PRIVACY POLICY OF THE WEBSITE www.phchotels.pt

IDENTIFICATION OF THE DATA CONTROLLER

  • Name: Sociedade Hoteleira de Turismo SA.
  • Registered Office: Praça Martim Moniz 2, Lisbon
  • Corporate Tax Identification Number: 500258554
  • Telephone: +351 218 842 000 (call to the national landline network)
  • Email: dpd@phchotels.pt

DUTY TO INFORM

The protection of the personal data of natural persons in Portugal is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and Law No. 58/2019 of 8 August, which ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data.

“Personal data” means any information of any nature, regardless of the medium in which it is held, including sound and images, relating to an identified or identifiable natural person. Therefore, this protection does not extend to data relating to legal persons.

A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, psychological, economic, cultural or social identity (for example, their name associated with their telephone number or email address).

By reading this Privacy Policy, the User is informed about the processing of their personal data carried out by Sociedade Hoteleira de Turismo SA. through the website www.phchotels.pt.

PURPOSES OF PERSONAL DATA PROCESSING

The personal data we collect and process through the aforementioned Website will be used solely for the following purposes:

  1. Managing the contracting of services through the Website, such as contact requests or reservation management;
  2. Periodically sending communications containing news relating to the activities of Sociedade Hoteleira de Turismo SA. and the sector in which it operates;
  3. Conducting anonymous and aggregated analyses of service usage to identify Users’ habits and trends, in order to improve the services offered and meet Users’ specific needs;
  4. In the event of employment, the data collected through this Website, together with other data obtained within the scope of the contractual relationship, will be used for human resources management, to ensure compliance with legal obligations and to provide employees with the means necessary to carry out their professional activities;
  5. Complying with national and international legal provisions or executing orders issued by the competent judicial authorities;
  6. Complying with legal obligations arising from applicable data protection legislation, as well as exercising data subjects’ rights, particularly the defence of a right in legal proceedings.

Sociedade Hoteleira de Turismo SA. guarantees the confidentiality of all data provided. Although Sociedade Hoteleira de Turismo SA. collects and otherwise processes data securely, taking measures to prevent its loss or manipulation and using the most appropriate techniques for this purpose, it is important to bear in mind that data collection over open networks does not allow personal data to be transmitted under conditions of absolute security, and there is a risk that such data may be accessed and used by unauthorised third parties.

Failure to provide the information marked as mandatory may make it impossible to respond to the data subject’s request.

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

Sociedade Hoteleira de Turismo SA. processes Users’ personal data:

  1. when they give their free, specific, informed and unambiguous consent to the processing of their personal data for specific purposes; and/or
  2. when it is necessary for the performance of a contract to which the User is a party, or for taking pre-contractual steps at the User’s request; and/or
  3. to comply with legal obligations to which Sociedade Hoteleira de Turismo SA. is subject; and/or
  4. for the purposes of the legitimate interests pursued by Sociedade Hoteleira de Turismo SA. or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data.

The User guarantees that the information provided is true, accurate, complete and up to date, and is responsible for any damage or loss, whether direct or indirect, that may result from a breach of this obligation.

If the data provided belongs to a third party, the User guarantees that they have informed that third party of the matters set out in this document and obtained their authorisation to provide their data to Sociedade Hoteleira de Turismo SA. for the stated purposes.

DATA RETENTION PERIOD

Sociedade Hoteleira de Turismo SA. only retains and processes your personal data for the period necessary or required to fulfil the purposes described above, applying data retention criteria appropriate to each processing activity and in accordance with the applicable legal and regulatory obligations.

Sociedade Hoteleira de Turismo SA. stores personal data in its systems in such a way that data subjects can be identified in accordance with the following criteria:

  • for a period no longer than necessary to fulfil the purposes for which the data was collected, unless otherwise provided for by legal or contractual obligations;
  • to comply with specific legal or contractual obligations;
  • where applicable and lawful, until the Data Subject submits a request to object to the processing or to have their data erased.

DATA SHARING

In addition to disclosures made in compliance with legal obligations, the personal data of the Data Subject may be accessed, in addition to Sociedade Hoteleira de Turismo SA., by:

  • external service providers of Sociedade Hoteleira de Turismo SA., acting as data processors;
  • national and international companies belonging to the same group as Sociedade Hoteleira de Turismo SA.;
  • authorities in general, administrations, public entities and bodies, both national and international;
  • Sociedade Hoteleira de Turismo SA.

INTERNATIONAL DATA TRANSFERS

The personal data collected will be processed within the European Economic Area, and no international data transfers to third countries or international organisations will take place.

In the event that personal data is processed outside the European Economic Area, this will only take place subject to the adoption of appropriate safeguards and the required level of protection, in accordance with personal data protection legislation.

INFORMATION SECURITY

Sociedade Hoteleira de Turismo SA. has implemented appropriate technical and organisational security measures to ensure the security of the personal data provided by the User, with the aim of preventing its alteration, loss, processing and/or unauthorised access, taking into account the current state of technology, the nature of the data stored and the risks to which it is exposed.

Personal data is processed with the level of protection required by law to ensure its security and prevent its alteration, loss, processing or unauthorised access, taking into account the state of technology. The User acknowledges and accepts that security measures on the Internet are not impregnable.

If Sociedade Hoteleira de Turismo SA. subcontracts other entities to provide services involving the transfer of personal data, those entities will be required to adopt the necessary technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access or any other form of unlawful processing.

EXERCISE OF DATA SUBJECT RIGHTS

In accordance with the provisions of the GDPR, the User may exercise their rights of access, rectification and, where applicable, restriction of processing, erasure, data portability, objection and withdrawal of consent, under the terms of the GDPR, by submitting a written request through any of the following means, specifying the right or rights they wish to exercise:

  • Email: dpd@phchotels.pt;
  • Postal address: Praça Martim Moniz 2, Lisbon

SUPERVISORY AUTHORITY

The User also has the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) regarding matters relating to the exercise of their rights and the protection of their personal data, if they consider that their data protection rights have been infringed.

THIRD-PARTY WEBSITES

The Website may contain advertisements, links or other content that link to or redirect users to pages and services provided by suppliers, advertisers, affiliates, sponsors of Sociedade Hoteleira de Turismo SA. and other third parties.

However, Sociedade Hoteleira de Turismo SA. does not control the content or links appearing on these pages and is not responsible for the practices employed by such pages or websites. Sociedade Hoteleira de Turismo SA. advises Users to consult the privacy policy of such pages, as well as their terms and conditions.

Browsing or interacting with any other website, including those containing an external link to the Website, is subject to the terms and conditions of that website. Sociedade Hoteleira de Turismo SA. shall under no circumstances be responsible for such access or use.

PROCESSING OF PERSONAL DATA BY THE COMPANY THAT DEVELOPS AND MANAGES THE WEBSITE AS AN INDEPENDENT DATA CONTROLLER

Without prejudice to the fact that the processing of data collected through the Website is the responsibility of Sociedade Hoteleira de Turismo SA., as identified above in Section 1 of this Privacy Policy, we hereby inform the User that MIRAIFUTURE PORTUGAL, LDA., with registered office at Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil, and corporate tax identification number 515 139 092, may act, in specific circumstances, as a Data Controller, independently determining the purposes and means of processing.

This applies, in particular, to data processed to ensure the operation, maintenance and security of the booking engine.

In such cases, the User’s data will be processed in accordance with the information below:

  • Purpose: to ensure the Website’s operation, security and continuous improvement;
  • Legal basis: legitimate interest;
  • Data retention period: for the period strictly necessary to fulfil these purposes.

Mirai ensures that, even in these circumstances, it only processes the data strictly necessary, adopting appropriate technical and organisational measures to guarantee its security and confidentiality.

The User may exercise the rights referred to in Section 9 by submitting a written request through any of the following means, specifying the right or rights they wish to exercise:

  • Email: portugal@mirai.com;
  • Postal address: Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil

The User may also exercise the rights provided for in Section 10.

CHANGES TO THE PRIVACY POLICY

To ensure that this document remains up to date, Sociedade Hoteleira de Turismo SA. reserves the right to revise this Policy whenever it deems appropriate. Users are therefore advised to review this Privacy Policy regularly and/or each time they access the Website.

Updated on 22/09/2026.