1. Identification

For the purposes of data protection regulations, specifically Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons about the processing of personal data and on the free movement of such data, (hereinafter “GDPR”) we inform you that the details of the Data Controller are as follows:

• Data Controller:NH Hotel Rallye Portugal (hereinafter referred to as “NH Hotel Rallye Portugal”)
• Tax Identification Number:506618897
• Address:Avenida da Liberdade, No. 185, 1250-141 Lisbon
• Data Protection Officer (DPO)can be contacted via email:  dpo@minor-hotels.com

 

2. Information and consent

By accepting this Privacy Policy, you give your free, informed, specific and unequivocal consent for NH Hotel Rallye Portugal to process the personal data provided through this website (hereinafter, the “Website”) as Data Controller.

The user must carefully read this Privacy Policy, which has been drafted in a clear and simple manner to facilitate its understanding and indicate freely and voluntarily if you wish to provide your personal data to NH Hotel Rallye Portugal.

3. Purposes of data processing and basis of legitimacy of the data

The personal data provided will be processed by NH Hotel Rallye Portugal for the following purposes:

• To inform candidates about the recruitment processes, different job opportunities, and corporate information through the “Join us” section. The legal basis for managing the recruitment process is the pre-contractual relationship between the entity and the candidate.
• To manage the application for positions at one of the hotels in Portugal, Europe, and worldwide through the frequently asked question section (“FAQS”). The legal basis for managing the recruitment process is the pre-contractual relationship between the entity and the candidate.
• To manage the sending of alerts to inform you of the publication of job offers that may match your saved search preferences. The legal basis for this treatment is explicit consent.
• To improve the service and customer experience by using a Chatbox which ensures we can continuously assist and promptly reply to customer inquiries. The legal basis for this processing activity is explicit consent.
• To send commercial communications containing Job Offers or News in case you have subscribed to our marketing communications regarding the latest opportunities. The legal basis for this processing activity is explicit consent.
• To share personal data and profile with entities of the MINOR chain, so that they may contact the candidate in case of another job opportunity. The legal basis for this data processing is the pre-contractual relationship.
• To elaborate statistics reports on the user profile based on their access habits and the activity carried out on the Website, and where appropriate, in accordance with our cookies policy, to develop and improve the functioning of the Website. The legal basis for this treatment is legitimate interest.
• To comply with the specific legal obligations that NH Hotel Rallye Portugal is subjected to. The legal basis for this processing activity is the compliance of the data controller’s obligations.

 

4. Type of data processed

We manage your personal data to provide you with the services you have requested from us through your interactions on the Website, by requesting certain personal information. Such personal data may include:

• Browsing data: IP address, tracking technologies.
• Identification data:Name and surname.
• Contact data:email address.

 

We do not collect the following special categories of personal data about you: race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, genetic, biometric data, and criminal convictions and offenses. 

5. Conservation period

We will only retain your personal data as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint, or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

In order to determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements of the relevant country.

6. Recipients of your Personal Data

Your personal data will be communicated to the entity of the MINOR group to which you directed your application. Additionally, if the candidate gives their consent, their personal data will be communicated to all entities of the MINOR group, so that they may contact them in case of vacancy openings. All these entities can be found through the link Companies of NH Hotel Group | NH Hotel Group (nh-hoteles.es)

In order to carry out our activity, agreements will be established with trusted suppliers and service providers that may access our systems in order to provide services to us or to provide them to you on our behalf. In these cases, we have entered into appropriate processing agreements with each of them. An example of a service provider includes companies that provide information technology and related infrastructure provision or customer service. Those service providers will not process your data for their own purposes.

7. International Data Transfers

Companies integrated or adhered to the Group, all dedicated to the hotel sector, will need to have access to your personal data as indicated, and some of them may be located outside the European Economic Area, being necessary the communication so that the entity for which you provide services can fulfill the obligations included in your work contract,

8. Data protection rights

The data subject may at any time and free of charge contact the Data Controller at the address indicated at the beginning of this Policy, or send an email to dataprotection@minor-hotels.com, always attaching, when requested, a copy of their identity document or another suitable document for proving their identity. The data subject can exercise any of the following rights:

• Access their personal data.
• Rectify incorrect or incomplete data.
• Revoke the consents granted.
• Request the portability of their data.
• Request the deletion of their data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• Obtain from the Data Controller the limitation of data processing when any of the conditions stipulated in the data protection regulations are not met.
• File a complaint with the competent Data Protection Authority when the data subject considers that the Data Controller has violated the rights recognized by the applicable data protection regulation.

 

We may need to ask you for specific information to help us confirm your identity and ensure your right to access your personal data (or to exercise any other rights). This is a security measure to ensure that personal data is not disclosed to anyone who is not entitled to receive it. We may also contact you to request further information in relation to your request to expedite our response.

You will not be charged for accessing your personal information (or for exercising any other rights). However, we may charge you an acceptable administrative fee if your request is clearly unwarranted, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances, and we will provide you with a reason for the refusal.

We aim to comply with all valid requests within one month or withing the period specified in the applicable data protection legislation. Occasionally, it may take longer than one month if your request is particularly complex or if you have made several requests. In this case, we will notify you and keep you informed.

9. Security Measures

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorized manner, altered or shared. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and are bound by a duty of confidentiality.

We have put in place procedures to deal with any suspected breach of personal data and will notify you and any applicable regulator if a breach occurs where we are legally obliged to do so.

10. Liability

This Web Site is not intended for use by minors, and we do not knowingly collect data relating to minors.

You guarantee that you have informed those third parties whose data you have provided, if any, of the points discussed in this Privacy Statement. Furthermore, you warrant that you have obtained their permission to provide us with their data for the purposes indicated.

You will be liable for any false or inaccurate information you provide and for any direct or indirect damage you may cause both to us and to third parties.

11. Changes to this Privacy Policy

We periodically review our Privacy Statement. At the bottom of this page, you will see the date on which the Privacy Statement was last revised, and it also corresponds to the date on which any changes will become effective. Your use of the Services after these changes means that you accept the revised Privacy Statement. If you would like to review the version of the Privacy Statement that was in effect immediately prior to this revision, please write to us at dpo@nh-hotels.com

It is also important that the personal data we hold about you is accurate and up to date. Please keep us informed if your personal data changes throughout your relationship with us. 

Last update: October 2024