Your privacy is important to us. That means we’re committed to protecting and safeguarding any personal data you give us. We act in our customers’ interest and we are transparent about the processing of your personal data. This document describes how we use and process your personal data, hopefully provided in a readable and transparent manner.
Sandytoes Algarve offers travel-related services through our own website as well as through other online platforms such as partners’ websites and social media. Why point that out? All the information that follows applies to not one, not two, but all of these platforms. Several platforms, one privacy statement.
This one privacy statement applies to any kind of information we collect through these platforms or other means connected to these platforms.
We might amend the Privacy Statement from time to time. If you care about your privacy, visit this page regularly and you’ll know exactly where you stand. If we make changes to the Privacy Statement which will have an impact on you (for example, if we intend to process your personal data for other purposes than communicated in this Privacy Statement), we will notify you of these changes beforehand.
Sad but necessary bit: If you disagree with this Privacy Statement, you should discontinue using our services. If you agree with our Privacy Statement, then you’re all set to book your next trip through us.
Personal data you give to us
Sandytoes Algarve collects and uses information which you provide to us. When you make a reservation, you are (as a minimum) asked for your name and email address. Depending on the reservation, we may also ask for your home address, telephone number, payment information, date of birth, the names of any guests travelling with you and any preferences (such as meal preferences and any mobility restrictions) you might have for your trip.
Personal data you give us about others
Of course, you might not simply be making a reservation for yourself. You may be doing a trip with other guests whose details you provide as part of the reservation, or you may make a reservation on behalf of someone else. However, at this point we have to point out that it’s your responsibility to ensure that the person or people you have provided personal data about are aware that you’ve done so, and have understood and accepted how Sandytoes Algarve uses their information (as described in this Privacy Statement).
Personal data we collect automatically
Even if you don’t end up making a reservation, when you visit our website we automatically collect certain information. This includes your IP address, the date and time you accessed our services, the hardware, software or internet browser you use and information about your computer’s operating system, like application versions and your language settings. We also collect information about clicks and which pages have been shown to you.
If you are using a mobile device, we collect data that identifies your mobile device, device-specific settings and characteristics, app crashes and other system activity. When you make a reservation, our system registers through which means and from which websites you have made your reservation.
Personal data we receive from other sources.
It’s not just the things you tell us, though – we may also receive information about you from other sources. These include business partners, such as affiliate partners, and other independent third parties, and anything we get from them may be combined with information provided by you.
Why does Sandytoes Algarve collect and use your personal data?
We use the information collected about you for various purposes. Your personal data may be used in the following ways:
A. Trip reservations: First and foremost, we use your personal data to complete and administer your reservation, which is pretty central to what we do as a company!
B. Communicating with you: There may be times when we get in touch, including by email, by post, by phone or by texting you – which method we choose depends on the contact information you’ve previously shared with us. And we process the communications you send to us. There could be a number of reasons for this, including:
1. Responding to and handling any requests you have made.
2. We also send you other material related to your reservations, such as how to contact Sandytoes Algarve if you need assistance while you are away, and information that we feel might be useful to you in planning or getting the best out of your trip.
Providing your personal data to Sandytoes Algarve is voluntary. However, depending on the type of service you may want to use, we may only be able to provide you with this service if certain personal data is collected. For instance, we cannot process your reservation if we do not collect your name and contact details.
How does Sandytoes Algarve share your data with third parties?
In certain circumstances, we’ll share your personal data with third parties.
Competent authorities: We disclose personal data to law enforcement insofar as it is required by law or is strictly necessary for the prevention, detection or prosecution of criminal acts and fraud or if we are otherwise legally obliged to do so. We may need to further disclose personal data to competent authorities to protect and defend our rights or properties.
Business partners: We work with many business partners. These business partners distribute or advertise the Sandytoes Algarve services.
When you make a reservation on one of our business partners’ websites or apps, certain personal data that you give them such as your name and email address, your address, payment details and other relevant information, will be forwarded to us to finalise and administer your reservation. If customer service is provided by the business partner, Sandytoes Algarve will share details relevant to your reservation with the business partners (as and when needed) in order to provide you with appropriate and efficient support. When you make a reservation through one of our business partners’ websites, the business partners can receive certain parts of your personal data related to the specific reservation such as your name and email address. This is for their own internal purposes (such as analytical purposes) and, if requested by you, for the administration of loyalty programs or marketing.
When you make a reservation on a business partners’ website, please also take the time to read their privacy notice if you wish to understand how these business partners may process your personal data. For fraud detection and prevention purposes and as strictly necessary, we may also exchange information about our users with business partners.
What security and retention procedures does Sandytoes Algarve put in place to safeguard your personal data?
We observe reasonable procedures to prevent unauthorised access to, and the misuse of, personal data.
We use appropriate business systems and procedures to protect and safeguard the personal data you give us. We also use security procedures and technical and physical restrictions for accessing and using the personal data on our servers. Only authorised personnel are permitted to access personal data in the course of their work.
We will retain your personal data for as long as we deem it necessary to enable you to use our services, to provide our services to you to comply with applicable laws, resolve disputes with any parties and otherwise as necessary to allow us to conduct our business, including to detect and prevent fraud or other illegal activities. All personal data we retain will be subject to this Privacy Statement.
How can you control the personal data you have given to Sandytoes Algarve?
We want you to be in control of how your personal data is used by us. You can do this in the following ways:
1. You can ask us for a copy of the personal data we hold about you;
2. You can inform us of any changes to your personal data, or you can ask us to correct any of the personal data we hold about you. We rely on you to ensure that your personal data is complete, accurate and current. Please do inform us promptly of any changes to or inaccuracies of to your personal data by contacting us.
3. In certain situations, you can ask us to erase, or block or restrict the processing of, the personal data we hold about you, or object to particular ways in which we are using your personal data; and
4. in certain situations, you can also ask us to send the personal data you have given us to a third party.
Where we are using your personal data on the basis of your consent, you are entitled to withdraw that consent at any time subject to applicable law.
Who is responsible for the processing of personal data via Sandytoes Algarve and how to contact us?
Sandytoes Algarve controls the processing of personal data as described in this Privacy Statement. Sandytoes Algarve is a private limited liability company, incorporated under the laws of Portugal and has its offices at Casa da Vinha, Barranco da Vaca, Caixa Postal 448, 8670-116, Aljezur, Algarve, Portugal.
If you have any questions about this Privacy Statement or about our processing of your personal data, please contact our data protection officer via info@sandytoes-algarve.