Another World - Lisboa | VR-ARENA.PT respects your privacy. This Privacy Policy describes who we are, for what purposes we use your data, the legal basis for doing so, with whom we share it, how long we retain it, your rights, and how to contact us to exercise your rights.

This Privacy Policy applies to all services and products provided by Another World - Lisboa | VR-ARENA.PT, and the use of our website, under the terms indicated below, thus applying to the processing of personal data of our customers, potential customers, partners, suppliers, candidates, and website users.

Who are we?

The entity responsible for your data is MOMENTO FORMOSO UNIPESSOAL LDA, corporate entity number 517517582, headquartered at Avenida Infante Dom Henrique 286, Loja A, Marvila, Lisbon, commercially known as "Another World - Lisboa | vr-arena.pt" and hereinafter referred to as Another World.

What personal data do we collect?

In accordance with the GDPR, "Personal Data" refers to information relating to an identified or identifiable natural person, directly or indirectly, especially by reference to an identifier, such as a name, an identification number, location data, electronic identifiers, or one or more specific elements of physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

The types of personal data we collect include identification and contact or billing data, such as name, address, email address, date of birth, tax identification number, age, or purchase and booking history, as well as complaints. We may collect financial data, such as IBAN, for making payments to our suppliers and partners, and also customer bank card details when making a reservation through our online booking system (collected only for billing purposes).

Regarding candidates, we collect data related to education and professional experience (education, qualifications, certifications, languages, curriculum, former employer references, psychometric test data).

Some of the above-mentioned identification, financial, and tax data (name, address, tax identification number, IBAN, bank card details for online reservation payments) are a necessary requirement for us to enter into a contract with you or to fulfill legal obligations (for example, to make a reservation, pay a supplier or partner, or issue legally required invoicing and other tax obligations), and failure to provide such data may result in us being unable to provide you with the desired service.

If we collect personal data of special categories, we will inform you of this and the purposes for which we collect such data, always requesting your explicit consent.

In relation to website users, we may also collect information regarding the type of browser and computer used, as well as technical information about how the user connects to the website, including the operating system and internet access method.

How do we collect your personal data?

We generally collect your personal data directly from you when you contact or engage with us, by telephone contact, in-person contact, mail correspondence, email correspondence, filling out forms or other written or electronic means that you complete, through our website when you request contact and/or newsletter subscriptions, or when you register on our website or make an online reservation, or when you send us a curriculum vitae or respond to an advertisement.

If we indirectly collect your personal information from third parties, we will inform you as expressly defined in the GDPR.

For what purposes and on what legal basis do we use your personal data?

The purposes and respective legal bases for which we collect and process your personal data are:

Purposes:

Execution of the purchase and sale contract including through our online booking system and management of payment for the services acquired. Contacting the customer/user regarding informative communications related to the services purchased. Managing user registration on our website and managing reservations, customer support, communication with the customer, potential customer, website user, partner, supplier, and candidate, managing complaints, managing contractual relationships with customers, suppliers, and partners, making payments, refunds, issuing invoices, selection and recruitment;

Execution of the contract between the parties, or execution of pre-contractual measures at the request of the data subject – Art. 6(1)(b) GDPR

Compliance with obligations imposed on the company, namely tax obligations, such as tax payments, tax declaration obligations, invoicing, legal payments;

Compliance with legal obligations to which the company is subject – Art. 6(1)(c) GDPR

Reorganization and management measures aimed at improving the service provided.

Sending communications with information and clarifications about the company's services. Content management on the website and social media, online contests. Managing user registration on our website. Managing complaints and customer contact.

Maintaining a record of selection and recruitment processes in order to manage it and consider future recruitments, analyze and confirm the candidate's suitability for the position, and select the candidate.

Legitimate interests pursued by the company – Art. 6(1)(f) GDPR

Legal Basis:

Execution of pre-contractual measures at the request of the data subject – Art. 6(1)(b) GDPR (candidates)

Likewise, we may process personal data, such as name, address, and email address of potential customers for sending newsletters and other commercial communications (marketing) about our company and promotions, for which the data subject's explicit consent will be requested, opting in to our newsletter list, which can be withdrawn at any time by sending an email to the email address: info@vr-arena.pt or to the following address: Avenida Infante Dom Henrique 286, Loja A, 1950-421.

How long do we retain your personal data?

In retaining your personal data, all confidentiality and security guarantees prescribed by the GDPR will be respected.

We will retain your personal data for the period established by legal or regulatory norms or, in their absence, for as long as necessary to achieve the purpose, without prejudice to the data subject's ability to revoke their consent at any time, in cases where the legal basis is consent.

When personal data are necessary to prove compliance with contractual or other obligations, they may be retained until the prescription period for the respective rights has expired.

After the maximum retention period, the data will be irreversibly destroyed or anonymized.

Specifically, we have the following retention periods:

Thus, for the purpose of executing a contract with customers, suppliers, and partners, personal data will be retained for a period of 10 (ten) years after the termination of the contractual relationship.

For financial management, invoicing and payments management, and solvency management purposes, personal data will be retained for a period of 10 (ten) years after the termination of the contractual relationship.

For tax management and compliance with legal obligations purposes, personal data will be retained for a period of 10 (ten) years after collection.

For recruitment and candidate selection purposes, personal data will be retained for a period of 12 (twelve) months after collection.

For the purpose of responding to information requests sent by users through our website, personal data will be retained for a period of 3 (three) years after collection or earlier if the data subject revokes their consent.

Confidentiality and security:

We guarantee the confidentiality of all data provided by our customers, potential customers, website users, suppliers, partners, and candidates. Data collection and processing through our website are carried out securely, preventing loss or manipulation.

All data will be entered into a Secure Server (256-bit SSL) that encrypts it. You can verify that your browser is secure if the padlock symbol appears or if the address starts with https instead of http.

We have implemented adequate technical and organizational security measures, as required by law and industry standards, to protect your personal data against unauthorized access, use, and disclosure, and we have taken the necessary steps to ensure that we only use your personal data as described in this Privacy Policy.

With whom do we share your personal data?

Your personal data will not be disclosed to third parties for commercial purposes, and they will only be shared with third parties to fulfill a legal obligation imposed on us, such as authorities.

Personal data may be transmitted to company suppliers and service providers to the extent necessary for the proper fulfillment of contractual relationships and legal obligations, such as IT suppliers, communication and logistics services, consultancy, booking systems, or external accounting and legal services.

Such third parties will process data solely on our behalf, following our documented instructions, and only third parties that provide sufficient guarantees of implementing appropriate technical and organizational measures in a way that the processing meets GDPR requirements and ensures the defense of the data subject's rights will be engaged, with this processing regulated by a written contract.

Personal data will not be transferred to countries or international organizations outside the European Union. However, if this were to occur, the company ensures compliance with all necessary security measures, and these transfers will be carried out under standard contractual clauses approved by the European Commission for this purpose, if the country to which the data may be transferred has not been considered by the Commission as guaranteeing an adequate level of protection. Any transfer made to an entity covered by the Privacy Shield framework will be analyzed beforehand to ensure that the adoption of approved standard contractual clauses and, if necessary, additional measures in accordance with the guidance of the European Data Protection Board, are considered sufficient to ensure an adequate level of protection under European legislation, under penalty of suspension of the transfer or communication to the respective Supervisory Authority.

What are your rights?

You have the right, as legally provided, to request access to personal data concerning you, as well as its rectification or erasure, and the restriction of processing regarding the data subject, or the right to object to processing, as well as the right to data portability.

You can also withdraw your consent for the processing of your personal data, when such processing is based solely on your consent, at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You can exercise these rights by email to the address: info@vr-arena.pt or to the following address: 1950-421 Avenida Infante Dom Henrique 286, Loja A, Lisbon, Portugal.

Right to lodge a complaint:

You also have the right to lodge a complaint with a supervisory authority.

In Portugal, the competent supervisory authority is CNPD – Comissão Nacional de Proteção de Dados (National Data Protection Commission), located at Av. Infante Dom Henrique 286, Loja A, phone: 929 089 725. More information at www.vr-arena.pt.

Existence of automated decisions:

We do not process personal data for the purpose of automated individual decision-making, including profiling; however, if such processing occurs in the future, the data subject may object to it, under the terms and for the purposes of Art. 22 of the GDPR.

Updating our Privacy Policy:

Please note that we may occasionally update this Privacy Policy. We ask that you periodically review this document to stay informed.

12. Liability for Equipment

In the event of loss, damage, or malfunction of the equipment, the client agrees to compensate for the damages in accordance with the terms of this contract. The compensation amount will be calculated based on the market value of the asset at the time of the damage, taking into account depreciation and the condition of the equipment. Compensation must be paid in full, unless otherwise stipulated in the terms of this contract or in additional agreements between the parties.

Lisbon, May 1, 2024.