Data protection

The security of your data is important for us. Therefore, we only process your data within the framework of the applicable data protection laws and protect them according to the state of the art. In the following we would like to inform you about the processing of your personal data and your rights under data protection.

1. Responsible body and data protection officer

Epoca Magenta LDA
Monte Lourenco Marques
7800-660 Quintos, Salvada, Portugal
Telephone: +351 911832600
Email: info@casa-entradass.com

You can also reach our data protection officer at the above address, with the addition "data protection officer".

2. General information on data processing and your rights

2.1. Processed data and their origin

First and foremost, we process the personal data that we have received or collected from the data subjects as part of the reservation process or inquiries via our website. In addition, we also process personal data from publicly accessible sources (e.g. press, internet) insofar as this is necessary and permissible for marketing or customer service purposes.

The personal data we process in this context consists of personal details (name, address and other contact details, date and place of birth and nationality), health data relevant to the stay (e.g. severe disability or dietary requirements), identification data (e.g. data identity card). In addition, data resulting from your orders to us (e.g. payment order), data from the fulfillment of our contractual obligations (e.g. accommodation contract) and other data that are comparable to the categories mentioned can be processed.

2.2. Relevant legal bases for data processing

If the legal basis is not expressly mentioned in this data protection notice, the following legal basis applies: If we obtain your consent for data processing, Article 6 Paragraph 1 lit. a and Article 7 GDPR is the legal basis for data processing. If the data is processed to fulfill our services and carry out contractual measures as well as answering inquiries, Art. 6 (1) lit. b GDPR is the legal basis for data processing. If the data processing serves to fulfill a legal obligation, Article 6 Paragraph 1 lit. c GDPR is the legal basis. Examples of this are the fulfillment of the requirements of the Federal Registration Act, retention periods under commercial law or the fulfillment of tax (retention) obligations.

If the processing of personal data is necessary to protect a legitimate interest of our company or a third party, Article 6 Paragraph 1 lit. f GDPR serves as the legal basis for us. Legitimate interests are, in particular, ensuring IT security and IT operations, the assertion of legal claims and defense in legal disputes, advertising and marketing for the company's own services and products, measures for business management and the further development of services and products, prevention and detection of criminal offenses, video surveillance to protect domiciliary rights and to collect evidence in the event of burglaries and thefts (see also § 4 BDSG), measures for building and system security (e.g. access controls), measures to ensure domiciliary rights as well as market and opinion research by the foregoing, unless opted out of direct marketing.

2.3. Your rights

you have the right

to information according to Art. 15 GDPR,
for correction according to Art. 16 GDPR,
for deletion according to Art. 17 GDPR,
to restriction of processing in accordance with Art. 18 GDPR
to data transmission in accordance with Art. 20 GDPR.

The restrictions of §§ 34 and 35 BDSG apply to the rights to information and deletion. In addition, you have a right of appeal in accordance with Art. 77 GDPR with a data protection supervisory authority in accordance with Section 19 BDSG.

You can revoke your consent to the processing of personal data given to us at any time with effect for the future.

2.4. Duration of storage

Unless otherwise stated in this data protection notice, personal data will only be stored for as long as is necessary to fulfill the respective purpose or to fulfill our contractual or legal obligations. We are subject to various storage and documentation obligations. These result in particular from the Commercial Code, the Tax Code and the Money Laundering Act. The deadlines specified there can be up to 10 years.

2.5. Transmission of personal data

If we transfer personal data to other people or companies, this is only done on the basis of your consent, legal permission, due to a legal obligation (e.g. to public bodies and institutions such as supervisory authorities or tax authorities) or on the basis of an agreement on order processing in accordance with Art. 28 GDPR. Further categories of recipients can be found in this data protection notice.

2.6. Transfer of data to third countries

Personal data will only be processed outside of the European Economic Area if the EU Commission has confirmed an appropriate level of data protection in accordance with Art. 44 et seq. GDPR in the third country or other appropriate guarantees for the protection of personal data are in place.

2.7. Automatic decision making

Some of your data is processed automatically in order to evaluate certain personal aspects (profiling), for marketing and advertising purposes and to address you by means of personalized advertising by email or post.

In addition, we are B. due to legal and regulatory requirements to combat money laundering, terrorist financing and property-endangering crimes. In this context, data evaluations are also carried out.

3. Privacy Policy Newsletter

Some of our websites allow you to subscribe to a free newsletter. Written registration is also possible in some of our outlets. With the newsletter we inform you about the offers of uma casa em entradas. If you would like to receive the newsletter, we need a valid email address from you as well as information that allows us to verify that you are the owner of the email address provided or that the owner agrees to receive the newsletter. Further data is not collected. This data will only be used to send the newsletter and will not be passed on to third parties outside of uma casa entradas. When you register for the newsletter, we save the date of your registration and, if you registered via a website, also your IP address. This storage serves solely as proof in the event that a third party misuses an email address and registers to receive the newsletter without the knowledge of the authorized party. A statistical evaluation of the reading behavior only takes place to the extent that it can be determined whether the recipients have opened the newsletter and clicked on the links. This is a function that we only use to check user activities and make optimizations accordingly. For this purpose, the newsletter contains a so-called "web beacon", a file that is retrieved from our server when the newsletter is opened. You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. The revocation can be made via a link in the newsletter itself, on the website or by sending a message to the above contact options.

4. Changes

We reserve the right to change this data protection declaration for the future.

PART II - Website Usage

1. More information on data processing for users of our websites

1.1. cookies

Our websites use cookies. These are small data packages that are stored on the customer's end device. In addition to so-called session cookies, which are automatically deleted as soon as you log out or close the browser, so-called permanent cookies are also used, which recognize a returning user. These cookies expire automatically after a fixed period of time.

It is possible at any time to object to the setting of a cookie by making the appropriate settings in the Internet browser. You can delete cookies that have already been set at any time. If cookies are deactivated, it is possible that not all functions of our website can be used to their full extent. The legal basis for setting a cookie is the protection of the above-mentioned legitimate interests in accordance with Article 6 (1) (f) GDPR.

1.2. Collection of general data and creation of log data

When you visit our website, general data and information is automatically recorded and saved in a server log. The following data can be collected here:

Browser type and version information
Information about the user's operating system
Information about the user's service provider
The internet protocol address (IP address) of the user or calling system
Date and time of access
The page from which you came to us (referrer URL)
Websites accessed by the user's system through our website

The processing of this data serves to provide our websites, to ensure the functionality of our information technology systems and to optimize our website. This basically anonymously collected data and information is statistically evaluated by us with the aim of ensuring data protection and data security. The data in the log files is always stored separately from any other personal data that may be recorded and is generally not passed on to third parties. The data will be deleted automatically after the deadline has expired. The legal basis for the temporary processing of the data is the protection of the above-mentioned legitimate interests in accordance with Article 6 (1) (f) GDPR.

1.3. Contact form and email contact

On some of our websites you will find a contact form and an e-mail address that you can use to contact us electronically, e.g. B. for booking requests. If you use one of these channels and contact us, the personal data you have transmitted to us will be saved automatically. The storage and further processing of this data serves exclusively to process your contact request and to subsequently contact you. A transfer to third parties outside ofUma Casa em entradas does not take place as a matter of principle. The data you have transmitted will be deleted after the process has been completed, provided that there are no contractual or statutory retention periods to the contrary. In this case, the data to be retained will be deleted after the deadline has expired. The legal basis for processing the data is Art. 6 (1) (f) GDPR.

1.4. Use of Google Analytics

Some of our websites use the Google Analytics analysis tool, a web analysis service provided by Google Inc., 1600 Amphitheater Pkw, Mountain View, CA 94043-1351, USA. Web analysis includes the collection, collection and evaluation of information about the behavior of visitors to websites. For example, from which page you came to us, which sub-pages you accessed and how long a sub-page was viewed. Cookies are used for this. Cookies are text files that are filed and saved on a computer system via an Internet browser. The information collected by the cookie is transmitted to a Google Inc. server in the USA. In addition to information on website usage, this also includes your IP address. However, we use Google Analytics with the addition "AnonymizeIP". This means that your IP address will be shortened and anonymized by Google if you access our site within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The transmitted IP address will also not be combined with other data from Google. The purpose of data processing is the evaluation of visitor flows and website use by visitors. On our behalf, Google creates online reports for us. We use the information obtained from this to optimize our website. The legal basis for data processing is Section 15 (3) TMG and Article 6 (1) (f) GDPR. The legitimate interests are the purposes mentioned above. The applicable data protection conditions and terms of use of Google Analytics can be found at https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.

You can prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser and thus permanently object to the setting of cookies. In addition, the cookies already set by Google can be deleted at any time via an Internet browser or other software programs.

You also have the option of objecting to and preventing the collection of data generated by the cookie relating to the use of this website and the processing of this data by Google. To do this, you must download and install a browser add-on. You can download it here: https://tools.google.com/dlpage/gaoptout?hl=de. The add-on prevents your data from being collected and processed in the future.

1.5. Use of Google Marketing Services

Some of our websites use marketing and remarketing services from Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. The Google marketing services (including Google Adwords, Google Conversion Tracking, Google Optimize and Google Double Click) allow us to display advertisements for and on our website in a more targeted manner in order to present users with advertisements that potentially correspond to their interests.

For this purpose, when our and other websites that use Google marketing services are called up, Google executes a code and so-called (re)marketing tags are integrated into the website. With their help, a cookie is set on the user device (comparable technologies can also be used instead of cookies), whereby the cookies are set by different domains (including google.com, doubleclick.net, etc.). This file notes which websites the visited by the user, what content he is interested in, what offers he clicked on. In addition, technical information on the browser and operating system, referring websites, visit time and other information on the use of the online offer are tracked. The IP address of the user is recorded, but shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is transmitted in full to a Google server in the USA and shortened there. The IP address is not merged with the user's data within other Google offers. The above information can also be linked by Google to such information from other sources. If the user then visits other websites, the ads tailored to his interests can be displayed to him. User data is processed pseudonymously as part of Google Marketing Services, i.e. without storing and processing the name or email address of the user. This does not apply if a user has expressly allowed Google to process the data without pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google's servers in the USA.

The Google marketing services we use include the online advertising program Google AdWords. Every AdWords customer receives a so-called conversion cookie. The information obtained with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

The legal basis for data processing is Section 15 (3) TMG and Article 6 (1) (f) GDPR. The legitimate interests are the purposes mentioned above. The applicable data protection conditions and terms of use of Google Marketing Services can be found at https://policies.google.com/technologies/ads?hl=de.

If you wish to object to interest-based advertising by Google Marketing Services, you can use the options provided by Google at http://www.google.com/ads/preferences.

2. Integration of third-party services and content (social plugins, etc.)

Some of our websites use third-party services and content. In particular, so-called “social plugins”, videos or fonts. This is based on our legitimate interests (Art. 6 Para. 1 lit. f GDPR) in the provision and distribution of our content, the analysis, optimization and operation of our website. The services and content of the following third-party providers can therefore be integrated on our websites:

Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (if a data subject lives outside of the USA or Canada, the person responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour , Dublin 2, Ireland)
Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA
YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
XING AG, Gänsemarkt 43 – 20354 Hamburg – Germany
Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA
Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA (for privacy issues outside the USA: LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland)
Pinterest Inc., 808 Brannan St, San Francisco, CA 94103, USA

If a website uses social plugins, we use the "Shariff" solution to protect your data. Social plugins are only integrated as graphics on our website. This means that there is no direct link to the website of the plugin provider. If you click on one of the graphics, you will be forwarded directly to the respective provider. Only then will your data be transmitted to the provider. If you do not click on the graphic, no data will be exchanged with the providers of the integrated social plugins. Further information on the use of your data can be found in the respective terms of use and data protection notices of the respective providers. Information and notes on the Shariff solution we use can be found here: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

Further data protection notices and information on the social plugins we use and third-party services:

2.1. Privacy Notice for Facebook Components

Some of our websites use social plugins and components from the social network Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a person concerned lives outside the USA or Canada, the person responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you use Facebook plugins, your web browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and in this respect we have no knowledge of the data collected by Facebook. However, when you call up the plugin, Facebook can find out that you have visited our website with your IP address. Especially if you are logged into Facebook with your Facebook profile. By clicking on the Facebook "Like" button, you also link content from our website to your Facebook profile, which allows Facebook to assign your visit to our website to you. The same applies to other Facebook plugins that we use.

An overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. You can find Facebook's privacy policy at https://de-de.facebook.com/about/privacy/. This gives you more information about the collection, processing and use of personal data by Facebook and what setting options Facebook offers to protect your personal data.

2.2. Privacy policy for the Google+1 button

Some of our websites use the google+1 button of the social network Google+. This component is provided and operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").

If you use the google+1 button, your web browser establishes a direct connection to the Google servers. The content of the plugin is sent directly to your browser by Google, which integrates it into the website. We therefore have no influence on the scope of the data that Google collects with the help of this plugin and in this respect we have no knowledge of the data collected by Google. However, by calling up the plugin, Google can find out that you have visited our website with your IP address. Especially if you are logged into Google+ with your Google+ profile. By clicking on the Google+1 button, you also link the content of our website to your Google+ profile, which Google can use to assign your visit to our website to you. More detailed information on the Google+ button and the use of your data by Google is available at http://www.google.com/intl/de/+/policy/+1button.html.

2.3. Privacy Policy for YouTube Videos

Videos from the Internet video portal YouTube are embedded on some of our websites. These videos are provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (YouTube). YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

When you access a website that contains a YouTube component or when you play an embedded video, your web browser establishes a direct connection to the YouTube servers. The content is transmitted or downloaded and played directly from YouTube to your browser. We have no influence on the amount of data that YouTube collects and in this respect we have no knowledge of the data collected by YouTube. However, by calling up the video, YouTube can find out that you have visited our website with your IP address. Especially if you are logged into YouTube with your YouTube profile. More detailed information on data protection and the use of your data by YouTube is available at https://www.google.de/intl/de/policies/privacy/.

2.4. Privacy Notice for Instagram Components

Some of our websites use plugins from the social network Instagram, e.g. the Insta button. These components are provided and operated by Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA (Instagram).

If you use Instagram plugins, such as the Insta button, your web browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly from Instagram to your browser, which integrates it into the website. We therefore have no influence on the scope of the data that Instagram collects with the help of this plugin and in this respect we have no knowledge of the data collected by Instagram. However, when you call up the plugin, Instagram can find out that you have visited our website with your IP address. Especially if you are logged into Instagram with your Instagram profile. By clicking on the Insta button, you also link the content of our website to your Instagram profile, which means that Instagram can assign your visit to our website to you. More detailed information on the Insta button and other plugins from the provider and the use of your data by Instagram is available at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy available.

2.5. Data protection information for LinkedIn plugins

Some of our websites use the LinkedIn plugin of the social network LinkedIn. This component is provided and operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA (LinkedIn). LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland is responsible for data protection issues outside the USA.

If you use the LinkedIn button, your web browser establishes a direct connection to the LinkedIn servers. The content of the plugin is transmitted directly to your browser by LinkedIn and integrated into the website by it. We therefore have no influence on the scope of the data that LinkedIn collects with the help of this plugin and in this respect we have no knowledge of the data collected by LinkedIn. However, by calling up the plugin, LinkedIn can find out that you have visited our website with your IP address. Especially if you are logged in to LinkedIn with your LinkedIn profile. By clicking on the LinkedIn button, you also link content from our website to your LinkedIn profile, which means that LinkedIn can assign your visit to our website to you. More detailed information on the LinkedIn button and other plugins from the provider and the use of your data by LinkedIn is available at https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/cookie- policy available.

2.6. Data protection information for Google Maps and Google Fonts

Some of our websites use the “Google Maps” map service and fonts from the “Google Webfonts” service from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We use the Google Maps API to visually display and integrate geographic information on individual websites. When using Google Maps, Google also processes data about the use of the map functions. In addition, we use font libraries from Google Webfonts. Font libraries are transferred to the cache of your browser. If your browser settings do not allow this or your browser does not support the fonts, font content will be displayed in a standard font. A connection to the service provider is automatically established in order to transfer the font libraries to your cache.

You can find more information about data processing by Google here: https://www.google.com/policies/privacy/.

2.7. Privacy notices for Pinterest components

Some of our websites use plugins and components of the social network Pinterest. These components are provided and operated by Pinterest Inc., 808 Brannan St, San Francisco, CA 94103, USA.

If you use the Pin it button or Pinterest components, your web browser establishes a direct connection to the Pinterest servers. The content of the plugin or component is transmitted directly to your browser by Pinterest and integrated into the website by it. We therefore have no influence on the scope of the data that Pinterest collects with the help of this plugin and in this respect we have no knowledge of the data collected by Pinterest. However, by calling up the plugin, Pinterest can find out that you have visited our website with your IP address. Especially if you are logged in to Pinterest with your Pinterest profile. By clicking on the Pin it button, you also link content from our website to your Pinterest profile or transmit data and information to Pinterest or other Pinterest users, which means that Pinterest and other Pinterest users can assign your visit to our website to you . More detailed information on the Pin it button and other plugins from the provider and the use of your data by Pinterest is available at: http://pinterest.com/about/privacy/ available.