Privacy and Data Policy

Privacy and Personal Data Policy - applicable to Users of the Czar Lisbon Hotel Website while reservation

Data Controller (the hotel): The Hotel Czar will provide the requested service to the user. Our identification and contact details are available on the website you used to make your reservation or to ask your questions. This data will also appear on the invoice we will send you.

Data Conformity Officer: Not applicable to the Data Controllers’ activities.

User: You, who filled the reservation form or any other documentation related to it.

Purpose: The purpose of processing the data provided on this form is to manage the reservations made by you, the user and/or to answer the questions/requests made.

Legal Basis:

- The need to execute our contract with you, the user, due to the need to take action at your request before concluding a contract.

ou

- Your consent, as a user, by ticking the box accepting the Terms and Conditions of which this privacy and personal data policy is a part.

Duration: We will store the data provided by you, the user, for the time necessary to manage the reservation, as well as the requested accommodation services. Once such management is completed, your data will be kept for six (6) months. If you accept receiving marketing and/or commercial information, your data will be stored until you revoke your consent.

Processor: We hired our partner, the Guestcentric Group (www.guestcentric.com) to carry out the reservation mechanism of our hotel. Guestcentric acts under our authority by means of a contract we entered with the Guestcentric Group to provide its services. We instruct the Guestcentric Group in writing on how such processing should be done.

Data of entities other than the users: When you, the user, provide us with personal data belonging to a subject other than yourself, you are responsible for such acts as well as for obtaining the respective consent from such subjects for said data provision.

Data Transfer: We should not transfer personal data to countries outside the EEA (European Economic Area).

Rights of Data Owners: Data owners may exercise their rights of access, rectification, cancellation and opposition by sending an e-mail or by post to the contacts on our reservation site and on our invoices.

Supervisory Authority: If a data owner deems his rights affected, he/she may also contact the competent supervisory authority of the Member State concerned.

Additional information: https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en