This website is maintained and operated by Nova Naturalia Pousada Ltda.
We collect and use some personal datas that belongs to the users of our website. In doing so, we act as the controller of such data and are subject to the provisions of Federal Law no. 13,709 / 2018 (General Law on Protection of Personal Data – LGPD).
We take care of the protection of your personal data and, therefore, we provide this privacy policy, which contains important information about:
– Who should use our site – What data we collect and what we do with it; – Your rights in relation to your personal data; and – How to contact us.
1. Who should use our website
Our website should only be used by people over eighteen years of age. Therefore, children and adolescents should not use it.
2. Data we collect and reasons for collection
Our website collects and uses some personal data from our users, in accordance with the provisions of this section.
1. Personal data provided expressly by the user
We collect the following personal data that our users expressly provide to us when using our website:
Name e-mail Telephone Home address
The collection of this data occurs at the following times:
– When the user queries for vacancy availability; – When the user confirms a reservation; – When the user sends a message to the inn;
The data provided by our users is collected for the following purposes:
– So that the inn can contact the user; – So that the hostel can confirm a reservation on behalf of the user;
2. Sensitive data
Sensitive data from our users will not be collected, thus understood those defined in arts. 11 et seq. Of the Personal Data Protection Law. Thus, there will be no data collection on racial or ethnic origin, religious conviction, political opinion, union membership or religious, philosophical or political organization, health or sexual life data, genetic or biometric data, when linked to a natural person.
3. Data for children and adolescents
We collect the following data from children and adolescents:
Name Age
Data collection from children and adolescents takes place at the following times:
– When the user confirms his reservation;
The child and adolescent data we collect is used exclusively for the following purposes:
– To make sure the child’s age;
Data processing of children and adolescents is carried out based on the best interest of the child or adolescent.
4. Cookies
Cookies are small text files automatically downloaded to your device when you access and browse a website. They basically serve to identify devices, activities and user preferences.
The cookies don’t allow any file or information to be extracted from the user ‘s hard disk, it is not possible also through them to get access to personal information that
don’t have the user authorization or how you use the site’s features.
- Cookies of the site
The cookies of the site are those sent to the user’s computer or administrator exclusively for the site.
The information collected through these cookies is used to improve and personalize the user experience, and some cookies can, for example, be used to remember the user’s preferences and choices, as well as to offer personalized content.
B. Third-party cookies
Some of our partners may set cookies on the devices of users who access our website.
These cookies , in general, aim to enable our partners to offer their content and services to the user who accesses our website in a personalized way, by obtaining navigation data extracted from their interaction with the website.
The user can obtain more information about third party cookies and how the data obtained from it is treated, in addition to having access to the description of the cookies used and their characteristics, by accessing the following link :
Google Analytics
The entities in charge of collecting cookies may transfer the information obtained to third parties.
C. Cookies management
The user will be able to oppose the registration of cookies by the website, just by disabling this option in his own browser. More information on how to do this in some of the main browsers used today can be accessed from the following links :
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Mozila Firefox: https://support.mozilla.org/pt-BR/kb/ative-e-desative-os-cookies-que-os-sites-usam
Opera: https://www.opera.com/help/tutorials/security/privacy/
The deactivation of cookies , however, can affect the availability of some tools and functionalities of the website, compromising its correct functioning. Another possible consequence is the removal of user preferences that may have been saved, damaging their experience.
5. Collection of data not expressly provided
Eventually, other types of data not expressly provided for in this Privacy Policy may be collected, as long as they are provided with the user’s consent, or even if the collection is allowed based on another legal basis provided by law.
In any case, the data collection and the resulting processing activities will be informed to the users of the website.
3. Sharing personal data with third parties
We don’t share your data’s with third parties. Despite this, it’s possible that we may need to access your data to comply with a legal request from a regulatory body or public authority.
4. How long will your personal data be stored
The personal data collected by the website are stored and used for a period of time that corresponds to what is necessary to achieve the purposes listed in this document and that considers the rights of its owners, the rights of the website controller and the applicable legal or regulatory provisions.
Once the periods for storing personal data have expired, they are removed from our databases or anonymized, except in cases where there is the possibility or the need for storage due to legal or regulatory provision.
5. Legal bases for the processing of personal data
A legal basis for the processing of personal data is nothing more than a legal basis, provided by law, that justifies it. So each operation of processing personal data must have a corresponding legal basis.
1. Non-sensitive personal data
We treat our users’ non-sensitive personal data in the following cases:
– with the consent of the holder of the personal data
– in the case of obeying a legal obligation or regulatory obligation by the controller
2. Data from children and adolescents
The processing of data on children and adolescents is based on the consent of at least one of their parents or the legal representative.
Personal data from children may be collected without the consent mentioned in the previous paragraph when the collection is necessary to contact the parents or legal guardian, used only once and without storage, or for their protection.
3. Consent
Certain operations for the processing of personal data carried out on our website will depend on the user’s prior agreement, who must express it in a free, informed and unambiguous manner.
The user can revoke his consent at any time, and, if there is no legal possibility that allows or requires the storage of data, the data provided by consent will be deleted.
In addition, if desired, the user may not agree to any operation of processing personal data based on consent. In these cases, however, it is possible that you will not be able to use any functionality of the website that depends on that operation. The consequences of a lack of consent for a specific activity are reported prior to treatment.
4. Compliance with legal or regulatory obligation by the controller
Some operations of processing personal data, especially data storage, will be carried out so that we can comply with obligations provided for by law or other regulatory provisions applicable to our activities.
6. User rights
The user of the website has the following rights, conferred by the Personal Data Protection Law:
– confirmation of the existence of treatment; – access to data; – correction of incomplete, inaccurate or outdated data; – anonymization, blocking or elimination of unnecessary, excessive or treated data that does not comply with the provisions of the law; – data portability to another service or product provider, upon express request, in accordance with the regulations of the national authority, subject to commercial and industrial secrets; – elimination of personal data processed with the consent of the holder, except in cases provided for by law; – information from public and private entities with which the controller made shared use of data; – information about the possibility of not giving consent and about the consequences of the refusal; – revocation of consent.
It’s important to note that, under the terms of the LGPD, there is no right to erase data processed on a legal basis other than consent, unless the data is unnecessary, excessive or processed in breach of the law.
1. How can the holder exercise his rights
In order to ensure that the user who intends to exercise their rights is, in fact, the holder of the personal data, subject of the request, we may request documents or other information that may help in their identification. , in order to safeguard our rights and the rights of third parties. However, this will only be done if it is absolutely necessary and the applicant will receive all related information.
7. Security measures in the processing of personal data
We protect your personal data against unauthorized access, destruction, loss or alteration of this data.
The measures we use take into account the nature of the data, the context and the purpose of the processing, the risks that a possible violation would create for the rights and freedoms of the user, and the standards currently used on the market by companies similar to ours. Among the security measures adopted by us, we highlight the following:
– Our users’ data is stored in a secure environment; – We limit access to our users’ data, so that unauthorized third parties cannot access it; – We use SSL ( Secure Socket Layer ) certificate , so that data transmission between users’ devices and our servers takes place in encrypted form; – We keep records of all those who, in some way, have contact with our data.
We also inform that we have the ISO 27001 certification. We therefore follow the highest technical standards in terms of information security, so that it is possible for us to protect the personal data of our users.
Even if we take all precautions to avoid security incidents, it is possible that there is a problem that is motivated exclusively by a third party – as in the case of hacker or cracker attacks or, even in the case of the sole fault of the user, which may occur, for example, when he himself transfers his data to a third party. Thus, although we are generally responsible for the personal data that we process, we are exempt from any liability in the event of an exceptional situation like this, over which we have no control.
8. Complaint to a supervisory authority
Without prejudice to any other means of administrative or judicial appeal, holders of personal data who feel, in any way, injured, may submit a complaint to the National Data Protection Authority.
9. Changes to this policy
This version of this Privacy Policy was last updated on: 10/20/2020.
We reserve the right to modify these rules at any time, especially to adapt them to any changes made to our website, either by making new features available, or by suppressing or modifying existing ones.
Whenever there is a change, our users will be notified of the change.
10. How to contact us
To clarify any doubts about this Privacy Policy or about the personal data we process, please contact our Personal Data Protection Officer, through any of the channels mentioned below:
Email : jum@naturaliapousada.com.br
Postal address: Praia do Abraão, S / N – Lote B9 B – Ilha Grande Angra dos Reis-RJ CEP 23968-000
