Our website address is: https://slidesplash.com, and we are committed to protecting your privacy while you browse our website.
Accordingly, this Privacy Policy describes who we are, the purposes for which we may use your data, how we process it, with whom we share it, how long we retain it, as well as how you can contact us and exercise your rights.
Who are we?
Your data will be processed by Correia & Santinha, Lda., legal entity number 501585583, with registered office at Sítio da Carrasca, 8400 Estombar (hereinafter referred to as the “Company” or “we”), the entity that operates the Slide&Splash Water Park (“Slide&Splash” or the “Park”).
The Company is the data controller within the meaning of the General Data Protection Regulation (GDPR).
Why do we need your information?
The Company will process your personal data for the following purposes:
Customer and potential customer management
The processing of your personal data provided in the purchase form (namely name, address, tax identification number, contact details, visit date, payment information, and/or location data for transportation) is necessary for the performance of the contract to be entered into between you and the Company and/or for pre-contractual steps taken at your request — namely for the simulation and processing of the purchase of tickets to access the Park and associated services.
If you do not provide your data, we will not be able to provide you with the requested services.
Your data will be retained for this purpose for one year after the online purchase of tickets, without prejudice to situations where longer retention periods apply under applicable law (for example, to comply with tax retention obligations or where there is pending litigation in which the data is relevant).
Access control to the Park
Your personal data (name, tax identification number, date and time of access to the Park) will also be used to confirm the identity of the online ticket purchaser upon access to Slide&Splash.
The legal basis for this processing is the performance of the contract with the data subject and the legitimate interests of the Company, namely to identify individuals accessing the Park and to ensure that their identity matches that of the ticket purchasers.
For this purpose, your data will be retained for six months after entry into the Park, without prejudice to cases where longer retention periods apply under applicable law (for example, where there is pending litigation in which the data is relevant).
Marketing to Slide & Splash customers
If you have purchased tickets online, the Company may use some of your data (name and email address) to send you commercial communications providing information about products or services similar to those you have purchased.
You may object to receiving such communications at the time your personal data is collected and at any time thereafter.
The processing of your personal data for this purpose is based on your consent, provided in the form of a soft opt-in, combined with the Company’s legitimate interests in informing you about services in which you have already shown interest.
For marketing communications, your data will be retained for one year after the last communication is sent and will be deleted after one year of inactivity or, in any case, upon request by the data subject.
Statistical analysis
The Company may process your collected personal data (at the time of ticket purchase) for statistical purposes in order to study patterns of origin, preferences, interests, reliability, and customer behaviour, with the aim of improving its products and services.
Data relating to each data subject will be collected and processed for subsequent aggregated analysis, and it will not be possible to identify the data subjects to whom the final statistical information relates.
The Company does not define customer profiles nor make decisions based on profiling that produce legal effects concerning you.
This processing will only be carried out with your consent, provided through the ticket purchase form.
Your personal data will be retained for this purpose only for the period necessary to prepare aggregated indicators and will subsequently be deleted, without prejudice to cases where longer retention periods apply under applicable law.
Complaints and dispute management
You may submit suggestions or complaints regarding the services provided by the Company using the contact details available on the Website. These data will be processed to analyse and resolve the underlying situation.
The legal bases for this processing are the Company’s legitimate interests in resolving the issue/complaint and your explicit consent provided by submitting the suggestion or complaint.
Your data will be retained for this purpose for the time necessary to resolve the issue and will be deleted one year after its resolution, without prejudice to cases where longer retention periods apply under applicable law (for example, where pending litigation arises from a complaint).
Your personal data may also be processed by the Company for litigation management purposes whenever there are judicial, administrative, or other contentious proceedings pending between you and the Company.
In such cases, the legal basis for data retention is the Company’s legitimate interest, and the data will be retained for the period necessary to exercise its rights.
Will my information be shared with others?
Your personal information may be disclosed to:
Third-party service providers of the Company: Your personal data may be processed by companies subcontracted by the Company, namely for website hosting, email services, or Slide&Splash sales promoters. Only the personal data strictly necessary for providing the relevant service will be shared.
Partners of Correia & Santinha (e.g., travel agencies): Whenever your visit to the Park is organised by the Company together with a partner providing services in its own name (such as travel agencies, transport services, or promoters), the Company may share your personal data to the extent strictly necessary to organise the visit. These partners will be responsible for processing data related to their own services.
Personal data may also be accessed by the Company’s lawyers and external auditors, under guarantees of confidentiality and exclusive use for audit purposes.
Your data will be processed within the European Union.
What are my rights?
At any time, you may request:
Access to the information we hold about you;
Rectification of inaccurate or incomplete information;
Erasure or restriction of the processing of your personal data;
If processing is based on consent or agreement and carried out by automated means, the right to receive your personal data in a structured, commonly used, and machine-readable format.
Your requests will be handled with special care to ensure the effective exercise of your rights. You may be asked to provide proof of identity to ensure that personal data is disclosed only to the respective data subject.
Please note that in certain cases (for example, due to legal requirements) your request may not be immediately fulfilled.
In any case, you will be informed of the measures taken within one month of your request.
You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at https://www.cnpd.pt/
Right of access
The data subject has the right to obtain confirmation from the Company as to whether or not personal data concerning them is being processed and, if so, to access the personal data and legally required information.
If more than one copy of the personal data is requested, the Company may charge a fee to cover administrative costs.
Right to rectification
The data subject has the right to obtain the rectification of inaccurate or incomplete personal data without undue delay.
Right to erasure (“right to be forgotten”)
The data subject has the right to obtain the erasure of their personal data without undue delay, and the Company has the obligation to erase such data where applicable, namely when:
a) The data is no longer necessary for the purposes for which it was collected or processed;
b) The data subject withdraws consent (where processing is based on consent) and there is no other legal basis for processing;
c) The data subject objects to the processing and there are no overriding legitimate grounds for processing.
Right to restriction of processing
The data subject has the right to obtain restriction of processing where:
a) The accuracy of the personal data is contested, for a period enabling the Company to verify its accuracy;
b) The processing is lawful and the data subject opposes erasure and requests restriction instead;
c) The Company no longer needs the data for processing purposes, but the data is required by the data subject for legal claims;
d) The data subject has objected to processing, pending verification of overriding legitimate grounds.
Right to data portability
Where processing is based on consent and carried out by automated means, the data subject has the right to receive the personal data provided to the Company in a structured, commonly used, and machine-readable format.
Right to object
Where processing is carried out based on the Company’s legitimate interests, or for direct marketing or profiling purposes, the data subject may object to the processing of their personal data at any time.
Can I withdraw my consent later?
Where consent is legally required, the data subject may withdraw consent at any time. This does not affect the lawfulness of processing carried out prior to withdrawal or processing based on another legal basis, such as contractual or legal obligations.
To withdraw consent, please contact: info@slidesplash.com
How does the Company use cookies and similar technologies?
To provide a better user experience, we use cookies — small text files placed on your hard drive by a web server. This technology is used to:
Identify visitors and provide a safer, more personalised service;
Analyse website performance and plan improvements aligned with customer expectations.
Each visitor is assigned an individual cookie, ensuring data privacy and security. Statistical data is presented in aggregated form and does not allow individual identification.
Web browsers allow some control over cookies through browser settings. Most browsers allow users to block cookies or delete them upon closing the browser. Please note that doing so may result in the loss of preferences or opt-outs.
For more information about cookies, including how to manage or delete them, visit www.allaboutcookies.org
. Please note that disabling cookies may partially or fully affect your browsing experience on the Website.
Do you have any questions?
If you have any questions regarding the processing of your personal data or wish to exercise any of your rights, please contact us:
Correia & Santinha, Lda.
Attn: Head of Digital Marketing Office
Address: EN 125 Vale de Deus, Apartado 90, 8401-901 Lagoa, Portugal
Email: info@slidesplash.com
Phone: +351 282 340 800 (national landline call)
The Company will periodically update this Privacy Policy. We encourage you to review this document regularly to stay informed.
Last updated: March 2024
