Within the scope of registration and access to the Website, Cascais Tourism Association, as the party responsible for data processing, may request the User to provide their personal data, i.e. information provided by the User enabling Cascais Tourism Association to identify and/or contact them ("Personal Data").

​

As a rule, Personal Data is requested when the User registers and accesses the Website and consists of information relating to first and last name, email, date of birth, country and city, however, in the case of registration via Facebook and Google+, the same data plus the user name is collected.

​

The Personal Data collected will be processed for the purposes of registration and access to the Website. The Personal Data will be kept for the period of use of the Website, after which it will be deleted. Within the scope of processing User Data, Associação Turismo de Cascais uses or may use third parties, subcontracted by it, to process the User Data on behalf of Associação Turismo de Cascais, and in accordance with the instructions given by the latter, in strict compliance with the law and this Privacy Policy.

​

These subcontracted entities may not transmit the User's details to other entities without prior written permission from Associação Turismo de Cascais, and they are also prevented from contracting other entities without prior authorisation from Associação Turismo de Cascais.

​

Associação Turismo de Cascais undertakes to only subcontract entities which provide sufficient guarantees of the execution of adequate technical and organizational measures, in order to ensure the defence of the User's rights. All entities subcontracted by Associação Turismo de Cascais are bound to the latter by a written contract which regulates, inter alia, the object and duration of the processing, the nature and purpose of the processing, the type of personal data, the categories of data subjects and the rights and obligations of the parties.

​

In terms of general principles regarding the processing of personal data, the Cascais Tourism Association undertakes to ensure that the User Data it processes is:

• Object of lawful, fair and transparent processing in relation to the User;

• Collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes

• Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;

• Accurate and up-to-date where necessary, with all appropriate steps being taken to ensure that inaccurate data, having regard to the purposes for which they are processed, are erased or rectified without delay;

• Kept in a form which permits identification of the User only for the period necessary for the purposes for which the data are processed;

​

​

Processed in a manner that ensures their security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, with appropriate technical or organisational measures being taken.

Data processing carried out by Cascais Tourism Association is lawful when the User has given their explicit consent to the processing of their Personal Data for one or more specific purposes, when the processing is necessary for the execution of a contract to which the User is a party, or for pre-contractual procedures at the request of the User, for the fulfilment of a legal obligation to which Cascais Tourism Association is subject and for the purposes of the legitimate interests pursued by Cascais Tourism Association or third parties.

​

Associação Turismo de Cascais undertakes to ensure that the User's data is only processed under the aforementioned conditions and in compliance with the aforementioned principles.

When the processing of User Data is carried out by Associação Turismo de Cascais based on the User's consent, the User has the right to withdraw consent at any time. The withdrawal of consent, however, does not compromise the lawfulness of the processing carried out by Associação Turismo de Cascais based on the consent previously given by the User.

​

To ensure the security of the User's data and maximum confidentiality, we treat the information you have provided us with absolute confidentiality, in accordance with our internal security and confidentiality policies and procedures, which are periodically updated as necessary, as well as in accordance with the terms and conditions provided by law.

​

Depending on the nature, scope, context and purposes of data processing, as well as the risks arising from the processing for the rights and freedoms of the User, the Cascais Tourism Association undertakes to apply, both when defining the means of processing and when processing itself, the necessary and appropriate technical and organisational measures to protect User Data and to comply with legal requirements. It further undertakes to ensure that, by default, only the data that is necessary for each specific purpose of the processing shall be processed and that such data shall not be made available without human intervention to an indefinite number of persons.

​

In certain types of processing, personal data collected by Associação Turismo de Cascais may be made available to third parties, which may involve its transfer outside the European Union. In such a case, Associação Turismo de Cascais undertakes to ensure that the transfer complies with applicable legal provisions, particularly with regard to determining the suitability of such country with regard to data protection and the requirements applicable to such transfers.

The right of access, right of rectification, right of erasure, right of limitation, right of portability and right of opposition may be exercised by the User by contacting the Group's Data Protection Officer via email at rgpd@visitcascais.com or at the address Avenida Clotilde - Edifício do Centro de Congressos do Estoril, 3º C, 2765-211 Estoril, Portugal.

​

Associação Turismo de Cascais will respond in writing (including by electronic means) to the User's request within a maximum period of one month from receipt of the request, except in cases of particular complexity, where this period may be extended to two months.

If requests made by the User are manifestly unfounded or excessive, namely due to their repetitive nature, Cascais Tourism Association reserves the right to charge administrative costs or refuse to comply with the request, without prejudice to the possibility of filing a complaint with the competent control authority.

The Website may contain links to third party websites or portals. Cascais Tourism Association is not responsible for the privacy practices of such websites or portals. We therefore recommend that you read the respective privacy statements. Cascais Tourism Association cannot be held responsible or liable for the content and activities of such websites or portals.

​

In the future, we may choose to modify or update this policy, either due to changes in legislation or in order to cover new internet developments. We therefore reserve the right to make any such changes and request that you visit our Website regularly, as these changes may affect you as a User.

The Privacy Policy, as well as the collection, processing or transmission of User Data, are governed by the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and by the laws and regulations applicable in Portugal.

Any disputes arising from the validity, interpretation or execution of the Privacy Policy, or that are related to the collection, processing or transmission of User Data, shall be submitted exclusively to the jurisdiction of the courts of the district of Cascais, without prejudice to the applicable mandatory legal rules.