This site may collect some User Data
Owner and Data Controller
Paradise Lisbon SPA
Data Types Collected
This site may collect some personal data namely, name, email address, telephone and cookies.
Personal Data may be provided voluntarily by the User, or, in the case of Usage Data, collected automatically when using this Site.
Unless it is specified that all Data requested by this Site is mandatory and failure to provide such Data may make it impossible for this Site to provide its Services. In cases where this Site specifically states that some Data is not required, Users will not have to fill in such Data and there will be no consequences for the availability or operation of the Service.
Users who have questions about which Personal Data is required are invited to contact the Owner.
Users are responsible for any Third Party Personal Data that is obtained, published or shared through this Service (this Site) and confirm that they have the authorization of the third parties to provide the Data to the Owner.
Data processing mode and location
The Owner shall take appropriate security measures to prevent unauthorized access, disclosure, alteration or unauthorized destruction of the Data.
Data processing is carried out through computers and /or IT enabled tools, following organizational procedures and means strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessed by certain types of persons in charge, involved with the operation of this Service (this Site) (administration, sales, marketing, legal administration of the system) or external persons (such as third-party providers of technical services, mail, etc.) appointed, where necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.
Legal basis for processing
The Owner may process the Personal Data relating to the User if one of the following applies:
- Users who have given their approval for one or more specific purposes; Note: In accordance with certain laws, owner may be permitted to process Personal Data until you object to this (“opt-out”) without having to rely on permission or any other legal bases below. This, however, does not apply where the processing of Personal Data is subject to European data protection legislation;
- the provision of the Data is necessary for the fulfillment of a contract with you and/or any pre-contractual obligations thereof;
- processing is necessary for the fulfilment of a legal obligation to which the Owner is subject;
- the processing is related to a task that is performed in the public interest or in the exercise of an official authorization in which the Owner is invested;
- processing is necessary for the purpose of legitimate interests pursued by the Owner or a third party;
In any case, the Owner will gladly cooperate to clarify which legal basis applies to the processing, and in particular if the provision of Data is a mandatory requirement by law or contractual, or a requirement necessary to enter into a contract.
The data is processed at the Owners’ operating sites, and anywhere else where the parties involved with the processing are located.
Depending on your location, data transfers may involve transferring Your Data to a country other than yourown. To find out more about the place of processing of such transferred Data Users may check the section containing details on the processing of Personal Data.
Users also have the right to be informed about the legal basis of data transfers to countries outside the European Union or to any international organisations governed by public international law or formed by two or more countries, such as the UN, and about the security measures taken by owner to protect their Data.
If any such transfers occur, Users may find out more about it by checking the relevant sections of this document or asking owner using the information provided in the contacts section.
Personal Data will be processed and stored for as long as necessary for the purposes for which it is collected.
- Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully fulfilled.
- Personal Data collected for purposes related to the legitimate interests of the Owner will be retained for as long as necessary to fulfill such purposes. Users may obtain specific information about the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.
The Owner may be permitted to retain the Personal Data for a longer period of time whenever the User has given his/her consent to such processing, until such authorization has been withdrawn. In addition, the Owner may be obliged to retain personal data for a longer period of time at all times when he is obliged to do so for the performance of a legal obligation or in compliance with a warrant from an authority.
Once the retention period is over, Personal Data will be deleted. In this way the right to access, the right to erase, the right to correct and the right to portability of the data may not have its fulfillment required after the expiration of the retention period.
The purposes of processing
User Data is collected to enable the Owner to provide its Services, as well as for the following purposes: Contact the User; Anti-spam protection; Access to third-party service accounts; Statistics; Save and manage the backup; Content comment; View content from external platforms; Payment processing; Interaction with social networks and external platforms; User database management; Interaction with data collection platforms and other third parties; Management of e-mail addresses and sending of messages; Registration and authentication; Tag management and Traffic optimization and distribution.
Users may obtain additional detailed information about such processing purposes and on the specific Personal Data used for each purpose in the respective sections of this document.
The content feedback services allow Users to create and post comments on the content of this service (this Site).
Depending on the settings chosen by the Owner, Users may also leave anonymous comments. If there is an email address between the Personal Data provided by you, it may be used to send feedback notifications about the same content. Users are responsible for the content of their comments.
If a third-party content feedback service is installed, it may still collect web traffic data for pages where the comment service is installed, even when Users do not use the feedback content service.
Directly managed Feedback System (this Site)
This Site has its own internal content feedback system.
Personal Data collected: Cookie; E-mail; Name; name
Contact the User
Contact form (this Site)
By completing the contact form with your Data, Users authorize this Site to use these details to respond to requests for information, quotation or any other type of request as indicated by the title of the form.
Personal Data collected: Name, E-mail, Telephone number.
Mailing list or newsletter (this Site)
By registering on the mailing list or newsletter, your email address will be added to the contact list of those who may receive email messages containing commercial or promotional information about this Site. Your email address may also be added to this list as a result of your registration on this service (this Site) or after making a purchase.
Personal Data collected: E-mail; Name;
The services in this section enable owner to monitor and analyze web traffic and can be used to track User behavior.
Google Analytics (Google Inc.)
Google Analytics is an Internet analytics service provided by Google, depending on the location from which this Site is accessed, (“Google”). Google uses the collected data to track and analyze your use of this service (this Site) to prepare activity reports and share it with other Google services.
Google may use the collected data to contextualize and personalize ads from its own advertising network.
Personal Data collected: Cookie; Usage data.
WordPress Stat (Automattic Inc.)
WordPress is an analytics service provided by Automattic Inc.
Personal Data collected: Cookie; Usage data.
User database management
These types of services allow the Owner to create User profiles from an email address, a personal name, or other information that you have provided to this Site, as well as tracking Your activities through analytical capabilities. This Personal Data may also be combined with publicly available information about you (such as social media profiles) and used to build private profiles that the Owner may display and use to improve the service (this Site).
Some of these services may also be enabled to send scheduled messages to you such as emails based on actions performed on this service (this Site).
Email address management and messaging
These types of services allow the management of the database of e-mail contacts, telephones or other contact information for the purpose of communication with the User.
These services may also be used to collect data regarding the date and time when the User viewed the email; and also when the User interacted with the email received, such as when the User selected the links included in the email.
This type of service helps the Owner manage the tags or scripts required by this Site centrally. As a result, User Data flows through these services and there is a possibility of retention of this Data.
Google Tag Manager
Google Tag Manager is a management service provided by Google, depending on the location from which this Site is accessed.
Personal Data collected: Cookies; Usage data.
Privacy Shield participant.
Interaction with data collection platforms and other third parties
These types of services allow Users to interact with data collection platforms or other services directly from the pages of this service (this Site) for the purpose of saving and reusing data.
If one of these services is installed, it may collect Usage and Browsing Data on the pages where it was installed, even if Users do not actively use the service.
Users may exercise certain rights with respect to their Data processed by the Owner.
In particular, Users have rights, such as:
- Withdraw your approval at any time. Users have the right to withdraw their approval in cases where they have previously given their approval for the processing of their Personal Data.
- Refuse processing of yourData. Users have the right to refuse the processing of their Data if processing is carried out on a legal basis other than approval. Additional details are provided in the specific section below.
- Access yourData. Users have the right to know whether their Data is being processed by owner, obtain revelations about certain aspects of processing and obtain a copy of the Data that is in process.
- Check and ask forcorrection. Users have the right to verify the accuracy of their Data and request any updates or corrections.
- Restrict the processing of yourData. Users have the right, under certain circumstances, to restrict the processing of their Data for any purpose other than storage thereof.
- Delete Personal Data or otherwise withdrawit. Users have the right, under certain circumstances, to obtain the deletion of their Owner Data.
- Receive your Data and have it transferred to another controller. Users have the right to receive their Data in a structured format, commonly used and able to be read by machines and, if technically feasible, to have it transmitted to another driver without any problem. This determination makes it conditional on the Data being processed by automated means and that the processing is based on the User’s approval, in a contract of which the User is one of the parties or by pre-contractual obligations thereof.
- File acomplaint. Users have the right to lodge a complaint with their competent data protection authority.
Details on the right to refuse processing
In cases where Personal Data is processed in the public interest, in the exercise of an official authorization in which the Owner is invested or for the purposes of the legitimate interests pursued by the Owner, Users may refuse processing by providing a reason related to their situation in particular to justify the refusal.
Users should know that if their Personal Data is processed for marketing purposes, they may refuse processing at any time without providing any justification. Users can refer to the respective sections of this document.
How to exercise these rights
Any requests to exercise the rights of users may be directed to the Owner through the contact details provided in this document. These requests may be exercised at no cost and will be met by the Owner as soon as possible and in all cases within less than one month.
Additional information on data collection and processing
Users’ Personal Data may be used for legal purposes by the Owner concerned or at the steps leading to possible legal action arising from misuse of this Service (this Site) or related Services.
The User declares to be aware that the Owner may be obliged to disclose the Personal Data upon request of the government authorities.
Additional information about Your Personal Data
System logs and maintenance
For system and maintenance purposes, this Site and any third-party services may collect files that hold interaction with this Site (system logs) or use other Personal Data (such as IP address) for this purpose.
Information not contained in this policy
Further details on the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.
How “Don’t Track Me” requests are handled
This Site does not support “Do Not Track Me” requests.
To determine whether any of the third-party services you use honor “Do Not Track Me” requests, please read the privacy policies.
If the changes affect the processing activities carried out based on the User’s approval, the Owner will collect the new approval of the User, where required.
Legal definitions and references
Personal Data (or Data)
Any information that directly, indirectly or in connection with other information – including a personal identification number – allows the identification or identification of an individual.
Information automatically collected through this Site (or third-party services contracted on this Service), which may include: the IP addresses or domain names of the computers used by Users using this Site, the URI (Uniform Resource Identifier) addresses, the date and time of the request, the method used to submit the request to the server, the size of the file received in response, the numeric code indicating the status of the response server (positive result, error, etc.), the country of origin, the characteristics of the browser and operating system used by the User, the various details of time per visit (for example, the time spent on each page within the application), and the details about the path followed within the application , with special reference to the sequence of pages visited and other parameters about the operating system of the user’s device and/or IT environment.
The person using this Site who, unless otherwise specified, coincides with the Data Subject.
The natural person to whom the Personal Data refers.
Data Processor (or Data Supervisor)
Data Controller (or Owner)
The natural or legal person, public administration, agency or other body that, alone or in conjunction with others determines the purposes and means of processing personal data, including security measures relating to the operation and use of this Service (this Site). The Data Controller, unless otherwise specified, is the Owner of this Service (this Site).
This Site (or this Application)
The means by which Your Personal Data is collected and processed.
The service provided by this Site as described in the relative terms (if available) and on this site/application.
European Union (or EU)
Unless otherwise specified, all references made in this document to the European Union include all current member states of the European Union and the European Economic Area.
Small units of data stored on your device.
This privacy statement was prepared based on determinations of multiple laws, including the Arts. 13/14 Regulation (EU) 2016/679 (GDPR – General Data Protection Regulation).
Last Updated: July 1, 2020