fbpx

Privacy Policy

In accordance with the applicable legislation on the processing of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (RGPD), we inform you:

 

Who we are

Our website address is: https://cruzeirosnodouro.pt

Service: Sale of Tourist Products in the Douro Region.

Service Provider: Douro Criativo Unipessoal, Lda., With headquarters in Rua de Gadaires, Galafura, 5050-043 Peso da Régua, enrolled in the Commercial Registry of Vila Real with the unique registration number and legal person 514.632.100.

User/Client: Natural and legal person who acquires / uses our Services

 

What personal data are collected and how they are collected

Douro Criativo, as provider of the service, guarantees that the personal data of the User/Client are collected for the purpose of being included in Douro Criativo customer database for the purposes of commercial customer management, billing, marketing of products and services , customer contact, promotion, advertising and for statistical purposes.

When you request our services, you accept and acknowledge that you must provide your personal data strictly necessary for the provision of the same; such data will be used exclusively for the aforementioned purposes.

In no case will the personal data of the User/Client be disclosed, provided to third parties, without the express consent of the User/Customer, except as provided in the following paragraph.

Douro Criativo will provide the data of the account of the User/Client to the competent authorities if it is obligatory by Law or the Douro Criativo is notified or summoned judicially for this purpose. Douro Criativo may also communicate its data to third parties, in case of non-compliance with the terms and conditions of use of the service, in the exercise of the rights of the Douro Criativo in civil, administrative or criminal liability.

At any time, the User/Customer may exercise their rights of access, rectification, elimination, limitation and/or portability by means of a written communication, accompanied by a document proving their identity and / or the data to be corrected, if applicable, that should be sent to the e-mail address: geral@dourocriativo.pt.

The opposition to the processing of data referred to herein, which is communicated to the Douro Criativo after the beginning thereof, shall take effect only from the date of receipt of such communication and does not affect the legitimacy of the treatment thus far carried out. Such opposition could mean the impossibility of providing the service.

With regard to the exercise of the right to portability of data, please note that, according to the applicable legislation, this will only apply to data collected on the basis of your consent.

 

Regarding the data that the User places on the site

The User/Customer, as responsible for the processing of the data that it places on the form for the purchase of a service, expressly declares and guarantees that:

(a) The conditions of legitimacy established by law for the performance of the data of their responsibility are verified.

(b) It shall transmit to the Douro Criativo the necessary instructions for the processing of data intended.

(c) Only communicate to the Douro Criativo the personal data strictly necessary for the execution of services contracted with the Creative Douro.

(d) Adopt the necessary technical and organizational measures to ensure the updating and veracity of the data communicated to the Douro Criativo.

(e) Adopt appropriate technical and organizational measures to ensure the confidentiality and security of personal data communicated to the Douro Criativo in order to prevent and prevent their accidental, unlawful, accidental, alteration, loss, unauthorized dissemination or unauthorized destruction, in particular when they are transmitted over a network, and against any form of unlawful processing in accordance with the categories of data processed.

(f) It has implemented the procedures adequate to the satisfaction of the rights of the data owners.

(g) It has implemented the appropriate procedures to comply with reporting obligations to the supervisory authority and data holders in the event of a data breach.

The Douro Criativo as provider of the service and subcontractor in the processing of personal data, guarantees to the User / Client that:

(a) Process the data communicated to you by the User/Customer only in accordance with the instructions transmitted by the User/Customer, according to the purposes for which the data was collected, and only to ensure compliance with the obligations assumed for the provision of the service and for the execution of the planned operations;

(b) Shall take the necessary and appropriate technical and organizational measures to ensure the confidentiality and security of the data and to prevent its accidental, unlawful destruction, alteration, accidental loss, unauthorized dissemination or access, in particular where the processing involves its transmission network, and against any form of illicit treatment;

(c) Keep a record of the processing of data executed on behalf of the User/Client, which shall contain at least the name and contacts of the User/Client, other subcontractors and, where applicable, the Data Protection Officer and a description of the data processing performed;

(d) Limit the access by its employees to the personal data communicated by the User/Customer, and shall be granted only to the extent necessary for the performance of the respective functions assigned to them in connection with the provision of services;

(e) Ensure that employees who are given access to personal data are bound by obligations of confidentiality in relation to such data and refrain from using them for any other purpose, for their own or others’ benefit;

(f) Perform data processing exclusively in Portugal or in another country of the European Union;

(g) Provide the User/Client with the necessary information demonstrating compliance with their obligations as a subcontractor in the processing of personal data.

It is the responsibility of the User/Client to inform the data owners, at the time of their collection, about the purpose of the processing of this data and its communication to the Douro Criativo, and, if necessary, to obtain consent to its treatment.

The Douro Criativo undertakes to assist the User/Customer, as far as possible, to enable it to satisfy the rights of the data owners.

In case the data owners submit to Douro Criativo requests for access, rectification, opposition, elimination or portability of their personal data, Douro Criativo undertakes to forward such requests to the User/Customer as soon as possible to the address of -mail that appears in the User/Client account data.

The Douro Criativo undertakes not to transfer the personal data to which it has access to third parties, not even for the purpose of its conservation, except the communication that, at any time, is necessary so that they can keep the systems (both hardware and of software), and always by signing an agreement to ensure that the third party fulfills its obligations as a subcontractor.

The User/Customer should note that Douro Criativo uses suppliers located in the United States of America, so data uploaded through the service may be processed in that country. The Douro Criativo contracting these suppliers to carry out specific data processing operations on behalf of the User / Customer imposes on them the same data protection obligations as those established in this privacy policy, in particular the obligation to provide adequate guarantees for the implementation of appropriate technical and organizational measures in such a way that the treatment meets the requirements of the RGPD.

In any case, whenever Douro Creativo intends to subcontract third parties, or change subcontracted third parties, it undertakes to inform the Client accordingly. The information to be provided shall include the identification of the third party, the data to be communicated to the third party and the security measures taken to ensure data security.

The Douro Criativo undertakes to communicate to the User/Client, without undue delay after having knowledge, the verification of a violation of the personal data.

Said communication shall be accompanied by relevant documentation enabling the User/Customer, if necessary, to notify the competent supervisory authority

The User/Client shall be responsible for notifying the competent supervisory authority in case of a breach of security.

The Douro Criativo is obliged to keep complete and total secrecy and confidentiality about the personal data that it treats in the context of the provision of the service to the User/Client and that may have access during the performance of the service. Douro Criativo undertakes not to disclose, publish, or disseminate the said information by any means, either directly or through third parties, without the prior written consent of the User/Client.

The User/Client undertakes to respect the confidential nature of the methods and procedures used by Douro Criativo in the provision of the service and assumes responsibility for the fulfillment of this obligation by its collaborators. The duty of confidentiality will not apply to information that is accessible to the general public.

At the end of the service, Douro Criativo undertakes to return or destroy, as communicated by the User/Client, the personal data it has in its possession, regardless of the format in which they are stored, except those data Essential minimum requirements to be retained for compliance with their legal obligations.

 

Comments

When visitors leave comments on the site, the data present in the comments form, as well as the IP address and user agent of the browser, are stored to assist with the detection of spam.

An Anonymous string created from your e-mail address (also called a hash) can be sent to the Gravatar service to verify that you are using it. The Privacy Policy of the Gravatar service is available here: https://automattic.com/privacy/. After your comment is approved, the profile picture is visible to the public in the context of your comment.

 

Multimedia

When uploading images to the site, you should avoid uploading images with embedded geolocation data (EXIF GPS). Visitors can download and extract geolocation data from site images.

 

Contact Forms

By Completing the Contact form you are automatically authorizing to assign your data so that we can contact the Customer/User.

 

Cookies

If you leave a comment on our website you can choose to save your name, email address and website in the cookies. This is for your convenience not to have to repopulate your data when leaving another comment. These cookies will last a year.

If you have an account and log in to this site, a temporary cookie will be configured to determine whether your browser accepts cookies. This cookie does not contain personal data and will be deleted when you close your browser.

When you log in, some cookies will be configured to save your session information and your screen display choices. Sign-in cookies last one year. If you select “Remember Me”, your session will persist for two weeks. When you log out, login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This Cookie does not include personal data only indicates the content ID of the article you just edited. Expires after 1 day.

 

Embedded Content from other sites

The articles on this site may include embedded content (for example: videos, images, articles, etc.). The embedded content of other sites behaves as if the user visits those sites.

This site may collect data about you, use cookies, embed third-party tracking, monitor your interactions with it, including registering interactions with embedded content if you have an account and are logged in to that site.

 

Analytical Data

Analytical data is read through the Google Analytics algorithm for internal analysis.

 

How long are your data retained

If you leave a comment, the comment and its metadata are saved indefinitely. This happens so that you can automatically recognize and approve any subsequent comments, rather than putting them in a moderation queue.

For users who register on our site (if any), we keep the personal information provided in your user profile. All users can view, edit, or delete their personal information at any time (with the exception of not being able to change their username). Site administrators can also view and edit this information.

 

What rights do you have about your data

If you have an account on this site, or have left comments, you may request to receive an export file with personal data stored on you, including any personal information you have indicated. You can Also request that the saved data be deleted. This does not include any personal data that is mandatory to maintain for administrative, legal or security purposes.

 

Your contact information

Douro Criativo Unipessoal Lda

Headquarters: Rua de Gadaires, Galafura
5050-043 Peso da Régua

Branch: R. D. Pedro de Castro, nº 76, 1º andar, sala 2
5000-669 Vila Real

E-mail: geral@dourocriativo.pt
Phone: (+351) 914 236 962

Douro Criativo reserves the right, at any time, to amend this privacy policy, notifying the User/Client at least 24 hours in advance. If you continue to use the service after that deadline, those changes will be deemed accepted. The present conditions aim to guarantee to the user a safe and efficient use of the service provided by Douro Criativo.

Any doubts and questions regarding this privacy policy can be sent to geral@dourocriativo.pt