Personal Data
At Albatroz Actividades Hoteleiras, S.A., we are committed to protecting your privacy and ensuring a transparent and secure experience.
1. Data Controller
The entity responsible for the processing of personal data is Albatroz Actividades Hoteleiras, S.A., with registered office at Rua Frederico Arouca 100, 2750-353 Cascais, Portugal.
For any questions relating to your personal data, you may contact us at:
info@thealbatrozcollection.com
Supervisory Authority:
Portuguese Data Protection Authority (CNPD)
2. Personal Data We Collect
In the course of our activity, we may collect and process different categories of personal data, including:
• identification data, such as name, nationality, and date of birth;
• contact details, such as email, telephone number, and address;
• reservation and stay data, including check-in and check-out dates, preferences, and special requests;
• billing and payment data;
• data relating to the use of our services;
• communication data, including requests, complaints, and comments;
• professional data, in the context of recruitment processes;
• browsing data collected through cookies and similar technologies.
3. Purposes of Processing
Your personal data may be processed for the following purposes:
• management of reservations, stays and hotel services;
• provision of complementary services, including food services and event organization;
• billing, payments and administrative management;
• communication with customers before, during and after their stay;
• improvement of service quality and personalization of the customer experience;
• sending newsletters, promotions and other marketing communications, where there is an appropriate legal basis;
• management of applications and recruitment processes;
• compliance with legal and regulatory obligations;
• protection of persons and property, including video surveillance;
• management and security of information systems.
4. Legal Basis
The processing of your personal data is based, as applicable, on the legal grounds set out in Article 6 of the GDPR, namely:
• performance of a contract or pre-contractual steps;
• compliance with a legal obligation;
• legitimate interests of Albatroz Actividades Hoteleiras, S.A.;
• the data subject’s consent, where applicable.
5. How We Collect Data
Personal data may be collected:
• directly from you, through the website, email, telephone or in person;
• through online booking engines, including GuestCentric or equivalent;
• through OTA platforms, such as Booking.com, Expedia or others;
• in the context of the use of our services during your stay;
• through spontaneous applications or recruitment processes;
• through the use of the website and related cookies.
6. Systems and Processors
To support its operations, Albatroz uses technological systems and digital platforms, including hotel management systems (PMS), booking engines, OTA platforms, marketing systems, and other technological solutions.
Whenever third parties process personal data on behalf of Albatroz, they act as processors and are subject to appropriate contractual obligations under Article 28 of the GDPR.
7. Disclosure to Authorities
Under the legislation applicable to the hotel sector, Albatroz may disclose personal data to the competent authorities, namely SEF / AIMA, whenever this constitutes a legal obligation.
8. Video Surveillance
Albatroz premises may be subject to video surveillance systems used exclusively for the protection of persons and property, incident prevention, and reinforcement of security.
The collection of images is limited to what is necessary, properly signposted, and carried out in compliance with the applicable legislation.
9. Recruitment
In the context of recruitment processes, Albatroz may process personal data contained in applications, CVs and professional profiles exclusively for the purpose of evaluating and selecting candidates. Data is retained only for the period necessary for the recruitment process, unless there is a legal basis for additional retention.
10. International Data Transfers
Whenever the use of platforms or service providers implies transfers of personal data outside the European Economic Area, Albatroz ensures the adoption of appropriate legal safeguards, including adequacy decisions or standard contractual clauses approved by the European Commission.
11. Data Security
Albatroz implements appropriate technical and organizational measures to protect personal data against loss, destruction, alteration, unauthorized access or any other unlawful processing. Such measures include, in particular, access controls, authentication mechanisms, system monitoring, internal policies and security procedures.
12. Data Retention
Personal data is retained only for the period necessary for the purposes that justified its collection, as well as for compliance with legal, tax and regulatory obligations and for the defense of rights in legal proceedings.
After the applicable retention periods, data is securely deleted or anonymized.
13. Data Subject Rights
Under the GDPR, you may exercise the following rights at any time:
• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to data portability;
• right to object;
• right to withdraw consent, where processing is based on consent;
• right to lodge a complaint with the competent supervisory authority.
To exercise your rights, you may contact us at: info@thealbatrozcollection.com
14. Cookies
Our website uses technical, personalization, and analytical cookies to ensure proper functioning, improve the browsing experience, and collect statistical information.
You may configure your browser to refuse or manage cookies, although some website features may be limited as a result.
15. Changes to this Policy
Albatroz reserves the right to update this Privacy Policy whenever necessary to reflect legal, operational, or technological changes.