Privacy and Data Protection Policy
Templo de Nenúfar Lda – Terra Heal · Massage & Holistic Spa
1. Mission and Commitment
This Privacy Policy aims to define the principles and rules adopted by Templo de Nenúfar Lda, operating under the brand Terra Heal · Massage & Holistic Spa regarding the processing of Personal Data provided to it, in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the applicable national legislation.
The entity commits to:
2. General Principles
In the processing of Personal Data, Templo de Nenúfar Lda adheres to the following fundamental principles:
Lawfulness, Fairness and Transparency
Personal Data is processed lawfully, fairly and in a transparent manner in relation to the data subjects.
Purpose Limitation
Personal Data is collected for specific, explicit and legitimate purposes and will not be further processed in a manner incompatible with those purposes.
Data MinimizationOnly
Personal Data strictly necessary for the intended purposes is collected and processed.
AccuracyPersonal
Data must be accurate and, where necessary, kept up to date.
Storage Limitation
Personal Data is retained only for the period necessary to fulfil the purposes for which it was collected or as required by law.
Integrity and Confidentiality
Appropriate technical and organisational measures are implemented to protect Personal Data against unauthorised access, loss, destruction, or unlawful alteration.
The entity also requires its service providers, suppliers, and partners to comply with equivalent contractual obligations regarding the protection of Personal Data.
3. Collection and Processing of Personal Data
3.1 Methods of Data Collection
Templo de Nenúfar Lda may collect Personal Data through the following means:
Website Navigation: Technical data such as IP address, cookies, and access logs.
Contacts and Interactions: Data provided when a user contacts the entity via forms, email, online chat, social media, or other communication channels.
Commercial Relationship: Data collected in the context of providing services, including booking treatments, billing, and communication with clients.
Recruitment Processes: Data provided during job applications.
Other Means: Any other form through which the data subject voluntarily provides Personal Data.
3.2 Legal Basis for Processing
The processing of Personal Data by Templo de Nenúfar Lda may be based on the following legal grounds:
Consent
When the data subject provides explicit authorisation for the processing of their data for specific purposes.
Contractual Necessity
When processing is necessary for the execution of a contract or for taking steps at the request of the data subject before entering into a contract.
Legal Obligation
When processing is necessary to comply with legal obligations to which the entity is subject.
Legitimate Interest
When processing is necessary for the legitimate interests of the entity, provided that the fundamental rights and freedoms of the data subject do not override those interests.
Example: service improvement, management of client relationships, and analysis of client preferences.
3.3 Health-Related Data
In the context of providing therapeutic massage, complementary therapies, and wellness services, health-related information may be collected from clients solely for the purpose of:
Such data will only be processed by qualified professionals bound by confidentiality obligations, and only to the extent strictly necessary for providing the services.
3.4 Data Retention Period
Personal Data will be retained only for the period necessary to:
3.5 Data Sharing and Transfers
Templo de Nenúfar Lda does not sell or transfer Personal Data for direct marketing purposes.
Personal Data may only be shared:
4. Security Measures
The entity implements appropriate technical and organisational measures to protect Personal Data against:
5. Rights of Data Subjects
Under the GDPR, data subjects have the following rights:
Right of Access: To obtain confirmation about whether their data is being processed and access relevant information.
Right to Rectification: To request correction of inaccurate or incomplete data.
Right to Erasure: To request deletion of personal data, unless legal obligations require its retention.
Right to Restriction of Processing: To request limitation of the processing of their data in certain circumstances.
Right to Data Portability: To request the transfer of their data to another service provider.
Right to Object: To object to the processing of their data based on legitimate interests.
Withdrawal of Consent: Where processing is based on consent, the data subject may withdraw that consent at any time.
To exercise these rights, the data subject may contact the entity via:
[email protected]
If the data subject believes their rights have not been respected, they may file a complaint with the competent supervisory authority.
6. Privacy Notice: Personal Data is processed exclusively for the following purposes:
7. Changes to the Privacy Policy
This Privacy Policy may be updated whenever legislative changes occur or when modifications are made to data processing practices.
Updated versions will be published on the entity’s website and will take effect from the date of publication.
8. Contact
For questions, clarifications, or to exercise your rights as a data subject, you may contact:
Templo de Nenúfar Lda (Terra Heal · Massage & Holistic Spa)
NIPC: 517235480
Rua do Telhal – São José, Nº 4B
1150-345 Lisbon
Portugal
Email: [email protected]
Data Controller
Templo de Nenúfar Lda
NIPC: 517235480
Data Protection Responsible Person:
Fernando Charrua
1. Mission and Commitment
This Privacy Policy aims to define the principles and rules adopted by Templo de Nenúfar Lda, operating under the brand Terra Heal · Massage & Holistic Spa regarding the processing of Personal Data provided to it, in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the applicable national legislation.
The entity commits to:
- Ensuring proper management of Personal Data by adopting appropriate technical and organisational measures to protect the rights and freedoms of data subjects.
- Raising awareness and providing training to its staff regarding the importance of Personal Data protection and ensuring compliance with applicable legal requirements.
- Notifying data subjects and competent authorities of any security incidents involving Personal Data when required by applicable legislation.
2. General Principles
In the processing of Personal Data, Templo de Nenúfar Lda adheres to the following fundamental principles:
Lawfulness, Fairness and Transparency
Personal Data is processed lawfully, fairly and in a transparent manner in relation to the data subjects.
Purpose Limitation
Personal Data is collected for specific, explicit and legitimate purposes and will not be further processed in a manner incompatible with those purposes.
Data MinimizationOnly
Personal Data strictly necessary for the intended purposes is collected and processed.
AccuracyPersonal
Data must be accurate and, where necessary, kept up to date.
Storage Limitation
Personal Data is retained only for the period necessary to fulfil the purposes for which it was collected or as required by law.
Integrity and Confidentiality
Appropriate technical and organisational measures are implemented to protect Personal Data against unauthorised access, loss, destruction, or unlawful alteration.
The entity also requires its service providers, suppliers, and partners to comply with equivalent contractual obligations regarding the protection of Personal Data.
3. Collection and Processing of Personal Data
3.1 Methods of Data Collection
Templo de Nenúfar Lda may collect Personal Data through the following means:
Website Navigation: Technical data such as IP address, cookies, and access logs.
Contacts and Interactions: Data provided when a user contacts the entity via forms, email, online chat, social media, or other communication channels.
Commercial Relationship: Data collected in the context of providing services, including booking treatments, billing, and communication with clients.
Recruitment Processes: Data provided during job applications.
Other Means: Any other form through which the data subject voluntarily provides Personal Data.
3.2 Legal Basis for Processing
The processing of Personal Data by Templo de Nenúfar Lda may be based on the following legal grounds:
Consent
When the data subject provides explicit authorisation for the processing of their data for specific purposes.
Contractual Necessity
When processing is necessary for the execution of a contract or for taking steps at the request of the data subject before entering into a contract.
Legal Obligation
When processing is necessary to comply with legal obligations to which the entity is subject.
Legitimate Interest
When processing is necessary for the legitimate interests of the entity, provided that the fundamental rights and freedoms of the data subject do not override those interests.
Example: service improvement, management of client relationships, and analysis of client preferences.
3.3 Health-Related Data
In the context of providing therapeutic massage, complementary therapies, and wellness services, health-related information may be collected from clients solely for the purpose of:
- Assessing the client’s condition before performing treatments.
- Adapting treatments to the client's health condition and needs.
- Ensuring the safety and suitability of the services provided.
Such data will only be processed by qualified professionals bound by confidentiality obligations, and only to the extent strictly necessary for providing the services.
3.4 Data Retention Period
Personal Data will be retained only for the period necessary to:
- Comply with legal, tax, and accounting obligations.
- Resolve potential disputes and exercise the legal rights of the entity.
- Provide and manage services requested by clients.
3.5 Data Sharing and Transfers
Templo de Nenúfar Lda does not sell or transfer Personal Data for direct marketing purposes.
Personal Data may only be shared:
- When necessary for the provision of services.
- When required by law or competent authorities.
- With service providers acting on behalf of the entity, under contractual confidentiality and data protection obligations.
4. Security Measures
The entity implements appropriate technical and organisational measures to protect Personal Data against:
- Unauthorized access
- Accidental or unlawful destruction, loss, or alteration
- Improper disclosure
5. Rights of Data Subjects
Under the GDPR, data subjects have the following rights:
Right of Access: To obtain confirmation about whether their data is being processed and access relevant information.
Right to Rectification: To request correction of inaccurate or incomplete data.
Right to Erasure: To request deletion of personal data, unless legal obligations require its retention.
Right to Restriction of Processing: To request limitation of the processing of their data in certain circumstances.
Right to Data Portability: To request the transfer of their data to another service provider.
Right to Object: To object to the processing of their data based on legitimate interests.
Withdrawal of Consent: Where processing is based on consent, the data subject may withdraw that consent at any time.
To exercise these rights, the data subject may contact the entity via:
[email protected]
If the data subject believes their rights have not been respected, they may file a complaint with the competent supervisory authority.
6. Privacy Notice: Personal Data is processed exclusively for the following purposes:
- Compliance with legal and contractual obligations
- Provision and improvement of services
- Management of client relationships
7. Changes to the Privacy Policy
This Privacy Policy may be updated whenever legislative changes occur or when modifications are made to data processing practices.
Updated versions will be published on the entity’s website and will take effect from the date of publication.
8. Contact
For questions, clarifications, or to exercise your rights as a data subject, you may contact:
Templo de Nenúfar Lda (Terra Heal · Massage & Holistic Spa)
NIPC: 517235480
Rua do Telhal – São José, Nº 4B
1150-345 Lisbon
Portugal
Email: [email protected]
Data Controller
Templo de Nenúfar Lda
NIPC: 517235480
Data Protection Responsible Person:
Fernando Charrua