Vila Joya – Vila Joya II Investments Sa, processes all information related to the personal data of its customers with the utmost confidentiality and security.
Your data is processed in compliance with the General Data Protection Regulation (Regulation EU 2016/679 of the European Parliament and of the Council), applicable since 25 May, 2018, to all Member States of the European Union, which establishes the rules regarding the collection, processing and protection of personal data, of natural persons, and in compliance with other legislation applicable to this matter, in order to ensure greater protection for personal data subjects.
We need to collect and process some of your personal data, which is a necessary requirement for the provision of our hotel and accommodation services, processing your reservation, namely to be able to identify you as a Vila Joya guest, for vouchers, travel bookings, activity bookings, spa treatments. We only collect and process the personal data that is strictly necessary for the execution of the contract for the provision of hotel services, or pre-contractual procedures at the request of the data subject.
Subject to your consent, which may be withdrawn at any time, without prejudice to the validity of the processing carried out on the basis of the previously provided consent, we may send you Newsletters to provide you with information, as well as keep you up-to-date with the latest news about our services, products, campaigns and promotions among others.
Vila Joya – Vila Joya II Investments Sa, with single registration number at the Silves Commercial Registry Office – Algarve and Legal Person 510630731, the share capital of EUR 50.000, head office at Edifício Alto dos Navegantes, Bloco A, Loja A, civil parish of Armação de Pêra, email firstname.lastname@example.org and telephone number +351 289 591 795, (“VILA JOYA”) is the Data Controller for your personal data.
Purpose of personal data collection and processing
The purpose of collecting your personal data is your registration in the Vila Joya database, for which we require you to provide us with some of your personal data, for the execution of the hotel service contract, pre-contractual procedures at the request of the data subject, and compliance with legal obligations, for reservations by guests, contact management, billing, and sending emails of an operational nature, e.g., if we have to contact you to inform you of any changes to your reservation.
Subject to your consent, which may be withdrawn at any time, without prejudice to the validity of the processing carried out on the basis of the previously provided consent, we require that you provide us some of your personal data so we can keep you up-to-date with marketing operations, newsletters, campaigns and promotions.
Categories of Personal Data
“Personal Data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
For the performance of its activity and the above mentioned purposes, Vila Joya processes, inter alia, the following data:
- Identification data (Citizen Card no., or Passport no. – your express consent is required to obtain a copy of these documents – and tax identification number);
- Contact details: Address, telephone number, mobile phone, e-mail address;
- Credit card data;
- Vila Joya may eventually require data regarding your health, e.g. we need to know if you have any food allergies or require special care.
- These data are considered “special category data” under the General Data Protection Regulation. Therefore, we require your explicit consent for this purpose.
Retention period of personal data
Your collected personal data is processed in the strictest compliance with applicable law and is stored in our databases for this purpose.
The period of time during which your personal data will be stored and kept varies according to the purpose of data collection. However, whenever there is no specific legal requirement, the data will be stored only for the period strictly necessary for the purposes of its collection.
As a rule, your personal data will not be shared with third parties without your consent. However, we may have to share some of your personal data with third parties, namely in order to comply with legal obligations, such as judicial and tax authorities or insurance companies (in case of any accident or claim for damage), or if required in the execution of legitimate interests of Vila Joya, Sa or third parties, for example subcontractors.
Rights of data subjects
In accordance with the law, data subjects enjoy the rights of information, the right of access to their personal data, the right to rectify or remove personal data the use of which is no longer legitimate, the right of portability, as well as the right of limitation or opposition.
To exercise such rights, they must submit a written request to the Data Controller:
Security and Confidentiality Measure
The Data Controller processes your data in an absolutely confidential manner, in accordance with internal security procedures, using physical and electronic security measures and procedures, such as the identification of persons with access to data, computer systems equipped with the ability to encrypt, anonymize, systematically identify and destroy the collected data, as well as other physical tools or means, including closed rooms, lockable cabinets and secure safes to minimise the risk associated with data access and processing, in order to protect and maintain security against unauthorised or unlawful processing, loss of data or accidental damage thereof.
Only the Data Controller and its authorised personnel can access and process your personal data.
The Data Controller binds its employees with access to personal data, within the scope of their roles, to observe the Data Controller’s Internal Regulations and/or instructions regarding the processing and security of personal data. They are obliged to professional secrecy, in order to maintain the personal data they have access to under the strictest confidentiality. Such duties shall remain in effect even after the termination of their employment contract.
Users of the Vila Joya Platform
Users of the VILA JOYA website can browse the entire website without restrictions. They may also make booking for accommodation and/or restaurants. By making these bookings you accept the corresponding terms and conditions, and authorise the processing of your data to the extent and for the purpose required.
This Policy applies to all Vila Joya customers, including users of the websites:
How to contact us