Privacy Policy

In accordance with the applicable legislation on the processing of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (RGPD), we hereby inform:

 

WHO WE ARE

Our website address is: https://dourocriativo.tours

Service: Sale of Tourist Products in the Douro Region.

Service Provider: Douro Criativo Unipessoal, Lda., Headquartered in Rua de Gadaires, Galafura, 5050-043 Peso da Régua, registered at the Commercial Registry Office of Vila Real with the sole registration number and legal person 514,632,100.

User / Customer: Natural and legal person purchasing / using our Services

 

WHAT PERSONAL DATA IS COLLECTED AND HOW IT IS COLLECTED

Douro Criativo, as a service provider, warrants that the User’s / Client’s personal data is collected for the purpose of being included in Douro Criativo’s customer database for the purposes of customer commercial management, invoicing, marketing of products and services. , customer contact, promotion, advertising and for statistical purposes.

When you request our services, you accept and acknowledge that you must provide your personal data strictly necessary to provide it; Such data will be used solely for the above purposes.

Under no circumstances will the personal data of the User / Client be disclosed, provided to third parties, without the express consent of the User / Client, except as provided in the following paragraph.

Douro Criativo will provide User / Client account data to the competent authorities if required by law or Douro Criativo is notified or sued in court for this purpose. Douro Criativo may also disclose your data to third parties, in case of non-compliance with the terms and conditions of use of the service, in the exercise of Douro Criativo’s rights under civil, administrative or criminal liability.

At any time, the User / Customer may exercise their rights of access, rectification, deletion, limitation and / or portability through written communication, accompanied by document proving their identity and / or the data to be corrected, if applicable, which should be sent to the email address: geral@dourocriativo.pt.

Opposition to the processing of data referred to here, which is communicated to Douro Criativo after the commencement thereof, will only take effect from the date of receipt of such communication, and does not affect the legitimacy of the processing so far. Such opposition may mean the impossibility of providing the service.

As regards the exercise of the right to data portability, please note that, under applicable law, this applies only to data collected on the basis of your consent.

 

AS TO THE DATA YOU PUT ON THE SITE

The User / Customer, while handling the data you enter on the form for the purchase of a service, expressly represents and warrants that:

(a) The conditions of legitimacy laid down by law for the processing of data under their responsibility are met.

(b) Will transmit to Douro Criativo the necessary instructions for the intended data processing.

(c) Only communicate to Douro Criativo the personal data strictly necessary for the execution of the services contracted with Douro Criativo.

(d) It adopts the technical and organizational measures necessary to ensure the updating and accuracy of the data communicated to Douro Criativo.

(e) Adopts appropriate technical and organizational measures to ensure the confidentiality and security of personal data communicated to Douro Criativo, in order to prevent and prevent its accidental or unlawful destruction, alteration, accidental loss, unauthorized dissemination or access, particularly when it is transmitted over the network and against any form of illicit processing in accordance with the categories of data processed.

(f) Appropriate procedures have been implemented to satisfy the rights of data subjects.

(g) It has put in place appropriate procedures to comply with reporting obligations to the supervisory authority and data subjects in the event of a data breach.

Douro Criativo as a service provider and subcontractor in the processing of personal data, guarantees to the User / Customer that:

(a) It will process the data communicated to it by the User / Customer only in accordance with the instructions provided by the User / Customer, in accordance with the purposes for which the data was collected, and only to ensure the fulfillment of the obligations assumed for the provision. of the service and the execution of the intended operations;

(b) Adopt the necessary and appropriate technical and organizational measures to ensure the confidentiality and security of data and to prevent its accidental or unlawful destruction, alteration, accidental loss, unauthorized dissemination or access, in particular when processing involves transmission over the network, and against any form of illicit treatment;

(c) Maintain a record of the data processing performed on behalf of the User / Client, which shall contain at least the name and contact details of the User / Client, other subcontractors and, if applicable, the data protection officer and a description of the data. data processing performed;

(d) It will limit the access by its employees to the personal data communicated by the User / Client, being granted only to the extent necessary for the performance of the respective functions that are committed to them in the provision of the services;

(e) Ensure that employees who are given access to personal data are bound by obligations of confidentiality with respect to such data and that they refrain from using them for any other purpose, for their own benefit or for others;

(f) It will process data exclusively in Portugal or in another European Union country;

(g) It will provide the User / Client with the necessary information demonstrating the fulfillment of his obligations as a subcontractor in the processing of personal data.

It is the responsibility of the User / Client to inform the data subjects, at the time of collection, about the purpose of the processing of this data and its communication to Douro Criativo, and, if necessary, to obtain the consent to its processing.

Douro Criativo undertakes to assist the User / Customer, as far as possible, to enable the User / Customer to satisfy the rights of the data subjects.

If data subjects submit to Douro Criativo requests for access, rectification, opposition, deletion or portability of their personal data, Douro Criativo undertakes to forward such requests to the User / Customer as soon as possible to the address of email address in the User / Client account data.

Douro Criativo undertakes not to give away personal data to which it has access to third parties, not even for the purpose of its preservation, except for the communication that is necessary at any moment so that they can keep the systems (both of the hardware) secure. software), and always by signing an agreement to ensure that the third party fulfills its obligations as a subcontractor.

Please note that Douro Criativo uses suppliers located in the United States of America, so data uploaded through the service may be processed in that country. Douro Criativo, when contracting these suppliers to perform specific data processing operations on behalf of the User / Client, imposes on them the same data protection obligations as those established in this privacy policy, in particular the obligation to provide sufficient guarantees that appropriate technical and organizational measures will be implemented in such a way that the treatment complies with the requirements of the RGPD.

In any case, whenever Douro Criativo intends to subcontract third parties, or change the subcontracted third parties, it undertakes to inform the Customer thereof. The information to be provided shall include the identification of the third party, the data to be communicated to the third party and the security measures taken to ensure data security.

Douro Criativo undertakes to notify the User / Customer without undue delay after becoming aware of a violation of personal data.

Such communication shall be accompanied by relevant documentation enabling the User / Customer, if necessary, to notify the competent supervisory authority.

The User / Customer will be responsible for notifying the competent supervisory authority if a security breach occurs.

Douro Criativo undertakes to maintain complete and total confidentiality and confidentiality about the personal data that it deals with in the context of the provision of the service to the User / Client and to which it may have access during the execution of the service provision. Douro Criativo undertakes not to disclose, publish, or disseminate such information by any means, either directly or through third parties, without the prior written consent of the User / Customer.

The User / Customer undertakes to respect the confidentiality of the methods and procedures used by Douro Criativo in providing the service and assumes responsibility for compliance with this obligation by its employees. The duty of confidentiality will not apply to information that is accessible to the general public.

Upon termination of the service, Douro Criativo undertakes to return or destroy, as communicated by the User / Customer, the personal data in its possession, regardless of the format in which they are stored, except for those essential minimum data that must be retained for the fulfillment of their legal obligations.

 

COMMENTS

When visitors leave comments on the site, the data contained in the comments form, as well as the IP address and browser user agent, are saved to assist with spam detection.

An anonymous string created from your email address (also called a hash) can be sent to the Gravatar service to verify that you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. Once your comment is approved, your profile photo is visible to the public in the context of your comment.

 

MULTIMEDIA

When uploading images to the site, you should avoid uploading images with embedded geolocation data (EXIF GPS). Visitors can download and extract geolocation data from site images.

 

CONTACT FORMS

By completing the contact form you are automatically authorizing to give your details so that we can contact the Client / User.

 

COOKIES

If you leave a comment on our site you can choose to store your name, email address and website in cookies. This is for your convenience so you don’t have to re-fill in your details when leaving another comment. These cookies will last a year.

If you have an account and log in to this site, a temporary cookie will be set to determine if your browser accepts cookies. This cookie contains no personal data and will be deleted when you close your browser.

When you log in, some cookies will be set to store your session information and your screen display choices. Login cookies last one year. If you select “Remind me”, your session will persist for two weeks. When you log out, your login cookies will be removed.

If you edit or publish an article, an additional cookie will be stored in your browser. This cookie does not include personal data, it only indicates the content ID of the article you just edited. Expires after 1 day.

 

INCORPORATE CONTENT FROM OTHER SITES

Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content on other sites behaves as if you visit those sites.

This site may collect data about you, use cookies, incorporate third-party tracking, monitor your interactions with it, including record interactions with embedded content if you have an account and are logged in to that site.

 

ANALYTICAL DATA

Analytical data is read through the Google Analytics algorithm for internal analysis.

 

HOW LONG IS YOUR DATA RETAINED

If you leave a comment, the comment and its metadata are saved indefinitely. This is so that any subsequent comments can be recognized and approved automatically, instead of putting them in a moderation queue.

For users who register with our site (if any), we store the personal information you provide in your user profile. All users can view, edit, or delete their personal information at any time (except they cannot change their username). Site administrators can also view and edit this information.

 

WHAT RIGHTS YOU HAVE ABOUT YOUR DATA

If you have an account on this site, or left comments, you can request to receive an export file with personal data stored about you, including any personal data you have entered. You can also request that the stored data be deleted. This does not include any personal data that is required to be kept for administrative, legal or security purposes.

 

YOUR CONTACT INFORMATION

Douro Criativo Unipessoal Lda

Head Office: Rua de Gadaires, Galafura
5050-043 Peso da Régua

Branch office: Rua Santo António – Pioledo, Entrada D, 4BS
5000-607 Vila Real

Email: geral@dourocriativo.pt
Phone: (+351) 914 236 962

Douro Criativo reserves the right to change this privacy policy at any time by notifying the user / client at least 24 hours in advance. If you continue to use the service after this time, these changes will be deemed accepted. These conditions aim to guarantee the user a safe and effective use of the service provided by Douro Criativo.

Any questions and concerns regarding this privacy policy can be sent to geral@dourocriativo.pt