Privacy policy
IDENTIFICATION OF THE DATA CONTROLLER
Name: Esferagest, Gestão e Exploração Hoteleira Lda.
Email: cidalia.castro@esferagest.com
DUTY TO INFORM
The protection of personal data of natural persons is protected in Portugal by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and Law no. 58/2019 of 8 August, which ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data. “Personal data” is considered to be any information of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person, meaning that protection does not cover data of legal entities. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity (for example, their name associated with their telephone number or email address). By reading this Privacy Policy, the User is informed about the processing of their personal data carried out by Esferagest, Gestão e Exploração Hoteleira Lda. through the website oportoriverside.com.
PURPOSES OF PERSONAL DATA PROCESSING
The personal data we collect and process through the Website identified above will be used solely for the following purposes:
- Manage the contracting of services carried out through the Website, such as contact requests or reservation management;
- Periodically send communications with news related to the activity of Esferagest, Gestão e Exploração Hoteleira Lda. and the sector to which it devotes its activity;
- Anonymous and aggregated analysis of the use of services, to identify habits and trends of Users, in order to improve the services offered and satisfy the specific needs of Users;
- In the case of contracting, the data collected on this Website, together with other data obtained within the scope of the contractual relationship, will be used for human resources management, to ensure compliance with legal obligations, and to provide employees with the necessary means to carry out their professional activity;
- Compliance with national and international legal provisions, or execution of an order from competent judicial authorities;
- Compliance with legal obligations derived from applicable data protection legislation, as well as for exercising the rights of data subjects, in particular the defence of a right in judicial proceedings.
Esferagest, Gestão e Exploração Hoteleira Lda. guarantees the confidentiality of all data provided. Notwithstanding that Esferagest, Gestão e Exploração Hoteleira Lda. collects and otherwise processes data securely and prevents its loss or manipulation, using the most appropriate techniques for this purpose, it should be kept in mind that data collection over open networks does not allow personal data to circulate in absolute security conditions, with the risk of it being accessed and used by unauthorised third parties. Failure to answer the data marked as mandatory may make it impossible to respond to the data subject’s request.
LAWFUL BASIS FOR PERSONAL DATA PROCESSING
Esferagest, Gestão e Exploração Hoteleira Lda. processes Users’ data:
- when they express their free, specific, informed, and unambiguous consent to the processing of their personal data for certain purposes; and/or
- when necessary for the performance of a contract to which the data User is a party, or for pre-contractual steps at the request of the User; and/or
- for compliance with legal obligations to which Esferagest, Gestão e Exploração Hoteleira Lda. is subject; and/or
- for the purposes of the legitimate interests pursued by Esferagest, Gestão e Exploração Hoteleira Lda. or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring personal data protection.
The User guarantees that the information provided is true, accurate, complete, and up to date, and is responsible for any damage or loss, direct or indirect, that may be caused as a result of breaching this obligation. In the event that the data provided belongs to a third party, the User guarantees that they have informed said third party of the aspects contained in this document and obtained their authorisation to provide their data to Esferagest, Gestão e Exploração Hoteleira Lda. for the indicated purposes.
RETENTION PERIOD
Esferagest, Gestão e Exploração Hoteleira Lda. only retains and processes your personal data for the period necessary or mandatory for the fulfillment of the purposes described above, applying information retention criteria suited to each processing operation and aligned with applicable legal and regulatory obligations. Esferagest, Gestão e Exploração Hoteleira Lda. keeps personal data in its systems in such a way that it is possible to identify data subjects in accordance with the following criteria:
- for a period of time no longer than necessary for the pursuit of the purposes for which they were collected, provided that legal or contractual obligations do not state otherwise;
- to comply with specific legal or contractual obligations;
- where applicable and legitimate, until any request for objection or erasure by the Data Subject.
DISCLOSURE OF DATA
In addition to communications made in compliance with legal obligations, the Data Subject’s personal data may be known, besides Esferagest, Gestão e Exploração Hoteleira Lda., by:
- external service providers of Esferagest, Gestão e Exploração Hoteleira Lda., in their capacity as data processors;
- national and international companies belonging to the same group as Esferagest, Gestão e Exploração Hoteleira Lda.;
- authorities in general, administrations, public entities and bodies, both national and international;
- Esferagest, Gestão e Exploração Hoteleira Lda.
INTERNATIONAL DATA TRANSFERS
The collected personal data will be processed within the European Economic Area, and no international data transfers to third countries or international organisations take place. In the event of any processing of personal data outside the European Economic Area, this will only occur by adopting appropriate safeguards and the required level of protection in accordance with legislation on personal data protection.
INFORMATION SECURITY
Esferagest, Gestão e Exploração Hoteleira Lda. has implemented appropriate technical and organisational security measures to guarantee the security of personal data provided to it by the User, aiming to prevent its alteration, loss, processing, and/or unauthorised access, taking into account the current state of technology, the nature of the stored data, and the risks to which they are exposed. Personal data is processed with the legally required level of protection to ensure its security and prevent its alteration, loss, processing, or unauthorised access, taking into account state of the art technology, with the User being aware and accepting that Internet security measures are not impenetrable. Should Esferagest, Gestão e Exploração Hoteleira Lda. subcontract other entities for the provision of services involving the transfer of personal data, these entities will be obliged to adopt the necessary technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access, or any other type of unlawful processing.
EXERCISING RIGHTS
In accordance with the provisions of the GDPR, the User may exercise their rights of access, rectification, and, where applicable, restriction of processing, erasure, portability, objection, and withdrawal of consent, under the terms of the GDPR, by requesting it in writing through any of the following means, specifying the right or rights they wish to exercise:
- Email: cidalia.castro@esferagest.com;
- Postal address: Rua Teixeira de Pascoais n. 131, sala 6-C 2º andar Poente
SUPERVISORY AUTHORITY
The User also has the right to lodge a complaint with the National Data Protection Commission (Comissão Nacional de Proteção de Dados – CNPD) regarding matters related to the exercise of their rights and the protection of their personal data, if they consider that their rights under data protection laws have been violated.
THIRD-PARTY PAGES
The Website may contain advertising, links, or other content that connects or redirects to pages and services of providers, advertisers, affiliates, sponsors of Esferagest, Gestão e Exploração Hoteleira Lda., and other third parties. However, Esferagest, Gestão e Exploração Hoteleira Lda. does not control the content or links that appear on those pages and is not responsible for the practices used by those pages or websites. Esferagest, Gestão e Exploração Hoteleira Lda. advises Users to check the privacy policy of such pages, as well as their terms and conditions. Browsing or interacting on any other website, including those that have an external link to the Website, is subject to that website’s terms and conditions, and Esferagest, Gestão e Exploração Hoteleira Lda. shall under no circumstances be held responsible for such access and use.
DATA PROCESSING CARRIED OUT BY THE COMPANY THAT DEVELOPS AND MANAGES THE WEBSITE AS AN INDEPENDENT DATA CONTROLLER
Without prejudice to the processing of data collected through the Website being the responsibility of Esferagest, Gestão e Exploração Hoteleira Lda., as identified above in Section 1 of this Privacy Policy, we inform the User that MIRAIFUTURE PORTUGAL, LDA., with its registered office at Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil and NIPC (VAT/Company No.) 515 139 092, may act, in specific situations, as a Data Controller, independently determining the purposes and means of processing. This occurs, in particular, regarding data processed to ensure the operation, maintenance, and security of the booking engine. In such situations, User data will be processed in accordance with the information below:
- Purpose: ensure the operation, security, and continuous improvement of the Website;
- Lawful basis: legitimate interest;
- Retention period: for the period strictly necessary to pursue these purposes.
Mirai ensures that, even in these situations, it only processes strictly necessary data, adopting appropriate technical and organisational measures to ensure its security and confidentiality. The User may exercise the rights mentioned in Section 9 by requesting it in writing through any of the following means, specifying the right or rights they wish to exercise:
- Email: portugal@mirai.com;
- Postal address: Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil
You may also exercise the rights set out in Section 10.
CHANGES TO THE PRIVACY POLICY
In order to ensure the adequacy of the document, Esferagest, Gestão e Exploração Hoteleira Lda. reserves the right to review this Policy at any time it deems appropriate, and Users are recommended to check this privacy policy regularly and/or every time they access the Website. Updated on 25/06/2026.