What are personal data?
Personal data are any information, of any nature and regardless of its support, including sound and image, on an identified or identifiable individual. An individual is considered identifiable when they can be identified, directly or indirectly, namely by referring a name, identification number, location data, electronic handles or one or more specific aspects of their physical, physiological, genetic, mental, economic, cultural or social identity.
What does personal data processing consist of?
Personal data processing consists of an operation or series of operations carried out on personal data or personal data sets, either through automated means or not, namely collecting, recording, organising, structuring, storing, adapting, recovering, consulting, using, disclosing, diffusing, comparing, interconnecting, limiting, deleting or destroying.
Our data protection policy ensures that the data are: The object of lawful, fair and transparent processing with regard to the data subject (“lawfulness, fairness and transparency”); Collected for specific, explicit and lawful purposes and cannot be processed in a manner that is incompatible with such purposes; Suitable, pertinent and limited to what is necessary with regard to the purposes for which they are processed; Accurate and updated whenever necessary; Ensuring all the suitable measures are in place so that inaccurate data, given the purposes for which they are processed, can be deleted or rectified without delay; Stored in a way that allows for identification of the data subjects only during the time necessary for the purposes for which they are processed; Processed in such a way as to ensure their security, including protection against unauthorised or unlawful processing and their accidental loss, destruction or damage, adopting the suitable technical or organisational measures;
Purposes of personal data processing.
We shall collect, among others, the following information, ensuring, when necessary, the personal data subject’s prior consent: Name and Surname; Taxpayer Number; Date of Birth, Email, Telephone Number and Address. In general, the personal data collected are intended for managing the contractual relationship, providing the contracted services, suiting the services to the customer or user’s needs and interests, namely to access specific features of the services and products, for informational services, sending the newsletter, requests for information and contact as well as information and marketing campaigns. In addition, the personal data could also be processed for complying with legal obligations and for the purposes of investigating, detecting and curbing serious crimes.
The time during which the personal data are stored and retained varies according to the purpose for which the information is processed. In effect, there are legal requirements that bind the entity to store the data for a minimum period of time. As such, and in the absence of a specific legal requirement, the data shall be stored and retained only for the minimum period necessary to pursue the purposes behind their collection and processing, under the terms defined in the law.
Age of majority
Use of personal data
“Sofia Lobo Cera” may contact you under the terms defined by you (for instance, sending the newsletter) to introduce you to the goods and/or services it offers. The processing of such data is based on the consent given by the data subject. Access to personal data is strictly limited to its team and subcontractors.
Sharing personal data
“Sofia Lobo Cera” ensures it shall not transfer data to third countries in the General Data Protection Regulation. “Sofia Lobo Cera” entered into an agreement with its subcontractors, whereby they are bound to not disclose data to third countries. In certain situations, both “Sofia Lobo Cera” and it subcontractors may be notified to disclose personal information in response to requests made by supervisory bodies to meet the GDPR requirements.
“Sofia Lobo Cera” undertakes to ensure to protect the security of the personal data made available to it, having approved and implemented stringent rules on this matter. All those who legally access the personal data are bound to comply with these rules. Several security measures of a technical and organisational nature have been adopted, bearing in mind the concern “Sofia Lobo Cera” has in protecting personal data. These are aimed at protecting the personal data made available to it against their disclosure, loss, undue use, alteration, unauthorised processing or access, as well as against any other means of unlawful handling. In addition, the third parties who, under the scope of providing services, process the Customers’ or Users’ personal data on behalf and account of “Sofia Lobo Cera are bound, in writing, to enforce the suitable technical and security measures which will meet the requirements envisaged in the law at any given time and ensure the protection of the data subject’s rights (namely protecting the privacy and personal data of the Customers and Users).
Access and rectification or deletion of personal data
The Customer or User, as data subject, has the right to request access to their data, request to rectify them or delete them. They may also limit the data processing, as well as oppose such processing and request data portability. They can do so directly or by written request through the contacts available to this end on the website contact form. You may also ask “Sofia Lobo Cera” for clarification or file a complaint with the Portuguese Data Protection Authority if you feel your rights are being breached.
Right of access
The data subject has the right to obtain from “Sofia Lobo Cera” the confirmation that the data that relate to it are being processed or not and, if need be, access their personal data and the information envisaged in the law.
Right to rectification
The data subject has the right to obtain from “Sofia Lobo Cera” and without any undue delays the rectification of inaccurate or incomplete data that relate to it.
Right to data deletion (“right to be forgotten”)
The data subject has the right to request that “Sofia Lobo Cera” delete their data, without undue delays, and the latter has the duty of deleting personal data, without undue delays, when one of the following reasons apply, to wit: a) The personal data are no longer necessary for the purpose that led to their collection or treatment; b) The data subject has withdrawn their consent to processing the data (in the event that processing is based on consent) and there are no other grounds for processing; c) The data subject opposes processing and there are no prevailing legitimate interests that would justify processing.
Right to limitation of processing
The data subject has the right to obtain limitation of processing from “Sofia Lobo Cera” if one of the following situations applies, to wit: a) Contesting the accuracy of the personal data during a period that allows “Sofia Lobo Cera” to check their accuracy; b) The data processing is lawful and the data subject opposes the personal data deletion and requests, in exchange, the limitation of their use; c) “Sofia Lobo Cera” no longer needs the personal data for the purposes of processing but those data are requested by the subject data for the purpose of statement, exercising or defending a right in legal proceedings; d) If they have opposed processing, until it’s verified that the legitimate reasons for the person in charge of processing prevail over those of the data subject.
Right to data portability
If the processing depends on the data subject’s consent and this consent has been given through automated means, the data subject has the right to receive their personal data, which they gave to “Sofia Lobo Cera”, in a structured format that is of standard use and automatic reading.
Right to oppose
In the cases where the data processing is for 1) the legitimate interests pursued by “Sofia Lobo Cera”; or 2) for direct marketing or 3) the definition of profiles, the data subject may at any time oppose the processing of their personal data.
After receiving explicit consent, the persons in charge of data processing have permission to send marketing emails to the website users. The user may cancel consent at any time through the link for this purpose that is included in every email sent.
Changes to this policy
This policy may be updated occasionally, for instance due to changes in the relevant legislation. The customers shall be informed by email or a notice posted on the website should any material amendments be carried out.
PERSON IN CHARGE OF PROCESSING
Sofia Lobo Cera
Tel: +351 962308966