Privacy Policy
L’Epicure Azores
(ATALHOS DE LAVA –PRODUÇÕES, Lda.)
1. Who we are
L’Epicure Azores is a bar and cultural venue operated by ATALHOS DE LAVA – PRODUÇÕES, Lda., Portuguese company registration number (NIPC) 510683436, with registered office at Rua Dr. Dinis Moreira da Mota, 68-B, 2º Esq. – H, 9600-075 Pico da Pedra, Ribeira Grande, Portugal.
We respect the privacy of everyone who visits us and process personal data responsibly, transparently and in compliance with the General Data Protection Regulation (GDPR).
2. Personal data we collect
We collect only the personal data strictly necessary for the operation of the venue and provision of our services, namely:
- Name and contact details for managing reservations and requests
- Email address voluntarily provided
- Images captured through video surveillance systems
- Photographs and videos taken during events for promotional purposes, where applicable
We do not collect or store customers’ banking or payment card details.
3. Purpose of data processing
Personal data is processed for the following purposes:
- Managing and confirming reservations
- Responding to enquiries and contact requests
- Providing information requested about events and programming
- Ensuring the safety of customers, staff and premises
- Promoting the venue and its events, where there is a lawful basis to do so
4. Legal basis for processing
The processing of personal data is based on:
- The performance of pre contractual steps or contractual obligations
- Compliance with legal obligations
- The legitimate interests of the data controller, namely regarding security and promotion of the venue
- The data subject’s consent, where applicable
5. Video surveillance
L’Epicure Azores operates a video surveillance system exclusively for the purpose of enhancing the safety of individuals, property and facilities.
Images are retained only for the legally permitted period and are accessed solely by authorised entities. The images are not used for advertising purposes, nor shared with third parties, except where legally required.
6. Data sharing
We do not sell, transfer or commercialise personal data. Personal data may only be shared when there is:
- A legal obligation
- A request from competent authorities
- A need to provide essential services, namely electronic payment services, through duly authorised service providers
7. Data retention
Personal data is retained only for the period necessary to fulfil the purposes for which it was collected, in accordance with applicable legal requirements.
Once it is no longer necessary, data is securely deleted.
8. Data subject rights
Under the GDPR, data subjects may, at any time:
- Request access to their personal data
- Request rectification of inaccurate or outdated data
- Request erasure of data, where legally applicable
- Request restriction of processing
- Exercise the right to data portability
- Object to the processing of their data
- Withdraw consent, where consent is the legal basis
These rights may be exercised by contacting us at: lepicureazores@atalhosdelava.com
9. Information security
We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or misuse.
We do not process sensitive personal data.
10. Photography and video at events
Photographs and videos may be taken during cultural or musical events for the purpose of promoting the venue.
If you do not wish to appear in photographs or recordings, please inform a member of staff at the time.
11. Privacy contact details
For any matters related to personal data protection, please contact us at:
EMAIL: lepicureazores@atalhosdelava.com | TEL.: +351 917 350 418