The protection of personal data of natural persons is regulated in Portugal by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, ("General Data Protection Regulation" or "GDPR") and Law No. 58/2019, of August 8 ("LPDP") which ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data. “Personal data” is considered to be any information, of whatever nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person, whereby the protection does not cover the data of legal persons. A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity (for example, the Users’ name associated with the telephone number or email address).
By reading this Privacy Policy, the User is informed about the treatment of personal data carried out by the Hotel through the website https://www.fortedegaia.com (hereinafter "Website").
The personal data collected and processed by the Hotel through the Website identified above will be used solely for the following purposes:
a) Manage the contracting and provision of services you perform through the Website, including contact requests, lodging reservations, restaurant reservations, experience bookings, and other requests made by users, as well as forward such requests to our service providers when applicable;
Legal basis: performance of a contract to which the Data Subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.
Without prejudice to the aforementioned, table reservations at the Restaurant are made through the TheFork platform. Personal data provided as part of the relevant reservation process, including any information concerning allergies or dietary restrictions, are collected through that platform and processed in accordance with its Privacy Policy.
b) In the event of contracting, the data collected on this Website, together with the other data obtained under the contractual relationship, will be used for human resource management, to ensure compliance with legal obligations and to provide employees with the means necessary for the pursuit of professional activity;
Legal basis: Performance of a contract to which the Data Subject is a party, or the taking of steps at the request of the Data Subject prior to entering into a contract, and compliance with legal obligations to which Forte de Gaia is subject, as applicable.
c) Compliance with national and international legal provisions, or execution of orders from competent judicial authorities;
Legal basis: compliance with legal obligations.
d) Compliance with legal obligations, deriving from applicable data protection legislation, as well as for exercising the rights of the data subjects, in particular the defense of a right in legal proceedings.
Legal basis: compliance with legal obligations and the legitimate interest of Forte de Gaia in defending its legally protected rights and interests.
e) Sending newsletters and information about new products, special offers and/or services offered by Forte de Gaia.
Legal basis: consent of the Data Subject or, where legally permissible, the legitimate interest of Forte de Gaia in promoting its own products, offers and services to its customers.
Please note that we carry out anonymous and aggregated analysis of service usage to identify user habits and trends, in order to improve the services offered and meet the specific needs of Users.
Forte de Gaia guarantees the confidentiality of all data provided. Although Forte de Gaia collects and processes data in a secure manner to prevent their loss or manipulation, using the most appropriate techniques for this purpose, it should be noted that the collection of data on open networks does not allow the circulation of personal data in conditions of absolute security, with the risk that they may be accessed and used by unauthorized third parties.
Failure to respond to data marked as mandatory may imply the impossibility of responding to the Data Subject's request.
Forte de Gaia processes Users' data in the following situations:
(i) when they have given their free, specific, informed and unambiguous consent to the processing of their personal data for certain purposes and/or;
(ii) when it is necessary for the execution of a contract to which the Data User is a party, or for pre-contractual steps at the request of the User;
(iii) for compliance with legal obligations to which Forte de Gaia is bound;
(iv) for the purposes of the legitimate interests pursued by Forte de Gaia or by third parties, unless the interests or fundamental rights and freedoms of the Data Subject prevail and require the protection of personal data.
The User guarantees that the information provided is true, accurate, complete and up-to-date, and is liable for any damage or loss, direct or indirect, that may be caused as a result of breach of this obligation.
In the event that the data provided belongs to a third party, the User guarantees that the User has informed the said third party of the details provided in this document and has obtained their authorization to provide their data to Forte de Gaia for the purposes indicated.
Forte de Gaia only processes and stores the Users’ personal data for the period that is necessary or mandatory for the fulfilment of the purposes described above, applying information storage criteria appropriate to each treatment and in line with applicable legal and regulatory obligations.
Forte de Gaia keeps personal data in its systems in such a way that it is possible to identify the data subjects in accordance with the following criteria:
In addition to communications made in compliance with legal obligations, the Data Subject´s personal data may be disclosed by Forte de Gaia, for the purposes identified above, to the following categories of recipients:
The personal data collected will be processed within the European Economic Area. There will be no international data transfers to third countries or international organizations.
If personal data is processed outside the European Economic Area, it will be done with the adoption of adequate safeguards and the required level of protection in accordance with the legislation on personal data protection.
Forte de Gaia has implemented appropriate technical and organizational security measures to ensure the security of personal data provided by the User, in order to prevent alteration, loss, processing and/or unauthorized access, taking into account the current state of the technology, the nature of the data stored and the risks to which they are exposed.
Personal data is processed with the level of protection legally required to ensure their security and prevent alteration, loss, processing or unauthorized access, taking into account the state of technology, the User being aware and accepting that the security measures on the Internet are not fool proof.
Whenever accessing personal data, Forte de Gaia undertakes to:
In case Forte de Gaia subcontracts to other entities the provision of services involving the transfer of personal data, such entities shall be obliged to adopt the necessary technical and organizational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorized access or any other type of unlawful processing.
In accordance with the provisions of the GDPR, the User may exercise their rights of access, rectification, erasure, limitation on processing, portability, objection and revocation of consent by requesting it in writing by any of the following means, specifying the right or rights they wish to exercise:
The Users have the right to file a complaint with the Comissão Nacional de Proteção de Dados (CNPD) in relation to matters concerning the exercise of their rights and the protection of their personal data, through the following webpage www.cnpd.pt.
The Website may contain advertising, links or other content that connects or redirects to pages and services of suppliers, advertisers, affiliates, sponsors of Forte de Gaia and other third parties.
However, Forte de Gaia does not control the content or links appearing on these pages and is not responsible for the practices used by these pages or Websites. Forte de Gaia advises Users to visit the privacy policy of such pages, as well as their terms and conditions.
Searching or interacting on any other Website, including those that have an external link to the Website, are subject to the terms and conditions of that Website and Forte de Gaia, in no event, is responsible for such access and use.
Forte de Gaia reserves the right to revise this Policy at any time it deems appropriate, so it is recommended that Users check the privacy policy regularly and/or each time they access the Website.
Updated in August 2026