In the scope of registration and access to the Website, Associação Turismo de Cascais, as controller, may request the User to make available their personal data, that is, information provided by the User that allows the Associação Turismo de Cascais to identify and / or contact you ("Personal Information").

In general, the personal data is requested when the user registers and accesses the Website and consists in information as the first name, the last name, e-mail, birthday date, country and city, however, shall be collected in addiction the user name in case of registration via Facebook e Google +.

The Personal Data collected will be processed for registration and access to the Website. Personal Data will be kept for the period of Website use, after which time they will be deleted. In the scope of the User Data processing, Associação Turismo de Cascais appeals or may appeals to third parties to, on behalf of Associação Turismo de Cascais, and in accordance with the instructions given by it, to carried out with processing, in strict compliance with the provisions of the law and this Privacy Policy.

The Processors will not be able to transmit the personal data of user to other entities without Associação Turismo de Cascais prior written permission to do, being also prevented from contracting other entities without previous authorization of Associação Turismo de Cascais.

Associação Turismo de Cascais undertakes to subcontract only entities that present sufficient guarantees of execution of the appropriate technical and organizational measures, in order to ensure the defense of the rights of the User. All entities subcontracted by Associação Turismo de Cascais are bound to the latter by means of a written agreement, which governs, in particular, the purpose and duration of the processing, the nature and purpose of the processing, the type of personal data, the categories of the rights and obligations of the parties.

In terms of general principles regarding the processing of personal data, Associação Turismo de Cascais undertakes to ensure that the User Data processed by it is:

The processing of data made by Associação Turismo de Cascais is lawful when the User has given his explicit consent to the processing of his Personal Data for one or more specific purposes, when the processing is necessary for the execution of a contract in which the User is a party, or for pre-contractual procedures at the request of the User, to fulfill a legal obligation to which Associação Turismo de Cascais is subject and for the purpose of the legitimate interests pursued by Associação Turismo de Cascais or by third parties.

Associação Turismo de Cascais undertakes to ensure that the processing of User Data is only carried out under the conditions listed above and with respect to the principles mentioned above.

When the processing of user personal data is carried out by Associação Turismo de Cascais based on user consent, the User has the right to withdraw his consent at any time. The withdrawal of the consent, however, does not compromise the lawfulness of the treatment made by Associação Turismo de Cascais based on the consent previously given by the User.

In order to ensure the security of User Data and maximum confidentiality, we process the information you have provided in a confidential manner, in accordance with our internal security and confidentiality policies and procedures, which are updated periodically as required, as well in accordance with the terms and conditions legally set forth.

Depending on the nature, scope, context and purpose of data processing, as well as the risks arising from the treatment of the rights and freedoms of the User, Associação Turismo de Cascais undertakes to apply, both at the time of definition of the means of processing as at the time of the processing itself, technical and organizational measures necessary and adequate for the data protection and compliance with legal requirements. It also undertakes to ensure that, by default, only data that is necessary for each specific purpose of processing is processed and that such data are not made available without human intervention to an indeterminate number of persons.

In certain types of processing, personal data collected by Associação Turismo de Cascais may be made available to third parties and may involve their transfer outside the European Union. In such case, Associação Turismo de Cascais undertakes to ensure that the transfer complies with applicable legal provisions, in particular as regards the determination of the country's adequacy for data protection and the requirements applicable to such transfers.

The right to access, the right of rectification, the right of erasure, the right to limitation, the right of portability and the right to opposition can be exercised by user through the contact with Data Protection Officer through the email: rgpd@visitcascais.com or through the address Avenida Clotilde – Edifício do Centro de Congressos do Estoril, 3º C, 2765-211 Estoril, Portugal.

The Associação Turismo de Cascais will respond in writing (including by electronic means) to the user request within a maximum of one month from the receipt of the request, except in cases of special complexity, where this period may be extended by up to two months.

If the requests presented by the User are manifestly unfounded or excessive, in particular because of their repetitive nature, Associação Turismo de Cascais reserves the right to charge administrative costs or refuse to comply with the request, without prejudice to the possibility of submitting a complaint to the supervisory authority.

The Website may contain links to third party websites or portals. Associação Turismo de Cascais is not responsible for the privacy practices of such websites or portals. We therefore recommend that you read its privacy statements. Associação Turismo de Cascais cannot be held responsible or responsible for the content and activities of such websites or portals.

In the future, we may choose to modify or update this policy due to changes in legislation or to cover new Internet developments. Accordingly, we reserve the right to make any changes in this regard and request that you regularly visit our Website, as such, changes may affect you as a User.

The Privacy Policy, as well as the collection, processing or transmission of User Data, are governed by the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and applicable laws and regulations in Portugal.

Any litigation arising from the validity, interpretation or execution of the Privacy Policy, or related to the collection, processing or transmission of User Data, must be submitted exclusively to the jurisdiction of the courts of Cascais, without prejudice to the legal rules applicable.