Privacy Policy

IDENTIFICATION OF THE DATA CONTROLLER



Name: Soito da Lapa, Turismo de Aldeia, Lda.


Registered office: Rua Eira do Costa, 10


Tax Identification Number: 506715507


Telephone: +351 911 851 895 (call to the national mobile network)


E-mail: admin@casasdalapa.com



INFORMATION DUTY



The protection of personal data of natural persons is governed in Portugal by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and by Law No. 58/2019 of 8 August, which ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data.



“Personal data” means any information, of any nature and regardless of the medium in which it is contained, including sound and image, relating to an identified or identifiable natural person. Therefore, the protection does not cover data relating to legal entities.



A person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identification number or to one or more specific elements of their physical, physiological, psychological, economic, cultural or social identity (for example, their name associated with their telephone number or e-mail address).



By reading this Privacy Policy, the User is informed about the processing of their personal data carried out by Soito da Lapa, Turismo de Aldeia, Lda. through the website www.casasdalapa.pt.



PURPOSES OF THE PROCESSING OF PERSONAL DATA



The personal data we collect and process through the above-mentioned Website will only be used for the following purposes:



  1. Manage the contracting of services carried out through the Website, such as contact requests or reservation management;
  2. Periodically send communications with news related to the activities of Soito da Lapa, Turismo de Aldeia, Lda. and the sector in which it operates;
  3. Anonymous and aggregated analysis of the use of the services, to identify Users’ habits and trends, in order to improve the services offered and meet the specific needs of Users;
  4. In the event of a contract being entered into, the data collected through this Website, together with any other data obtained within the scope of the contractual relationship, will be used for human resources management, to ensure compliance with legal obligations and to provide employees with the means necessary to carry out their professional activities;
  5. Compliance with national and international legal provisions, or execution of an order issued by the competent judicial authorities;
  6. Compliance with legal obligations arising from applicable data protection legislation, as well as the exercise of data subjects’ rights, in particular the defence of a right in legal proceedings.


Soito da Lapa, Turismo de Aldeia, Lda. guarantees the confidentiality of all data provided. Notwithstanding the fact that Soito da Lapa, Turismo de Aldeia, Lda. collects and otherwise processes data securely and in a manner that prevents its loss or manipulation, using the most appropriate techniques for this purpose, it is important to bear in mind that the collection of data over open networks does not allow personal data to circulate under conditions of absolute security, and there is a risk that such data may be accessed and used by unauthorised third parties.



Failure to provide data marked as mandatory may result in the inability to respond to the data subject’s request.



LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA



Soito da Lapa, Turismo de Aldeia, Lda. processes Users’ data:



  1. when they give their free, specific, informed and unambiguous consent to the processing of their personal data for specific purposes; and/or
  2. when it is necessary for the performance of a contract to which the User is a party, or for pre-contractual measures taken at the User’s request; and/or
  3. to comply with legal obligations to which Soito da Lapa, Turismo de Aldeia, Lda. is subject; and/or
  4. for the purposes of the legitimate interests pursued by Soito da Lapa, Turismo de Aldeia, Lda. or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.


The User guarantees that the information provided is true, accurate, complete and up to date, and is responsible for any damage or loss, whether direct or indirect, that may be caused as a result of breaching this obligation.



Where the data provided belongs to a third party, the User guarantees that they have informed the third party of the matters contained in this document and obtained their authorisation to provide their data to Soito da Lapa, Turismo de Aldeia, Lda. for the purposes indicated.



RETENTION PERIOD



Soito da Lapa, Turismo de Aldeia, Lda. only retains and processes your personal data for the period that is necessary or mandatory to fulfil the purposes described above, applying appropriate data retention criteria to each processing activity and in accordance with the applicable legal and regulatory obligations.



Soito da Lapa, Turismo de Aldeia, Lda. retains personal data in its systems in such a way that it is possible to identify the data subjects according to the following criteria:



  • for a period of time no longer than necessary to fulfil the purposes for which the data was collected, unless otherwise provided for by legal or contractual obligations;
  • to comply with specific legal or contractual obligations;
  • where applicable and lawful, until the Data Subject requests objection to or erasure of the data.


DATA DISCLOSURE



In addition to disclosures made in compliance with legal obligations, the personal data of the Data Subject may be accessed, in addition to Soito da Lapa, Turismo de Aldeia, Lda., by:



  • external service providers of Soito da Lapa, Turismo de Aldeia, Lda., acting as data processors;
  • national and international companies belonging to the same group as Soito da Lapa, Turismo de Aldeia, Lda.;
  • authorities in general, administrations, public entities and bodies, both national and international;
  • Soito da Lapa, Turismo de Aldeia, Lda.


INTERNATIONAL DATA TRANSFERS



The personal data collected will be processed within the European Economic Area, with no international transfers of data to third countries or international organisations.



In the event of any processing of personal data outside the European Economic Area, this will only take place following the adoption of appropriate safeguards and the required level of protection, in accordance with personal data protection legislation.



INFORMATION SECURITY



Soito da Lapa, Turismo de Aldeia, Lda. has implemented appropriate technical and organisational security measures to ensure the security of the personal data provided by the User, with the aim of preventing its alteration, loss, processing and/or unauthorised access, taking into account the current state of technology, the nature of the data stored and the risks to which it is exposed.



Personal data is processed with the level of protection legally required to ensure its security and prevent its alteration, loss, processing or unauthorised access, taking into account the state of technology, with the User being aware and accepting that security measures on the Internet are not impenetrable.



If Soito da Lapa, Turismo de Aldeia, Lda. outsources to other entities the provision of services involving the disclosure of personal data, such entities will be required to adopt the necessary technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access or any other type of unlawful processing.



EXERCISE OF RIGHTS



In accordance with the provisions of the GDPR, the User may exercise their rights of access, rectification and, where applicable, restriction of processing, erasure, data portability, objection and withdrawal of consent, under the terms of the GDPR, by submitting a written request through any of the following means, specifying the right or rights they wish to exercise:





SUPERVISORY AUTHORITY



The User also has the right to lodge a complaint with the Comissão Nacional de Proteção de Dados in relation to matters concerning the exercise of their rights and the protection of their personal data, if they consider that their data protection rights have been violated.



THIRD-PARTY PAGES



The Website may contain advertising, links or other content that links or redirects to pages and services of suppliers, advertisers, affiliates, sponsors of Soito da Lapa, Turismo de Aldeia, Lda. and other third parties.



However, Soito da Lapa, Turismo de Aldeia, Lda. does not control the content or links that appear on those pages and is not responsible for the practices used by those pages or websites. Soito da Lapa, Turismo de Aldeia, Lda. recommends that Users read the privacy policy of such pages, as well as their terms and conditions.



Any search or interaction on any other website, including those that have an external link to the Website, is subject to the terms and conditions of that website, and under no circumstances is Soito da Lapa, Turismo de Aldeia, Lda. responsible for such access and use.



DATA PROCESSING CARRIED OUT BY THE COMPANY THAT DEVELOPS AND MANAGES THE WEBSITE AS AN INDEPENDENT DATA CONTROLLER



Without prejudice to the processing of data collected through the Website being the responsibility of Soito da Lapa, Turismo de Aldeia, Lda., as identified above in Section 1 of this Privacy Policy, we inform the User that MIRAIFUTURE PORTUGAL, LDA., with registered office at Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil and tax identification number 515 139 092, may, in specific situations, act as an independent Data Controller, independently determining the purposes and means of processing.



This occurs, in particular, with regard to data processed to ensure the operation, maintenance and security of the booking engine.



In such situations, the User’s data will be processed in accordance with the information below:



  • Purpose: to ensure the operation, security and continuous improvement of the Website;
  • Legal basis: legitimate interest;
  • Retention period: for the period strictly necessary to pursue these purposes.


Mirai ensures that, even in these situations, it only processes the data that is strictly necessary, adopting appropriate technical and organisational measures to ensure its security and confidentiality.



The User may exercise the rights referred to in Section 9 by submitting a written request through any of the following means, specifying the right or rights they wish to exercise:



  • E-mail: portugal@mirai.com;
  • Postal address: Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil


The User may also exercise the rights provided for in Section 10.



CHANGES TO THE PRIVACY POLICY



In order to ensure that this document remains appropriate, Soito da Lapa, Turismo de Aldeia, Lda. reserves the right to review this Policy at any time it deems appropriate. Users are therefore advised to check this privacy policy regularly and/or each time they access the Website.



Updated on 09/09/2026.