Privacy Policy

Controller

The controller responsible for the processing of personal data is:

Salão de Jogos Tiro Taco, Lda., also referred to below as “Tiro Taco” or “Ericeira Sports Bar”, determines the purposes and means of the processing of personal data carried out in connection with its business activities and this website.

Legal framework

Personal data is processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 — the General Data Protection Regulation (GDPR) —, Portuguese Law no. 58/2019 of 8 August, and all other applicable Portuguese and European legislation concerning privacy, electronic communications and the protection of personal data.

Personal data we may process

Depending on how you interact with us, we may process identification and contact data, including your name, email address and telephone number.

We may also process information relating to contact requests, requests to show sporting events, seat reservations, group and event enquiries, number of participants, requested date, associated sporting event, messages and other information voluntarily provided by the user.

Where food preferences or dietary requirements are communicated in connection with groups or events, we ask that only information strictly necessary to provide the service be supplied. If information revealing health data, such as allergies or medical intolerances, is voluntarily provided, it will be processed only to the extent necessary to respond to the request and as permitted by applicable law.

Technical data relating to the use and security of the website may also be processed, such as IP address, date and time of access, browser, operating system, device, pages viewed, referral source and other technical data necessary for the operation, security and measurement of website usage.

Where the user chooses to receive promotional communications, we may process their name, email address, evidence and date of consent, subscription status and information necessary to manage that subscription.

As a rule, Tiro Taco does not request special categories of personal data that are not necessary for the services provided.

Purposes and legal bases for processing

Where processing is based on legitimate interests, Tiro Taco assesses the necessity and proportionality of the processing against the rights and freedoms of data subjects.

Forms, operational requests and marketing

The website provides different forms, including contact forms, requests relating to sporting events, seat reservations and group or event enquiries.

The data required to process each request is handled regardless of whether or not the user wishes to receive promotional communications.

The option to receive information about Ericeira Sports Bar events, news and promotions is optional and separate from the main request. Refusing consent for marketing does not prevent the user from contacting Tiro Taco, submitting a request, requesting a reservation or asking for information about groups and events.

Where the user expresses an interest in receiving promotional communications, a Double Opt-In process may be used, under which the user is asked to confirm their email address before the subscription is activated.

Contact management and email communications may use the Brevo platform, which acts as a technology service provider and processor for Tiro Taco.

Contacts used for operational management and contacts authorised for marketing are processed according to their respective purpose and legal basis.

Consent for marketing may be withdrawn at any time using the unsubscribe mechanism included in communications or by contacting Tiro Taco.

Cookies, preferences and statistics

The website uses cookies and similar technologies that are necessary for its operation and may use other technologies for preferences, statistics or external functionality.

Tiro Taco uses a consent management platform, currently CookieYes, to present the available choices to users and, where applicable, record their preferences.

Cookies that are strictly necessary for the operation and security of the website may be used without prior consent where permitted by law.

Non-essential cookies or technologies, including those used for certain external functionality, analytics or advertising, will only be used where there is an appropriate legal basis and, where required, after the user has given consent.

The website currently uses Burst Statistics to measure usage and performance. Wherever possible, statistical data is processed using mechanisms designed to reduce the identification of visitors.

Cookie preferences can be changed or withdrawn through the consent management panel available on the website. Full identification of cookies, providers, purposes and retention periods is displayed by the consent management mechanism and, where a separate page is available, in the relevant Cookie Policy.

Service providers and recipients

Tiro Taco does not sell or make the personal data of its customers or users available to third parties for those third parties’ own commercial use.

Data may, however, be processed by service providers acting on behalf of Tiro Taco and only to the extent necessary to provide the relevant services.

These may include website hosting and maintenance providers, email services, email and contact-management platforms such as Brevo, consent-management tools such as CookieYes, statistics tools, technology infrastructure providers and other providers necessary for the operation of the website.

The website may also integrate Google services, including Google Maps, to provide maps and directions. Use of these services may result in direct communication between the user’s device and the systems of the relevant provider.

Data may also be disclosed to public, tax, judicial, police or regulatory authorities where required by law or by a valid decision of a competent authority.

Where events are organised jointly with third parties, any additional sharing of data will be communicated in advance where necessary.

International transfers

Some technology providers may operate or use infrastructure located in different countries.

Whenever personal data is transferred outside the European Economic Area, Tiro Taco seeks to ensure that an appropriate legal mechanism is in place, including an adequacy decision, standard contractual clauses approved by the European Commission or another safeguard recognised by the GDPR.

Data retention

Personal data is retained only for as long as necessary for the purposes for which it was collected and for any additional periods required to comply with legal obligations, resolve disputes or establish, exercise or defend legal claims.

Data associated with contact requests, reservations, game requests, groups and events is retained for the period required to manage the relevant request and for any subsequent period reasonably justified for follow-up, complaints or the defence of rights.

Where certain data becomes part of accounting, tax or other legally relevant documentation, it will be retained for the applicable statutory period, which may be up to 10 years.

Data used exclusively for marketing is processed for as long as a valid legal basis exists for that purpose, including while consent remains valid, without prejudice to periodic reviews, erasure requests, objections or withdrawal of consent.

Records required to demonstrate consent may be retained for the period necessary to comply with accountability and evidential obligations under applicable law.

Data and preferences associated with cookies are retained in accordance with the periods identified in the consent-management panel.

Images obtained through CCTV are generally retained for 30 days, unless they need to be preserved in connection with proceedings or a legally relevant incident.

Once the relevant purposes and retention periods have ended, data is appropriately deleted or anonymised.

Data subject rights

Under applicable law, and where the relevant conditions are met, data subjects may exercise the rights of access, rectification, erasure, restriction of processing, objection and data portability.

Where processing is based on consent, the data subject may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Data subjects also have the right to object at any time to the processing of their data for direct marketing purposes.

Tiro Taco does not currently use solely automated decision-making that produces legal effects or similarly significantly affects the user within the meaning of Article 22 of the GDPR.

Requests may be sent to geral@tirotaco.pt or to Rua do Pombal, n.º 2, 2655-334 Ericeira.

Additional information may be requested where necessary to confirm the identity of the applicant and prevent improper disclosure of data to third parties.

Tiro Taco will respond without undue delay and, in any event, within one month of receiving the request. Where permitted by the GDPR, this period may be extended by up to a further two months depending on the complexity and number of requests, in which case the data subject will be informed of the extension and the reasons for it.

Security

Tiro Taco implements technical and organisational measures designed to protect personal data against destruction, loss, alteration, disclosure or unauthorised access.

These measures may include access controls, secure connections, software updates, authentication mechanisms, backups, restricted permissions and other measures appropriate to the nature of the data and the risks of processing.

No electronic system can guarantee absolute security, so these measures are reviewed and adapted whenever necessary.

Minors

The website is not specifically directed at children.

Some in-person activities or services at the establishment may be used by minors where permitted by the establishment’s access rules and applicable law.

Forms intended for commercial enquiries and subscriptions to promotional communications are designed primarily for use by adults.

Where the processing of a minor’s data is based on consent and falls within the rules governing the direct offer of information-society services, the ages and conditions established by Portuguese law will be observed.

Tiro Taco seeks to avoid unnecessary collection of minors’ data and may delete information that has been provided inappropriately or without a sufficient legal basis.

CCTV and image capture

The establishment uses CCTV systems to protect people and property, in accordance with applicable law and the signage displayed on the premises.

Images are used exclusively for legally permitted purposes and access to recordings is restricted to authorised persons or entities.

Recordings are generally retained for 30 days, unless they must be preserved because of an incident, investigation or legal proceedings.

CCTV is not used to produce promotional content.

Separately, in connection with certain events, tournaments or special activities, Tiro Taco may take photographs or video of the atmosphere at the establishment for institutional or promotional communications.

Whenever a person is the main and identifiable subject of content intended for promotional use, the applicable rules on data protection and image rights will be observed, including obtaining consent where necessary. Particular care will be taken regarding the use of images of minors.

Third-party websites and services

The website may contain links to or integrate content and services belonging to third parties, including maps, social networks and other external platforms.

Use of those services is also subject to the policies and terms established by the relevant providers.

Tiro Taco does not control the privacy practices of independent websites to which it merely provides a link and recommends reviewing their policies before using those services.

Changes to this Privacy Policy

This Privacy Policy may be updated whenever relevant legislative, technological or operational changes occur.

The version currently in force will be published on this page together with its update date.

Changes that materially affect processing already carried out may be communicated separately where necessary.

Complaints to the supervisory authority

Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the Portuguese supervisory authority:

Contact details

For questions concerning this Privacy Policy, the processing of personal data or the exercise of data protection rights: