Privacy Policy for www.h2otel.pt

1. Identification of the data controller

Name: Sociedade Termal Unhais da Serra, SA
Head office: Rampa do Jardim, Edifício IMB, 6201-909 Covilhã
NIPC: 504433512
Telephone: +351 275 970 020 (call to national landline network)
Email: h2otel.front@naturaimbhotels.com

2. Duty to inform

The protection of personal data of individuals in Portugal is safeguarded by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and by Law no. 58/2019 of 8 August, which ensure the protection of individuals with regard to the processing of personal data and the free movement of such data.

“Personal data” is considered to be any information, of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person, so the protection does not cover data of legal persons.

An identifiable person is one who can be identified directly or indirectly, in particular by reference to an identification number or to one or more specific elements of their physical, physiological, psychological, economic, cultural or social identity (for example, their name associated with their telephone number or email address).

By reading this Privacy Policy, the User is informed about the processing of their personal data carried out by Sociedade Termal Unhais da Serra, SA through the website www.h2otel.pt.

3. Purposes of personal data processing

The personal data we collect and process through the Website identified above will only be used for the following purposes:

  1. To manage the contracting of services you carry out through the Website, such as contact requests or reservation management;
  2. To periodically send communications with news related to the activity of Sociedade Termal Unhais da Serra, SA and the sector to which it dedicates its activity;
  3. Anonymous and aggregated analysis of service usage, to identify User habits and trends, in order to improve the services offered and meet the specific needs of Users;
  4. In case of contracting, the data collected on this Website, together with other data obtained within the scope of the contractual relationship, will be used for human resources management, to ensure compliance with legal obligations and to provide employees with the necessary means to carry out their professional activity;
  5. Compliance with national and international legal provisions, or to execute an order from the competent judicial authorities;
  6. Compliance with legal obligations, derived from applicable data protection legislation, as well as for the exercise of data subjects’ rights, in particular, the defence of a right in legal proceedings.

Sociedade Termal Unhais da Serra, SA guarantees the confidentiality of all data provided. Although Sociedade Termal Unhais da Serra, SA collects and processes data securely and in a way that prevents its loss or manipulation, using the most appropriate techniques for this purpose, it is important to bear in mind that data collection on open networks does not allow personal data to circulate under conditions of absolute security, and there is a risk that it may be accessed and used by unauthorised third parties.

Failure to respond to data marked as mandatory may make it impossible to respond to the data subject’s request.

4. Legitimacy for personal data processing

Sociedade Termal Unhais da Serra, SA processes User data:

  1. when Users freely, specifically, informedly and unequivocally consent to the processing of their personal data for certain purposes; and/or
  2. when it is necessary for the performance of a contract to which the data User is a party, or for pre-contractual steps at the User’s request; and/or
  3. to comply with legal obligations to which Sociedade Termal Unhais da Serra, SA is subject; and/or
  4. for the purposes of the legitimate interests pursued by Sociedade Termal Unhais da Serra, SA or by third parties, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data prevail.

The User guarantees that the information provided is true, accurate, complete and up-to-date, and is responsible for any damage or loss, direct or indirect, that may be caused as a result of the breach of this obligation.

In the event that the data provided belongs to a third party, the User guarantees that they have informed the said third party of the aspects contained in this document and obtained their authorisation to provide their data to Sociedade Termal Unhais da Serra, SA for the purposes indicated.

5. Retention period

Sociedade Termal Unhais da Serra, SA only retains and processes your personal data for the period that is necessary or mandatory to fulfil the purposes described above, applying information retention criteria appropriate to each processing operation and in line with applicable legal and regulatory obligations.

Sociedade Termal Unhais da Serra, SA keeps personal data in its systems in such a way that it is possible to identify data subjects according to the following criteria:

  • for a period not exceeding the pursuit of the purposes for which they were collected, provided that legal or contractual obligations do not stipulate otherwise;
  • to comply with specific legal or contractual obligations;
  • where applicable and legitimate, until the Data Subject’s eventual request for opposition or erasure.

6. Data communication

In addition to communications made in compliance with legal obligations, the Data Subject’s personal data may be known, in addition to Sociedade Termal Unhais da Serra, SA, by:

  • external service providers of Sociedade Termal Unhais da Serra, SA, in their capacity as subcontractors;
  • national and international companies belonging to the same group as Sociedade Termal Unhais da Serra, SA;
  • authorities in general, administrations, public entities and bodies, both national and international;
  • Sociedade Termal Unhais da Serra, SA

7. International data transfers

The personal data collected will be processed within the European Economic Area, and there will be no international data transfers to third countries or international organisations.

In the event of any processing of personal data outside the European Economic Area, this will only occur with the adoption of appropriate safeguards and the required level of protection, in accordance with personal data protection legislation.

8. Information security

Sociedade Termal Unhais da Serra, SA has implemented appropriate technical and organisational security measures to guarantee the security of the personal data provided by the User, aiming to prevent its alteration, loss, unauthorised processing and/or access, taking into account the current state of technology, the nature of the data stored and the risks to which they are exposed.

Personal data is processed with the legally required level of protection to guarantee its security and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, with the User being aware and accepting that security measures on the Internet are not impregnable.

Should Sociedade Termal Unhais da Serra, SA subcontract the provision of services involving the transfer of personal data to other entities, these entities will be obliged to adopt the necessary technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access or any other type of unlawful processing.

9. Exercise of rights

In accordance with the provisions of the GDPR, the User may exercise their rights of access, rectification and, where applicable, restriction of processing, erasure, portability, objection and withdrawal of consent, under the terms of the GDPR, by requesting it in writing by any of the following means, specifying the right or rights they wish to exercise:

10. Supervisory authority

The User also has the right to lodge a complaint with the National Data Protection Commission regarding matters related to the exercise of their rights and the protection of their personal data, should they consider that their data protection rights have been violated.

11. Third-party pages

The Website may contain advertisements, links or other content that link or redirect to pages and services of suppliers, advertisers, affiliates, sponsors of Sociedade Termal Unhais da Serra, SA and other third parties.

However, Sociedade Termal Unhais da Serra, SA does not control the content or links that appear on these pages and is not responsible for the practices used by these pages or websites. Sociedade Termal Unhais da Serra, SA advises Users to visit the privacy policy of such pages, as well as their terms and conditions.

Browsing or interacting on any other website, including those that have an external link to the Website, are subject to the terms and conditions of that website. In no case shall Sociedade Termal Unhais da Serra, SA be responsible for such access and use.

12. Data processing carried out by the company that develops and manages the website as an autonomous data controller

Without prejudice to the processing of data collected through the Website being the responsibility of Sociedade Termal Unhais da Serra, SA, as identified above in Section 1 of this Privacy Policy, we inform the User that MIRAIFUTURE PORTUGAL, LDA., with headquarters at Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil and with NIPC 515 139 092, may act, in specific situations, as Data Controller, autonomously determining the purposes and means of processing.

This occurs, namely, in relation to data processed to ensure the operation, maintenance and security of the booking engine.

In these situations, User data will be processed in accordance with the information below:

  • Purpose: to guarantee the operability, security and continuous improvement of the Website;
  • Lawful basis: legitimate interest;
  • Retention period: for the period strictly necessary to pursue these purposes.

Mirai ensures that, even in these situations, it only processes strictly necessary data, adopting appropriate technical and organisational measures to guarantee its security and confidentiality.

The User may exercise the rights referred to in Section 9, by requesting it in writing by any of the following means, specifying the right or rights they wish to exercise:

  • Email: portugal@mirai.com;
  • Postal address: Buganvília Plaza 1, Quinta do Lago, 8153-013 Almancil

You may also exercise the rights provided for in Section 10.

13. Changes to the Privacy Policy

To ensure the suitability of the document, Sociedade Termal Unhais da Serra, SA reserves the right to review this Policy at any time it deems appropriate, so it is recommended that Users check this privacy policy regularly and/or every time they access the Website.

Updated on 8/10/2026.