PRIVACY POLICY OF THE
WEBSITE hoteltoural.com

DATA CONTROLLER IDENTIFICATION

Name: ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA
Registered Office: Rua Teixeira de Pascoais, n.º 131, Sala 6C, 2.º andar poente, Azurém 4800-073 GUIMARÃES
Company Registration Number (NIPC): 518467449
Phone: +351 253 517 184 (Call to national landline network)
E-mail: reservas@hoteltoural.com

DUTY TO INFORM

The protection of personal data of natural persons is safeguarded in Portugal by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and by Law no. 58/2019, of 8 August, which ensure the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

“Personal data” is considered to be any information, of any nature and regardless of the medium involved, including sound and image, relating to an identified or identifiable natural person, and therefore this protection does not cover data relating to legal persons.

A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity (for example, their name associated with their telephone number or e-mail address).

By reading this Privacy Policy, the User is informed about the processing of their personal data carried out by ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA through the website hoteltoural.com.

PURPOSES OF PERSONAL DATA PROCESSING

The personal data we collect and process through the above-identified Website will be used solely for the following purposes:

  • Managing the contracting of services carried out through the Website, such as contact requests or booking management;
  • Periodically sending communications with news related to the activity of ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA and the sector to which it dedicates its activity;
  • Anonymous and aggregated analysis of service usage, to identify User habits and trends, in order to improve the services offered and meet the specific needs of Users;
  • In the event of contracting, the data collected through this Website, together with other data obtained within the scope of the contractual relationship, will be used for human resources management, to ensure compliance with legal obligations and to provide employees with the resources necessary to carry out their professional activity;
  • Compliance with national and international legal provisions, or to execute an order from the competent judicial authorities;
  • Compliance with legal obligations arising from applicable data protection legislation, as well as for the exercise of data subjects’ rights, in particular, the defence of a right in judicial proceedings.

ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA guarantees the confidentiality of all data provided. Notwithstanding that ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA carries out the collection and other types of data processing in a secure manner that prevents its loss or manipulation, using the most appropriate techniques for this purpose, it should be noted that the collection of data on open networks does not allow personal data to circulate under conditions of absolute security, and there is a risk that it may be accessed and used by unauthorised third parties.

Failure to provide the data marked as mandatory may result in the impossibility of responding to the data subject’s request.

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA processes User data:

  1. when they give their free, specific, informed and unambiguous consent to the processing of their personal data for certain purposes; and/or
  2. when it is necessary for the performance of a contract to which the data User is party, or for pre-contractual steps taken at the User’s request; and/or
  3. for compliance with legal obligations to which ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA is subject; and/or
  4. for the purposes of the legitimate interests pursued by ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring protection of personal data.

The User guarantees that the information provided is true, accurate, complete and up to date, and is responsible for any damage or loss, direct or indirect, that may result from a breach of this obligation.

If the data provided belongs to a third party, the User guarantees that they have informed said third party of the aspects contained in this document and have obtained their authorisation to provide their data to ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA for the purposes indicated.

RETENTION PERIOD

ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA only retains and processes your personal data for the period that proves necessary or mandatory to fulfil the purposes described above, applying data retention criteria appropriate to each type of processing and in line with applicable legal and regulatory obligations.

ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA keeps personal data in its systems in such a way that data subjects can be identified according to the following criteria:

  • for a period of time not exceeding that required to fulfil the purposes for which it was collected, unless legal or contractual obligations provide otherwise;
  • to fulfil specific legal or contractual obligations;
  • where applicable and legitimate, until any request for objection or erasure by the Data Subject.

DATA DISCLOSURE

In addition to disclosures made in compliance with legal obligations, the personal data of the Data Subject may be accessed, besides by ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA, by:

  • external service providers of ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA, in their capacity as subcontractors;
  • national and international companies belonging to the same group as ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA;
  • authorities in general, administrations, public entities and bodies, both national and international;
  • ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA

INTERNATIONAL DATA TRANSFERS

The personal data collected will be processed within the European Economic Area, and there are no international transfers of data to third countries or international organisations.

In the event of any processing of personal data outside the European Economic Area, this will only occur through the adoption of appropriate safeguards and the required level of protection, in accordance with personal data protection legislation.

INFORMATION SECURITY

ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA has implemented appropriate technical and organisational security measures to ensure the security of the personal data provided by the User, aiming to prevent its unauthorised alteration, loss, processing and/or access, taking into account the current state of technology, the nature of the data stored and the risks to which they are exposed.

Personal data is processed with the level of protection legally required to ensure its security and prevent unauthorised alteration, loss, processing or access, taking into account the state of technology, with the User being aware of and accepting that internet security measures are not impregnable.

Should ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA subcontract the provision of services involving the disclosure of personal data to other entities, such entities will be obliged to adopt the necessary technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or access, or any other type of unlawful processing.

EXERCISE OF RIGHTS

In accordance with the provisions of the GDPR, the User may exercise their rights of access, rectification and, where applicable, restriction of processing, erasure, portability, objection and withdrawal of consent, under the terms of the GDPR, by requesting this in writing through any of the following means, specifying the right or rights they wish to exercise:

  • E-mail: reservas@hoteltoural.com;
  • Postal address: Rua Teixeira de Pascoais, n.º 131, Sala 6C, 2.º andar poente, Azurém 4800-073 GUIMARÃES

SUPERVISORY AUTHORITY

The User also has the right to lodge a complaint with the National Data Protection Commission (Comissão Nacional de Proteção de Dados) regarding matters relating to the exercise of their rights and the protection of their personal data, should they consider that their data protection rights have been violated.

THIRD-PARTY PAGES

The Website may contain advertising, links or other content that link to or redirect to pages and services of suppliers, advertisers, affiliates, sponsors of ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA and other third parties.

However, ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA does not control the content or links that appear on such pages and is not responsible for the practices used by these pages or websites. ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA advises Users to review the privacy policy of such pages, as well as their terms and conditions.

Browsing or interacting with any other website, including those that have an external link to the Website, is subject to the terms and conditions of that website, and ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA is in no case responsible for such access and use.

DATA PROCESSING CARRIED OUT BY THE COMPANY THAT DEVELOPS AND MANAGES THE WEBSITE ACTING AS AN INDEPENDENT DATA CONTROLLER

Without prejudice to the fact that the processing of data collected through the Website is the responsibility of ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA, as identified above in Section 1 of this Privacy Policy, we inform the User that MIRAIFUTURE PORTUGAL, LDA., with registered office at Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil, and with Company Registration Number (NIPC) 515 139 092, may act, in specific situations, as a Data Controller, autonomously determining the purposes and means of processing.

This occurs, in particular, with regard to data processed to ensure the operation, maintenance and security of the booking engine.

In such situations, the User’s data will be processed in accordance with the information below:

  • Purpose: to ensure the operability, security and continuous improvement of the Website;
  • Legal basis: legitimate interest;
  • Retention period: for the period strictly necessary to fulfil these purposes.

Mirai ensures that, even in these situations, it only processes the data strictly necessary, adopting appropriate technical and organisational measures to guarantee its security and confidentiality.

The User may exercise the rights referred to in Section 9, by requesting this in writing through any of the following means, specifying the right or rights they wish to exercise:

  • E-mail: portugal@mirai.com;
  • Postal address: Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil

The User may also exercise the rights set out in Section 10.

CHANGES TO THE PRIVACY POLICY

In order to ensure the document’s continued adequacy, ESFERAGEST – GESTÃO E EXPLORAÇÃO HOTELEIRA, LDA reserves the right to review this Policy at any time it deems appropriate, and it is therefore recommended that Users check this privacy policy regularly and/or each time they access the Website.

Updated on 1/07/2026.