Privacy Policy

1 - Personal data

What is personal data?Personal Data is any information, of any nature and in any medium, relating to an identified or identifiable natural person. An identifiable person is one who can be identified directly or indirectly, for example by name, identification number, location data, an electronic identifier or other elements that allow the identification of that natural person. The privacy and protection of the personal data of all Customers and users of the services provided by Albergaria do Bomfim - Empreendimentos Turísticos, Lda., at all times, constitute an essential aspect in the way it operates and organizes itself. Privacy Policy of Albergaria do Bonfim - Tourist Enterprises, Lda. aims to ensure that all its Customers are aware, at all times, of the rules and principles relating to the protection and processing of personal data, making every possible effort to ensure the security of such data, in accordance with the rules and procedures defined in applicable legislation. On the website of Albergaria do Bomfim - Tourist Enterprises, Lda. You may find links to other websites that are not related to our company. The provision of such links is done in good faith, and Albergaria do Bomfim - Empreendimentos Turísticos, Lda. cannot be held liable for any damages caused by the use of such links. be held responsible for the collection and processing of personal data carried out on these websites, nor be held responsible for the accuracy, credibility and functionality of websites belonging to third parties. Therefore, the provision of links to other websites outside of Albergaria do Bomfim - Empreendimentos Turísticos, Lda. does not imply any assumption of responsibility in relation to them. Hostelry of Bonfim - Tourist Enterprises, Lda. also recommends that its Customers adopt additional security measures, including maintaining equipment and programs that are properly updated and configured, using protection against malicious software and firewalls, and not browsing websites for which there are no appropriate guarantees of authenticity. This Privacy Policy may, at any time, be subject to change or revision, and any changes or revisions will be duly disclosed and communicated on the website of Albergaria do Bonfim - Empreendimentos Turísticos, Lda. Who are the holders of personal data? The Customer or User, a natural person, to whom the data relates and who has used the services or products of Albergaria do Bonfim - Empreendimentos Turísticos, Lda. The Client will be the person who enters into the contract with Albergaria do Bonfim - Empreendimentos Turísticos, Lda. and the User is the person who uses the services or products of Albergaria do Bonfim - Empreendimentos Turísticos, Lda. Hostelry of Bonfim - Tourist Enterprises, Lda. informs that it equally protects personal data and respects the rights of customers and users. 2 - Processing of personal data

Who is the controller of your personal data? The person responsible for processing your personal data will be the company Albergaria do Bonfim - Empreendimentos Turísticos, Lda. that provides you with the service or supplies the product and that within this scope decides which data is collected, the means of processing and the purposes for which the data is used. 3 - Basis for the processing of personal data

These are the circumstances in which we process your personal data: • Consent When you have your express consent – in writing, or by validating an option on an electronic form and if that consent is free, informed, specific and unambiguous. • Execution of contract and pre-contractual diligence When the processing of personal data is necessary for the conclusion, execution and management of the contract entered into with Albergaria do Bomfim - Empreendimentos Turísticos, Lda., such as for the preparation of a service proposal, for the management of contacts, information and requests, for the management of billing, collection and payments. • Compliance with legal obligation When the processing of personal data is necessary to comply with a legal obligation to which Albergaria do Bomfim - Empreendimentos Turísticos, Lda. is subject. be subject. • Consent by minors In the case of processing personal data of minors, which may be subject to prior consent, Albergaria do Bomfim - Empreendimentos Turísticos, Lda. will require consent to be provided by those holding parental responsibilities. 4 - Purposes and period of data processing

Your personal data is processed by Albergaria do Bomfim - Tourist Enterprises, Lda. only for the period of time necessary to achieve the defined purpose or, as applicable, until you exercise your right to object, right to be forgotten or withdraw consent. After the respective conservation period has elapsed, Albergaria do Bomfim - Empreendimentos Turísticos, Lda. will delete or anonymize data whenever it should not be kept under the terms of the law.

For what purposes do we process your Personal Data? • Marketing – promoting the company through the dissemination of events • Customer Management and Provision of Services • Accounting, Tax and Administrative Management • Compliance with legal obligations Albergaria do Bonfim - Empreendimentos Turísticos, Lda. may, in the exercise of its activity and within the scope of the Services it provides, subcontract third parties to achieve the aforementioned purposes, which may imply access by these entities to the personal data of its Customers. When this happens, Albergaria do Bonfim - Tourist Enterprises, Lda. takes appropriate measures to ensure that entities that will have access to the data offer the highest technical, organizational and human guarantees at that level. Therefore, Third Parties subcontracted by Albergaria do Bonfim - Tourist Enterprises, Lda. shall be obliged, under the terms provided for by law, as well as by virtue of an agreement signed with the former, to implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, dissemination, alteration, disclosure, unauthorized access and against any other form of unlawful processing, and shall also be bound by special duties of professional secrecy and confidentiality. Outside of these cases, Albergaria do Bonfim - Tourist Enterprises, Lda. will only transmit the personal data of its Customers to Third Parties when: a) it is obliged to do so by force of legal provision and only to the strict extent of its obligations; b) If the Customer expressly and specifically authorizes such transmission and is duly informed, in writing, about the recipients of the personal data and the purposes of the transmitted data. What are the processing and storage periods for personal data? Hostelry of Bonfim - Tourist Enterprises, Lda. processes and stores your personal data in accordance with the purposes for which they are processed. There are cases where the law requires the processing and storage of data for a minimum period of time. However, whenever there is no specific legal obligation, then the data will be processed only for the period necessary to fulfill the purposes that motivated its collection and preservation and always in accordance with the law, guidelines and decisions of the CNPD. Therefore, the Albergaria do Bonfim - Tourist Enterprises, Lda. will process and retain your personal data for the period during which it maintains a contractual relationship with you. Hostelry of Bonfim - Tourist Enterprises, Lda. may keep other personal data for periods longer than the duration of the contractual relationship, either based on your consent, or to ensure rights or duties related to the contract, or because it has legitimate interests that justify it, but always for the period strictly necessary to achieve the respective purposes and in accordance with the guidelines and decisions of the CNPD. Personal data processed for the purposes indicated above are kept for the period of time strictly necessary to achieve those purposes. 5 - Collection of personal data

We collect personal data with your consent when you purchase products or services from Albergaria do Bonfim - Empreendimentos Turísticos, Lda. The collection can be done orally, in writing or through the website of Albergaria do Bonfim - Empreendimentos Turísticos, Lda. But your personal information may also be collected from publicly accessible or other sources. Hostelry of Bonfim - Tourist Enterprises, Lda. only collects and processes Customers' personal data with their express consent, in accordance with each of the specific purposes of the processing in question, under the terms set out in the General Data Protection Regulation. The consent provided by Customers may be withdrawn by them at any time. There are, however, personal data that are essential for the provision of Services by Albergaria do Bonfim - Empreendimentos Turísticos, Lda., (mandatory data), with Customers being duly and previously informed of this need and of the consequences of not providing said data. If personal data, considered essential, is not provided by Customers or is insufficient, incorrect or out of date, Albergaria do Bonfim - Empreendimentos Turísticos, Lda. will not be able to provide the contracted Service(s), in which case the Customers assume full and exclusive responsibility for the insufficiency or incorrectness of the data transmitted. 6 - Data protection rights

What are your rights? Right of access Right to obtain confirmation of which of your personal data are processed and information about them, such as the purposes of the processing, the retention periods, among others. Right to rectification Right to request the rectification of your personal data that is inaccurate or request that incomplete personal data be completed, such as address, CPF, email, telephone contacts, or others. Right to erasure or to be “forgotten” Right to obtain the erasure of your personal data, provided that there are no valid grounds for retaining it, such as cases in which the data must be retained to comply with a legal obligation. Right to portability Right to receive the data you have provided to us in a commonly used and automatically readable digital format or to request the direct transmission of your data to another entity that becomes the new controller of your personal data. Right to object and automated individual decision-making Right to object or withdraw your consent at any time to data processing, such as in the case of data processing for marketing purposes. Right to limitation Right to request the limitation of the processing of your personal data, in the form of: • Suspension of processing • Limitation of the scope of processing to certain categories of data or processing purposes. Right to complain Right to submit a complaint to the supervisory authority, the CNPD, in addition to the complaint addressed to Albergaria do Bomfim - Empreendimentos Turísticos, Lda. How can you exercise your rights? The exercise of rights is free of charge, except if the request is manifestly unfounded or excessive, in which case a reasonable fee may be charged taking into account the costs. Information must be provided in writing. Hostelry of Bomfim - Tourist Enterprises, Lda. must verify your identity through written proof. Responses to requests must be provided within a maximum period of 30 days, unless the request is particularly complex. Exercise your rights through the following addresses: Company: Albergaria do Bonfim - Tourist Enterprises, Lda. Address: Rua 31 de Janeiro, n.º30, 7300-211 Portalegre Email: geral@donamariagh.com7 - Protection of personal data

How does Albergaria do Bonfim - Empreendimentos Turísticos, Lda. protect your personal data? Albergaria do Bonfim - Empreendimentos Turísticos, Lda. applies the necessary technical and organizational measures to ensure that, by default, only the personal data of Customers necessary for each specific processing purpose will be processed, and these are reviewed and updated periodically by the responsible department. Albergaria do Bonfim - Empreendimentos Turísticos, Lda. has implemented the appropriate, necessary and sufficient logical, physical, organizational and security measures to protect your personal data against destruction, loss, alteration, dissemination, unauthorized access or any other form of accidental or unlawful processing. Whenever it is necessary to communicate personal data of its Customers to Third Parties, Albergaria do Bonfim - Empreendimentos Turísticos, Lda. will be responsible for the personal data in question and guarantees that: a) the sharing of personal information complies with the legal standards in force; b) the transmission is carried out securely; c) third parties are contractually obliged to observe the duties of confidentiality and secrecy and to ensure the security of the personal data communicated to them for this purpose, and may not use such data for any other purposes, for their own benefit or that of third parties, nor correlate it with other data that they have available. Cookie Data Albergaria do Bonfim - Empreendimentos Turísticos, Lda. uses cookies on its website to improve the performance and user experience of the website. What are cookies? Cookies are small text files stored on the Customer's computer through the internet browser, storing only information related to the user's preferences (generic information), and therefore not including the user's personal data. The cookies used by Albergaria do Bonfim - Empreendimentos Turísticos, Lda. observe the principles of anonymity and confidentiality and have the sole purpose of recognizing the user, and are not used under any circumstances to collect information that identifies the user, nor for direct marketing purposes. Cookies help the Albergaria do Bonfim - Empreendimentos Turísticos, Lda. website to recognize the user's device the next time they visit it. At any time, the user can, through their internet browser, decide to be notified about the reception of cookies, as well as block their entry into their system. Please note that refusing to use cookies on the website may result in the user being unable to access some of its areas and/or receive personalized information. What are cookies for? Cookies are used to help determine the usefulness, interest and number of uses of the Albergaria do Bonfim - Empreendimentos Turísticos, Lda. website, allowing for faster and more efficient navigation, eliminating the need to repeatedly enter the same information. What type of cookies does Albergaria do Bonfim - Empreendimentos Turísticos, Lda. use? The cookies used by Albergaria do Bonfim - Empreendimentos Turísticos, Lda. have different functions and are distinguished as follows: 1 – Strictly necessary cookies (essential): allow navigation on the website and the use of its applications, as well as access to secure areas of the website. Without these cookies, the Service(s) subscribed to by the Customer cannot be provided. Some cookies are essential to access specific areas of the Albergaria do Bonfim - Empreendimentos Turísticos, Lda. website. 2 – Analytical cookies: performance cookies to know which pages are most popular, which links between pages are most effective or to determine why some pages are receiving error messages. These cookies are used only for the purposes of creating and analyzing statistics, without ever collecting personal information. 3 – Functionality cookies: save the user's preferences regarding the use of the website, so that it is not necessary to reconfigure the website each time it is visited. Cookies can be:Permanent: These are stored for a variable period of time in the internet browser on your access devices and are used whenever the user revisits the website. They are normally used to direct navigation according to the user's interests, allowing us to provide a more personalized service.Session Cookies: These are temporary and remain in the cookies of your internet browser until you leave the website. The information obtained allows us to identify problems and provide a better browsing experience. How to manage Cookies? All internet browsers allow the user to accept, refuse or delete cookies, in particular by selecting the appropriate settings in their internet browser. After authorizing the use of cookies, the user may always disable some or all of Albergaria do Bomfim - Empreendimentos Turísticos, Lda.'s cookies.