- Identity: Orbirio Imob. e Empreendimentos Turisticos, SA
- Tax ID: 504 211 145
- Address: Rua do Campo Alegre, n.º 830, 9, 4150-141 Porto
FOR WHAT PURPOSES WILL YOUR PERSONAL DATA BE PROCESSED?
The personal data provided will be processed by the Data Controller for the following purposes:
- Registration, access control and management of Wellness Centre reservations.
- Providing the Wellness Centre Services, safely and with the objective of meeting the clients need, health conditions and expectations (e.g. health data, treatment preferences etc.).
- Charging services provided by the Wellness Centre.
- Evaluation of the services provided through the completion of a satisfaction survey.
- If the client requests it, invoice the services provided to the appropriate room.
- To contact the client in case it is necessary for the provision of the services.
- To send promotions and commercial communications.
WHICH DATA MAY BE PROCESSED?
- Identifying data: name, surname
- Personal characteristics: Birth date, nationality
- Health data and treatment preferences: Medical conditions, body areas to be treated, etc.
MANDATORY NATURE OF PROVIDING THE DATA
The data requested in this form is necessary to comply with the indicated purposes. Specifically, the information regarding health and/or physical status is necessary to adequate the requested treatment to your medical needs, it is not possible to adapt the treatment to the Client and obtain the expected results. For this reason, the client must provide all the information required and shall be the sole responsible for any damage arising from false or incomplete information.
Any of the health data provided to the Wellness Centre will only be accessed by the Wellness Centre professionals which need to know those information’s to provide correctly the services contracted and who are contractually obliged to a confidentiality duty.
WELLNESS CENTRE
WHAT IS THE LEGITIMACY FOR THE TREATMENT?
For the provision of the services, the lawful basis is the performance of the contract between the parties.
For the sending of commercial communications, the lawful basis is our legitimate interests. In this regard, you may oppose to receiving commercial communications, at any time, by sending an email, indicating in the subject "Unsubscribe Communications" to the following address dataprotection@nhhotels.com.
For any health or biological data, the legal basis will be the express consent of the data subject.
About the satisfaction survey, the legal basis for processing will be the legitimate interest of data processor to control the quality of the services and evaluate the satisfaction of its clients. The data controller may contact the Client to request his or her assessment of the services offered and/or acquired and to analyze this information to improve the services.
This processing responds to the data controller's need to adapt its operations and the services offered to the preferences and expectations of the Clients, for which it is necessary to know its opinion. This processing also contributes to increasing the quality of the services provided to Clients. Although for the analysis of opinions, responses will be collected on an individual basis, their analysis will be carried anonymously, out in a general way, by means of statistics, without identifying specific Clients. Clients may, in any case, refuse to give their assessment as the completion of the survey is not obligatory, as well as communicate their opposition to being contacted for this purpose.
WHO ARE THE RECIPIENTS OF YOUR DATA?
The personal data can be communicated to:
- Banks and credit entities in the extend necessary to manage and process payments, billing or other kind of accounting operations related to contracted services
- If considered necessary to resolve a situation related to the Client’s health and well-being, the data collected may be communicated to the corresponding health entity, as deemed necessary and urgent.
- The client’s data will not be communicated to other entities.
However, the data may be accessible by suppliers of the Data Controller, as necessary for the provision of the services and compliance with the law. These providers will not process your data for their own purposes, different to the ones informed by the Data Controller in this section.
HOW LONG WILL WE KEEP THE DATA?
The data will be kept for as long as deemed necessary for the provision of the services, and even furtherly in order to comply with any applicable laws.
For the processing of commercial communications, until the Client opposes to such processing.
With regard to the processing of the satisfaction survey, the data will be anonymised once received and will not be further processed.
WELLNESS CENTRE
WHAT ARE YOUR RIGHTS?
The Client may exercise, by writing to the following address made available, NH HOTEL GROUP, Calle Santa Engracia 120, 7ª, 28003, Madrid, or to the e-mail address dataprotection@nh-hotels.com indicating in the Reference "Data Protection", attaching a photocopy of your identity document, at any time and free of charge, the following rights:
- To revoke the consent given for the processing and communication of your personal data.
- Obtain information about the existence or not of the processing of your personal data.
- Access to your personal data.
- Rectify inaccurate or incomplete data.
- Request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- Limit the processing of data when any of the conditions provided for in the data protection regulations are met.
- In certain circumstances and for reasons related to their situation, data subjects may object to the processing of their data.
- Request the portability of your data.
- Claim before the Comissão Nacional de Proteção de Dados, through the following address: Av. D. Carlos I, 134, 1º, 1200-651, Lisboa, when you consider that the Responsible has violated the rights recognized by the data protection regulations.
