IN COMPLIANCE WITH THE GENERAL DATA PROTECTION REGULATION (EU REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016), PLEASE BE INFORMED OF OUR PRIVACY POLICY, WHICH INCLUDES THE FOLLOWING:
The entity responsible for processing your personal data is CNS Saúde, Lda., operating under the name “CNS Santa Cruz – Movement & Nature House”, with company registration number 508786134 and registered office at Bairro de Santo António, no. 47, 2560-280 Torres Vedras, Portugal.
For any matters related to your personal data, please contact us:
Tel: +351 261 095 900
Email: [email protected]
Address: Estrada da Praia Azul, no. 14, 2560-396 Silveira, Portugal.
We collect and process the following types of personal data:
Personal information: Name, gender, nationality, date of birth, and information about family members or companions (including their date of birth and nationality).
Preference information: Related to the services you book.
Contact information: Address, telephone number, email, and similar.
Payment information: Credit card details, billing address, and other relevant payment data.
Loyalty and referral programs: Marketing and analytical data.
Accommodation details: Arrival and departure dates, room location and type, bed preferences, and special requests.
Feedback: Records of your contact with us via phone or online.
We may also collect data on how you use our website via cookies.
The purposes for processing personal data include:
Fulfilling service obligations: Managing bookings, stays, and payment processing; responding to service requests including food and beverage services, bar usage, and video surveillance based on contractual obligations.
Service improvement and personalization: Evaluating services, enhancing operational efficiency, and tailoring digital experiences and marketing campaigns (with your consent).
Security: Protection of persons and property through surveillance.
Marketing communications: Sending newsletters, promotional content, and event invitations.
Event management: Coordinating event logistics and third-party communications.
Activity management: Booking and monitoring activities and services provided.
Your personal data may be shared with third parties subcontracted to provide services on behalf of Santa Cruz Movement & Nature House. These entities will only receive the data strictly necessary to perform their tasks and will be bound by agreements ensuring compliance with data protection obligations.
Data is stored both in paper format and electronically. We follow appropriate technical and organizational measures to ensure data security and prevent unauthorized access or misuse.
Under applicable legislation, you have the following rights:
a) Right to Information (Art. 13 GDPR)
b) Right of Access (Art. 15 GDPR)
c) Right to Rectification (Art. 16 GDPR)
d) Right to Erasure or “Right to be Forgotten” (Art. 17 GDPR)
e) Right to Object, including to direct marketing (Art. 21 GDPR)
f) Right to Data Portability (Art. 20 GDPR)
g) Right to Restrict Processing (Art. 18 GDPR)
h) Right to Notification (Art. 19 GDPR)
i) Right not to be subject to automated decision-making, including profiling (Art. 22 GDPR)
j) Right to be informed in the event of a personal data breach (Art. 34 GDPR)
To exercise any of these rights, please contact us via the details listed above.
We retain your data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. The retention period may depend on:
Operational needs while providing services.
Legal limitation periods or compliance with tax and regulatory obligations.
Other legal or regulatory guidelines.
Once the retention period has expired, your personal data will be securely deleted.
You are responsible for ensuring the accuracy of the data you provide and for notifying us of any updates. Please be aware that any information you share on public platforms (e.g., Facebook, Instagram) may be viewed and used by third parties.
Cookies are small data files stored on users’ devices to collect activity and equipment information when visiting a website.
Types of cookies used on this website include:
Technical cookies
Enable basic functions such as navigation and data transfer.
Personalization cookies
Store preferences like language or regional settings.
Analytical cookies
Collect data on website usage for statistical analysis.
Google Analytics
An anonymized tracking tool to understand how users interact with the website. It does not store personal information.
To manage contractual relationships, we may need to collect personal data including:
Personal, preference, contact, and payment information.
Loyalty and referral program data.
Accommodation details and guest communications.
We require your explicit consent to collect and process this data. Consent must be provided by each guest staying at the property.
To tailor our offers and inform you about promotions via various channels (email, SMS, phone, apps, or in person), we require your explicit consent. If you do not provide it, we will not be able to send you marketing communications. These activities may be carried out directly by us or by subcontractors under strict confidentiality agreements.
