I. Welcome to Oriente Restaurant Buffet.

We are committed to respecting and protecting privacy and valuing the relationship we maintain with everyone who interacts with us. This Privacy Policy aims to provide clear, simple, and transparent information regarding the collection and processing of personal data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals concerning the processing of personal data (GDPR).

The Data Controller for Oriente Restaurant Buffet is committed to processing personal data with respect for best practices in the domain of security and personal data protection, valuing the relationship with all its website visitors and users in all activities it conducts.

II. Definitions of Relevant Concepts regarding Data Protection

For a better understanding of the entire content of this Policy, it is important to have the definition of some of the most relevant concepts concerning data protection:

a) Personal Data: Any information relating to an identified or identifiable natural person, by which their identity can be directly or indirectly determined, such as: name, phone number, civil identification number, date of birth, etc. b) Categories of Personal Data: Personal data can be grouped into certain categories such as: identification data, qualifications, education, financial, banking, professional, health, biometric, etc. c) Processing: Any operation or set of operations performed on personal data or sets of personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination, or any other form of making available, comparison or interconnection, restriction, erasure, or destruction. d) Data Subject: Any natural person whose personal data is subject to processing. e) Data Controller: Natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data. f) Processor: Natural or legal person who processes personal data on behalf of the Data Controller.

III. Data Controller and Contacts

Chuva de Canela LDA, VAT Number 516231820. Rua Herois de Chaimite, No. 10 2675-375 Odivelas. Email: orienterestaurantebuffet@gmail.com.

If you have any questions about this Privacy Policy, the processing of personal data carried out, or for any other reason you consider relevant, we kindly ask you to contact us through the above-identified email.

IV. Category of Personal Data Subject to Processing

Oriente Restaurant Buffet only collects and processes the personal data necessary to provide you with the best possible service and personalized experience.

In the course of its activity, through the use of the website, Oriente Restaurant Buffet processes or may process personal data for customer management purposes: (i) when users register in the reserved area; (ii) when providing customer support; and (iii) when users subscribe to the Newsletter (form/checkbox exclusively for this purpose and separate from others).

In fulfilling these purposes, Oriente Restaurant Buffet may process the following personal data: name, address, mobile number, date of birth, email address, taxpayer identification number, and bank account details.

Legal basis:

Oriente Restaurant Buffet processes personal data within the scope of providing its services.

i. In its legitimate interest or the legitimate interest of third parties, to ensure that we provide the services in the best possible way (Article 6(1)(f) of the GDPR); ii. To comply with a legal obligation that is imposed (Article 6(1)(c) of the GDPR).

V. Maintenance of Personal Information

Oriente Restaurant Buffet stores personal data only for the period necessary to fulfill the purpose for which it was collected.

However, in certain situations, Oriente Restaurant Buffet may store data for longer periods due to legal requirements.

VI. Guarantees of Personal Data Processing: Security and Confidentiality

The processing of personal data carried out through the Oriente Restaurant Buffet website is done transparently and with strict respect for the privacy of life, as well as for the fundamental rights, freedoms, and guarantees of its owners.

Oriente Restaurant Buffet ensures that personal data will be processed, within the indicated purposes, in accordance with the policy and using appropriate technical and organizational measures to promote their security and confidentiality.

VII. Sharing of Collected Personal Information

Oriente Restaurant Buffet may share personal data with third parties whenever necessary for the pursuit of its activity and legitimate interests.

VIII. Rights of Data Subjects

Data subjects are guaranteed, at any time, the right to access their personal data, as well as its rectification, erasure, portability, restriction, and/or objection to processing, in accordance with legal terms.

IX. Information about Cookies

We inform you that this website uses Cookies. Therefore, we advise reading the cookie policy to learn more about the processing of your personal data carried out through this functionality.

X. Changes to the Privacy Policy

Oriente Restaurant Buffet reserves the right to make adaptations or changes to this Privacy Policy.

Any and all changes to this Privacy Policy will be duly published on this website.

The version published on the website is the currently effective one.

XI. Contacts for the Purpose of this Policy

For the exercise of the aforementioned rights, particularly the rights of access, rectification, erasure, and those of limitation and objection to processing, data subjects should contact:

Chuva de Canela LDA, VAT Number 516231820. Rua Herois de Chaimite, No. 10 2675-375 Odivelas. Email: orienterestaurantebuffet@gmail.com.