PRIVACY POLICY
FOR THE WEBSITE www.debrais-hotels.com
IDENTIFICATION OF THE DATA CONTROLLER
Name: Valores de Três, Lda
Headquarters: Rua do Tronco, 972 4465-274 S. Mamede Infesta
NIPC (Tax ID): 515840521
Telephone: [insert telephone] (call to national fixed line)
Email: info@debrais-hotels.com
DUTY OF INFORMATION
The protection of personal data of natural persons is regulated in Portugal by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and by Law no. 58/2019 of 8 August, which ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data.
“Personal data” is considered to be any information, of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person, meaning that protection does not cover legal entities’ data.
An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity (for example, their name associated with their telephone number or email address).
By reading this Privacy Policy, the User is informed about the processing of their personal data carried out by Valores de Três, Lda through the website www.debrais-hotels.com.
PURPOSES OF PERSONAL DATA PROCESSING
The personal data we collect and process through the Website identified above will be used solely for the following purposes:
Valores de Três, Lda guarantees the confidentiality of all data provided. Although Valores de Três, Lda collects and processes data securely to prevent its loss or manipulation, using the most appropriate techniques for this purpose, it is important to bear in mind that data collection on open networks does not allow personal data to circulate in conditions of absolute security, and there is a risk that it may be accessed and used by unauthorized third parties.
Failure to provide data marked as mandatory may make it impossible to respond to the data subject’s request.
LAWFULNESS OF PERSONAL DATA PROCESSING
Valores de Três, Lda processes Users’ data:
The User guarantees that the information provided is true, accurate, complete, and up to date, and is responsible for any damage or loss, direct or indirect, that may be caused as a result of breaching this obligation.
If the data provided belongs to a third party, the User guarantees that they have informed said third party of the aspects contained in this document and obtained their authorization to provide their data to Valores de Três, Lda for the specified purposes.
RETENTION PERIOD
Valores de Três, Lda will only retain and process your personal data for the period necessary or mandatory to fulfill the purposes described above, applying information retention criteria appropriate to each processing operation and in line with applicable legal and regulatory obligations.
Valores de Três, Lda maintains personal data in its systems in such a way that it is possible to identify data subjects according to the following criteria:
DATA DISCLOSURE
In addition to disclosures made in compliance with legal obligations, the Data Subject’s personal data may be known, beyond Valores de Três, Lda, by:
INTERNATIONAL DATA TRANSFERS
The personal data collected will be processed within the European Economic Area, and there are no international transfers of data to third countries or international organizations.
In the event of any processing of personal data outside the European Economic Area, this will only occur through the adoption of appropriate safeguards and the required level of protection, in accordance with personal data protection legislation.
INFORMATION SECURITY
Valores de Três, Lda has implemented technical and organizational security measures appropriate to ensure the security of the personal data provided by the User, aiming to prevent its alteration, loss, unauthorized processing and/or access, taking into account the state of technology, the nature of the data stored, and the risks to which it is exposed.
Personal data is processed with the legally required level of protection to guarantee its security and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology; the User is aware of and accepts that internet security measures are not impenetrable.
Should Valores de Três, Lda subcontract other entities for the provision of services involving the transfer of personal data, these entities will be obliged to adopt the necessary technical and organizational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorized access, or any other type of unlawful processing.
EXERCISE OF RIGHTS
In accordance with the provisions of the GDPR, the User may exercise their rights of access, rectification, and, where applicable, restriction of processing, erasure, portability, objection, and withdrawal of consent, under the terms of the GDPR, by requesting it in writing through any of the following means, specifying the right or rights they wish to exercise:
SUPERVISORY AUTHORITY
The User also has the right to lodge a complaint with the National Data Protection Commission regarding matters relating to the exercise of their rights and the protection of their personal data, if they consider that their data protection rights have been violated.
THIRD-PARTY PAGES
The Website may contain advertising, links, or other content that link or redirect to pages and services of providers, advertisers, affiliates, sponsors of Valores de Três, Lda, and other third parties.
However, Valores de Três, Lda does not control the content or links appearing on these pages and is not responsible for the practices used by these pages or websites. Valores de Três, Lda advises Users to visit the privacy policy of such pages, as well as their terms and conditions.
Browsing or interacting on any other website, including those that have an external link to the Website, is subject to the terms and conditions of that website, and Valores de Três, Lda is in no way responsible for such access and use.
DATA PROCESSING CARRIED OUT BY THE COMPANY THAT DEVELOPS AND MANAGES THE WEBSITE AS AN INDEPENDENT DATA CONTROLLER
Without prejudice to the fact that processing of data collected through the Website is the responsibility of Valores de Três, Lda, as identified in Section 1 above of this Privacy Policy, we inform the User that MIRAIFUTURE PORTUGAL, LDA., with headquarters at Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil and NIPC 515 139 092, may act, in specific situations, as Data Controller, independently determining the purposes and means of processing.
This occurs, namely, regarding data processed to ensure the operation, maintenance, and security of the booking engine.
In such situations, the User’s data will be processed in accordance with the information below:
Mirai ensures that, even in these situations, it only processes strictly necessary data, adopting appropriate technical and organizational measures to ensure its security and confidentiality.
The User may exercise the rights referred to in Section 9 by requesting it in writing through any of the following means, specifying the right or rights they wish to exercise:
You may also exercise the rights provided for in Section 10.
CHANGES TO THE PRIVACY POLICY
In order to ensure the adequacy of the document, Valores de Três, Lda reserves the right to review this Policy whenever it considers it appropriate, and Users are recommended to check this privacy policy regularly and/or each time they access the Website.
Updated on 20/05/2026.
