Legal
Privacy policy
Hillside House does not yet publish a privacy policy. This page sets out what the approved document must cover.
This document is not published yet
There is no approved text for this page. Nothing shown here is a policy, a term or a condition, and nothing on this page is binding on Hillside House, on its residents, or on anyone else.
The page exists so that the address and the structure are settled before the approved text arrives. It is excluded from search engines and stays that way until a qualified legal adviser has supplied the wording.
What the approved document must cover
Each heading below is a section the finished document needs. The line beneath it states what information is required for that section. It is not the wording, and it is not a suggested term.
Details already on file
- Legal entity: WESTHEIMER PORTUGAL UNIP LDA
- NIF: 513818782
- Location: Foz do Arelho, PT
These are held in the site's single source of truth and should be confirmed rather than re-keyed. A full postal address and a contact email address are still missing.
Who wrote this page
Kubit is not the legal adviser of WESTHEIMER PORTUGAL UNIP LDA and has drafted none of this document. Everything above describes the information a qualified adviser needs in order to write it. It is not legal advice, and it is not draft wording.
- Identity and contact details of the controller
- The legal entity that decides why and how personal data is processed, with a postal address, an email address for data protection enquiries, and a named contact or representative.
- What personal data is collected, and how
- Every category of personal data the site and the residence collect, and whether each one comes from the person directly, from a device, or from a third party.
- What each category is used for, and on what lawful basis
- For every purpose, the lawful basis relied on under Article 6 GDPR and, where consent or legitimate interests are relied on, the record or assessment that supports it.
- Who the data is shared with
- Every processor and third party that receives personal data — the enquiry mailbox, hosting, email delivery, any agency or accountant — and what each one does with it.
- Transfers outside the EEA
- Whether any recipient stores or accesses personal data outside the European Economic Area, which country, and the transfer mechanism in place for it.
- How long the data is kept
- A retention period for each category of personal data, or the criteria used to decide it, and what happens to the data at the end of that period.
- The rights of the individual, and how to exercise them
- The rights available under the GDPR, the address a request should be sent to, the time allowed for a response, and how identity is verified.
- Complaining to the supervisory authority
- Confirmation that a complaint may be made to the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority, and the route for making one.
- Cookies and analytics
- Every cookie, tag and analytics tool the site sets or loads, what each one is for, how long it lasts, and how a visitor's choice is recorded.