activities, VVV – Soluções para Hotelaria, S.A. may collect and process personal data, namely name, email address, telephone number, postal address, and other data voluntarily provided by the data subject through contact forms or other means of communication.
The provision of personal data is voluntary. However, failure to provide certain data may make it impossible or limit the ability to respond to contact requests, provide information, or establish a commercial relationship.
2. Purposes of Data Processing
The personal data collected is processed exclusively for the following purposes:
– Management of contact requests, inquiries, and information requests;
– Management of commercial relationships with clients, suppliers, and partners;
– Pre-contractual procedures and contract performance;
– Compliance with legal and regulatory obligations;
– Administrative and operational management of the company’s activities;
– Improvement of website functionality and services provided.
Unless expressly stated otherwise, the website is not intended for recruitment or human resources selection processes. Any data submitted for such purposes may be deleted.
3. Legal Basis for Processing
The processing of personal data by VVV – Soluções para Hotelaria, S.A. is based on one or more of the following legal grounds:
Consent of the data subject;
Performance of a contract or pre-contractual steps;
Compliance with legal obligations to which the company is subject;
Pursuit of the company’s legitimate interests, provided that such interests do not override the fundamental rights and freedoms of the data subject.
Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.
4. Retention of Personal Data
Personal data is retained only for the period necessary to fulfill the purposes for which it was collected or for the period required by law. Once these periods have elapsed, the data will be deleted or anonymized.
5. Rights of Data Subjects
Under the GDPR, the data subject may exercise the following rights at any time:
– Right of access to personal data;
– Right to rectification of inaccurate or incomplete data;
– Right to erasure of data, where legally applicable;
– Right to restriction of or objection to processing;
– Right to data portability.
To exercise any of these rights, the data subject should contact VVV – Soluções para Hotelaria, S.A. via email at viriato@viriato.eu.
The data subject also has the right to lodge a complaint with the competent supervisory authority, namely the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD).
6. Security of Personal Data
VVV – Soluções para Hotelaria, S.A. implements appropriate and proportionate technical and organizational measures to protect personal data against destruction, loss, alteration, unauthorized disclosure, or access. These measures include access control mechanisms, IT security systems, secure communications, and internal confidentiality procedures.
7. Data Disclosure and Transfers
Personal data may be disclosed to third parties only when necessary to fulfill the purposes described above, to comply with legal obligations, or with the data subject’s consent.
Whenever personal data is transferred to third countries outside the European Economic Area, VVV – Soluções para Hotelaria, S.A. ensures that appropriate safeguards are in place, in accordance with the GDPR.
8. Cookies
The website may use cookies. For more information on the use of cookies, users should consult the Cookies Policy, which is also available on the website.
9. Changes to the Privacy Policy
VVV – Soluções para Hotelaria, S.A. reserves the right to amend this Privacy Policy at any time. Any changes will be duly published on the website, and the published version shall be the one currently in force.
