Privacy Policy (Portugal)
1. An Overview of Data Protection
General Information
The following information provides an easy-to-understand overview of what happens to your personal data when you visit this website. “Personal data” means any data that can be used to personally identify you. Detailed information on data protection can be found in this Privacy Policy below.
Data Recording on This Website
Controller
The processing of personal data on this website is carried out by the website operator. The controller’s contact details can be found under “Information about the Controller” in this Privacy Policy.
How Do We Collect Your Data?
Some data are collected when you provide them to us, for example by entering information into a contact form.
Other data are collected automatically by our IT systems when you visit the website. These are mainly technical data (e.g. browser type, operating system, time of access, IP address).
What Do We Use Your Data For?
Some of the data are collected to ensure the proper functioning and security of the website. Other data may be used to analyse user behaviour. Where contracts are initiated or concluded via the website, the transmitted data are processed for contractual or pre-contractual purposes.
Your Rights
You have the right to obtain information about the origin, recipients and purposes of your stored personal data at any time, free of charge. You also have the right to request rectification or erasure of your data. If you have given consent to data processing, you may revoke this consent at any time with effect for the future. You also have the right to request restriction of processing and to lodge a complaint with the competent supervisory authority.
2. Hosting
This website is hosted by:
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp
Germany
Mittwald processes log files and IP addresses. Further information can be found in Mittwald’s privacy policy.
The use of Mittwald is based on Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).
Where consent is required (e.g. cookies), processing is based on Art. 6(1)(a) GDPR in conjunction with Portuguese Law no. 41/2004. Consent may be revoked at any time.
3. General and Mandatory Information
Data Protection
We treat your personal data confidentially and in accordance with the GDPR, Law no. 58/2019 (Portugal) and this Privacy Policy.
Please note that data transmission over the Internet (e.g. email communication) may have security vulnerabilities.
Information About the Controller
Hotsummer Lda
Phone: +351 282 484 414
Email: info@club-nau.com
The controller is the entity that determines the purposes and means of processing personal data.
Storage Duration
Personal data are stored only for as long as necessary to fulfil the respective purpose or as required by statutory retention obligations under Portuguese or EU law.
Legal Bases for Processing
Depending on the purpose, personal data are processed on the basis of:
- Art. 6(1)(a) GDPR – Consent
- Art. 6(1)(b) GDPR – Performance of a Contract / Pre-Contractual Measures
- Art. 6(1)(c) GDPR – Legal Obligation
- Art. 6(1)(f) GDPR – Legitimate Interests
Special categories of data are processed only in accordance with Art. 9 GDPR.
Recipients of Personal Data
Personal data may be disclosed to external service providers where necessary for contractual, legal or legitimate interest purposes. Data processors are engaged under GDPR-compliant processing agreements.
Revocation of Consent
You may revoke any consent given at any time. The legality of processing prior to revocation remains unaffected.
Right to Object (Art. 21 GDPR)
Where processing is based on legitimate interests, you have the right to object at any time for reasons arising from your particular situation. This also applies to profiling and direct marketing.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
www.cnpd.pt
This is without prejudice to other legal remedies.
Data Portability
You have the right to receive personal data processed on the basis of consent or contract in a structured, commonly used and machine-readable format.
Restriction of Processing
You may request restriction of processing under the conditions set out in Art. 18 GDPR.
SSL / TLS Encryption
This website uses SSL/TLS encryption to protect transmitted data.
Objection to Unsolicited Communications
The use of contact data published on this website for unsolicited advertising is expressly prohibited.
4. Cookies and Data Collection
Cookies
This website uses cookies. Cookies may be technically necessary or used for analytical or marketing purposes.
- Necessary cookies: Art. 6(1)(f) GDPR
- All other cookies: Art. 6(1)(a) GDPR in conjunction with Law no. 41/2004 (Portugal)
You can manage cookie preferences via your browser or our consent tool.
Cookie Consent Tool (Borlabs)
We use Borlabs to manage cookie consent in a GDPR-compliant manner. Consent records are stored locally and not shared with Borlabs.
Legal basis: Art. 6(1)(c) GDPR
Server Log Files
Server log files are processed on the basis of Art. 6(1)(f) GDPR to ensure technical security and website optimisation.
Contact Requests
Contact requests by email or phone are processed under Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Data are deleted once the request has been fully processed unless statutory retention obligations apply.
5. Plug-ins and Tools
YouTube, Vimeo, Google Maps, Google Fonts
Third-party services may process personal data (e.g. IP address). Processing is based on Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR where consent is required.
Data transfers to the USA are safeguarded through EU-US Data Privacy Framework certification or Standard Contractual Clauses (SCCs).
Further details can be found in the respective providers’ privacy policies.
Final Note
This Privacy Policy complies with the GDPR, Portuguese Law no. 58/2019, and Law no. 41/2004.