WEBSITE PRIVACY POLICY hotelarangues.com

IDENTIFICATION OF THE DATA CONTROLLER

Name: HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A.

Registered Office: Rua Capitão Tenente Carvalho Araújo, 52 2ºA / 2900-646 Setúbal

VAT Number (NIPC): 502949970

Telephone: (+351) 265 525 171 Call to the national landline network

Email: reservas@hotelarangues.com

INFORMATION OBLIGATION

The protection of personal data of natural persons in Portugal is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and by Law No. 58/2019 of 8 August, which ensure the protection of individuals with regard to the processing of personal data and the free movement of such data.

“Personal data” is considered to be any information, of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person, and therefore does not include data relating to legal persons.

An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more specific elements of their physical, physiological, psychological, economic, cultural or social identity (for example, their name associated with their telephone number or email address).

By reading this Privacy Policy, the User is informed about the processing of their personal data carried out by HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. through the website hotelarangues.com.

PURPOSES OF PERSONAL DATA PROCESSING

The personal data collected and processed through the above-mentioned Website will be used solely for the following purposes:

1. To manage the provision of services requested through the Website, such as contact requests or booking management;
2. To periodically send communications with news related to the activity of HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. and the sector in which it operates;
3. Anonymous and aggregated analysis of service usage, in order to identify user habits and trends and improve services and meet users’ needs;
4. In the event of contracting, the data collected through this Website, together with other data obtained within the contractual relationship, will be used for human resources management, compliance with legal obligations, and the provision of the necessary resources for professional activity;
5. Compliance with national and international legal provisions or execution of orders from competent judicial authorities;
6. Compliance with legal obligations arising from applicable data protection legislation, as well as the exercise of data subject rights, in particular the defence of a right in legal proceedings.

HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. guarantees the confidentiality of all data provided. Although HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. processes data securely and uses appropriate techniques to prevent loss or manipulation, it should be noted that data transmission over open networks does not allow absolute security, and there is a risk that data may be accessed and used by unauthorised third parties.

Failure to provide data marked as mandatory may make it impossible to respond to the data subject’s request.

LAWFUL BASIS FOR PERSONAL DATA PROCESSING

HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. processes Users’ data:

1. when they give their free, specific, informed and unambiguous consent for the processing of their personal data for specific purposes; and/or
2. when necessary for the performance of a contract to which the User is a party or for pre-contractual measures at the User’s request; and/or
3. for compliance with legal obligations to which HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. is subject; and/or
4. for the purposes of the legitimate interests pursued by HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring personal data protection.

The User guarantees that the information provided is true, accurate, complete and up to date, and is responsible for any direct or indirect damage or loss that may result from breach of this obligation.

If the data provided belongs to a third party, the User guarantees that they have informed such third party of the matters contained in this document and obtained their authorisation to provide their data to HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. for the indicated purposes.

DATA RETENTION PERIOD

HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. only retains and processes personal data for as long as necessary or required to fulfil the purposes described above, applying appropriate retention criteria in line with applicable legal and regulatory obligations.

HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. keeps personal data in its systems in such a way that data subjects can be identified according to the following criteria:

• for no longer than is necessary for the purposes for which the data was collected, unless legal or contractual obligations require otherwise;
• to comply with specific legal or contractual obligations;
• where applicable and lawful, until the data subject requests objection or erasure.

DATA DISCLOSURE

In addition to disclosures made in compliance with legal obligations, personal data of the data subject may be accessed, in addition to HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A., by:

• external service providers of HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A., acting as data processors;
• national and international companies belonging to the same group as HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A.;
• public authorities, administrations, entities and public bodies, both national and international;
• HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A.

INTERNATIONAL DATA TRANSFERS

Personal data collected will be processed within the European Economic Area, with no international transfers to third countries or international organisations.

In the event of any processing of personal data outside the European Economic Area, it will only take place with appropriate safeguards ensuring the required level of protection under applicable data protection law.

INFORMATION SECURITY

HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. has implemented appropriate technical and organisational security measures to ensure the security of personal data provided by the User, aiming to prevent alteration, loss, processing and/or unauthorised access, in accordance with the state of the art, the nature of the stored data and the risks to which they are exposed.

Personal data is processed at a level of protection required by law to ensure its security and prevent alteration, loss, processing or unauthorised access, acknowledging that internet security measures are not infallible.

Where HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. engages subcontractors for services involving personal data, such entities are required to adopt appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access or any other unlawful processing.

EXERCISE OF RIGHTS

In accordance with the GDPR, the User may exercise their rights of access, rectification and, where applicable, restriction of processing, erasure, portability, objection and withdrawal of consent, by submitting a written request through any of the following means, specifying the right(s) they wish to exercise:

• Email: reservas@hotelarangues.com;
• Postal address: Rua Capitão Tenente Carvalho Araújo, 52 2ºA / 2900-646 Setúbal

SUPERVISORY AUTHORITY

The User also has the right to lodge a complaint with the National Data Protection Commission regarding matters related to the exercise of their rights and the protection of their personal data, if they consider that their data protection rights have been violated.

THIRD-PARTY WEBSITES

The Website may contain advertising, links or other content that directs users to pages and services of suppliers, advertisers, affiliates, sponsors of HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. and other third parties.

However, HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. does not control the content or links appearing on such pages and is not responsible for the practices used by those websites. Users are advised to consult the privacy policies and terms and conditions of such websites.

Browsing or interacting with any other website, including those linking to this Website, is subject to the terms and conditions of those websites, and HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. shall not be held responsible for such access or use.

DATA PROCESSING CARRIED OUT BY THE COMPANY DEVELOPING AND MANAGING THE WEBSITE AS AN INDEPENDENT DATA CONTROLLER

Without prejudice to the data processing carried out by HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. as identified above in Section 1 of this Privacy Policy, we inform the User that MIRAIFUTURE PORTUGAL, LDA., with registered office at Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil and VAT number 515 139 092, may act, in specific situations, as an independent Data Controller, determining autonomously the purposes and means of processing.

This occurs, in particular, in relation to data processed to ensure the operation, maintenance and security of the booking engine.

In such cases, the User’s data will be processed as follows:

• Purpose: to ensure the operation, security and continuous improvement of the Website;
• Legal basis: legitimate interest;
• Retention period: for the strictly necessary period to fulfil these purposes.

Mirai ensures that, even in these cases, only the strictly necessary data is processed, adopting appropriate technical and organisational measures to guarantee its security and confidentiality.

The User may exercise the rights referred to in Section 9 by submitting a written request through any of the following means, specifying the right(s) they wish to exercise:

• Email: portugal@mirai.com;
• Postal address: Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil

They may also exercise the rights set out in Section 10.

CHANGES TO THE PRIVACY POLICY

In order to ensure the adequacy of this document, HOTUBAL – SOCIEDADE DE CONSTRUÇÃO E EXPLORAÇÃO DE HOTÉIS, S.A. reserves the right to amend this Policy at any time it deems appropriate, and Users are therefore advised to review this Privacy Policy regularly and/or each time they access the Website.

Updated on 06/07/2026.