Privacy Policy
IN REGARD OF FULFILLMENT WITH THE GENERAL REGULATION FOR THE PROTECTION OF PERSONAL DATA (EU REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27/04/2016), WE MAY INFORM THE FOLLOWING ABOUT OUR PRIVACY POLICY:CY POLICY:
A) Who is responsible for processing your data;
B) What data do we collect from our customers and its purpose.
C) Who are the recipients of your data;
D) Where do we store your data;
E) What are your rights when you provide your data;
F) For how long do we store your data;
G) Guarantees
A) WHO IS RESPONSIBLE FOR THE TREATMENT OF YOUR DATA?
The company responsible for the processing of your Personal Data is Orientesuplente, S.A. tax number and legal person nº 514 021969, headquartered at Rua Dr. Sousa Viterbo nº 42, 4050-593 Porto, Portugal.
To deal with issues related with the processing of your personal data, you should contact us, through the following contacts:
- Tel .: (351) 927 553 553
- E-mail address: info@viterbo8.com
- Address: Rua Dr. Sousa Viterbo nº 42, 4050-593 Porto, Portugal
B) WHAT DATA DO WE COLLECT FROM OUR CLIENTS, HOW DO WE USE THEM, AND THE PURPOSE OF THE SAME?
Our company collects the following personal data from customers:
Full name.
E-mail address.
Phone or mobile number.
Address.
Tax Number.
The purposes of processing Personal Data are as follows:
a. Marketing: we will use your personal data to communicate, to send information about our services, products, and events, to the disclosure of Newsletter, to the disclosure of promotions and invitations within the scope of the company's activity.
b. Provision of products and services: we will use your personal data to fulfill and execute a purchase and sale contract for our products/services or for a service provision contract that you accept with our company.
c. Communication: we may use your personal data to send our costumers information/news related to our services and / our products, or to send invitations, as well as to provide assistance in matters relating to customer support;
d. Recruitment: Orientesuplente, S.A. during the personnel selection and recruitment process collect and processes personal data of the interested candidates. The personal data processed will be those contained in the application form and the Curriculum Vitae, as well as all personal data that candidates spontaneously decide to transmit to Orientesuplente, SA, including but not limited to, name, age, sex, photo, contact details (email and phone number), education information and employment history.
e) Video surveillance of Orientesuplente, S.A establishments: our Company’s establishments have a video surveillance system. The image recordings obtained are kept for a period of 30 days from the respective capture. After a period of 30 days, images are eliminated. If there is a court order images can be kept for a longer period.
C) WHO RECEIVES YOUR DATA? WITH WHO CAN ORIENTESUPLENTE, S.A. SHARE YOUR PERSONAL DATA?
Your personal data may be disclosed by our company within the scope of our business group, as well as Orientesuplente, SA may subcontract third parties to provide certain services, such as marketing services (including, messaging and emailing), maintenance of the website and digital suppliers, digital marketing software in the cloud and online marketing platform company. Therefore, companies subcontracted by our company for hosting web pages, sending information about products and services, special offers or invitations, email, answering customer questions about the services, may treat your personal data. However, we emphasize that these companies will only be provided with the personal data necessary for the provision of our services.
In the cases that these third parties may need to access to certain information and personal data Orientesuplente, SA guarantees that, in such cases, these third parties will only have limited access to the data holders' information, restricted to the necessary data for the performance of the contracted tasks. Is important to stress that if there is a contract with a third party the protection of Personal Data will be contemplated. These third parties agree neither to disclose Personal Data in any way, nor to use it for purposes other than providing the contracted services.
Our company does not intentionally collect personal information from children under 18.
D) WHERE DO WE STORE YOUR DATA?
Our company stores costumers´ personal data in an online database, marketing platforms and in data management software. Costumers´ personal data is protected from unauthorized access, use or disclosure.
Our company follows the necessary, adequate technical, electronic and organizational procedures to guarantee the security of your Personal Data and to prevent its loss, misuse or improper access.
Our company will only process your data for the purposes for which it was collected, under the terms set out in this Privacy Policy.
Our company adopts the appropriate procedures to ensure that the information provided is accurate, complete and current, but it is up to the customer to update or correct his personal information whenever it is necessary.
E) WHAT ARE YOUR RIGHTS WHEN YOUR DATA IS PROVIDED?
In accordance with applicable law, our company is committed to respect the confidentiality of your personal information and guarantee the exercise of your rights to:
a) Right of protection of personal data (Article 1 of the GDPR - General Data Protection Regulation): This regulation establishes rules regarding the protection of the individuals with regard of the processing of their personal data and the free movement of such data.
b) Right to information: our customers are entitled to obtain clear, transparent and understandable information about how our company uses their personal data (article 13º GDPR - General Data Protection Regulation);
c) Right of access to the information we have about individual customers: in accordance with the right to information, you can access to your personal data that we have processed and kept. Any time you can ask our company to access the information we have about you (article 15 GDPR-General Data Protection Regulation);
d) Right of Rectification: you have the right to rectify your personal data if it is incorrect, out of date or if you want to complete it. To do so, you can contact us for the above-mentioned contacts (Article 16 GDPR - General Data Protection Regulation);
e) Right of cancellation or right to be forgotten (article 17 GDPR - General Data Protection Regulation): you can ask us to delete your data. The right to delete data is usually known as the "Right to be forgotten", therefore, the data owner has the right to obtain the elimination of his personal data, without undue delay. This is the obligation to delete your personal data without undue delay, when one of the following reasons are applicable:
a) Personal data are no longer necessary for the purpose for which they were collected or processed;
b) The holder withdraws the consent on which the data processing is based under article 6, paragraph 1, point a), or article 9, paragraph 2, point a) of the GDPR and if there is no other legal basis for the mentioned treatment;
c) The holder opposes the treatment under the terms of article 21, paragraph 1 of the GDPR, and there are no prevailing legitimate interests that justify the treatment, or the holder opposes the treatment under the terms of article 21., no. 2 of the GDPR;
d) Personal data has been processed unlawfully;
e) Personal data must be erased in order to comply with a legal obligation under Union law or a Member State to which the controller is subject;
f) Personal data were collected in the context of the provision of information society services referred to in article 8, paragraph 1 of the GDPR;
g) Right of opposition, including direct marketing: you can delete the subscription to our company's Newsletter or choose to be removed from our direct marketing communications at any time. (Article 21 GDPR - General Data Protection Regulation);
h) Right to withdraw your consent for data processing at any time: You can withdraw your consent to data processing when the mentioned processing is based on your consent. Withdrawal of consent does not affect the legality of consent-based treatment prior to withdrawal;
i) Right to file a complaint with CNPD: if you consider that the processing of your personal data carried out by our company violates the applicable data protection legislation, you can file a complaint with the Comissão Nacional de Protecção de dados - National Data Protection Commission ("CNPD"). Do not hesitate to contact us before filing any complaints with CNPD.
j) Right to data portability: you have the right to move copy or transfer data from our database to another (article 20º GDPR -General Data Protection Regulation);
k) Right to limit the processing: you have the right to request the restriction of the processing of your data in the following situations:
-if you contest the accuracy of the data, if the processing is illegal and you do not want to delete your data, but only limit it;
-if the data is no longer necessary for our company, but necessary for the customer or if you have exercised the right of opposition mentioned above, during the period of time in which our company analyzes whether your legitimate interests for the treatment prevail or not over that right (article 18º GDPR -General Data Protection Regulation).
l) Right to notification (Art. 19 of the GDPR): The data owner has the right to be notified of any rectification, deletion or limitation of the treatment that the controller has carried out on, because of a request for rectification, deletion or limitation treatment.
m) Right not to be subject to autonomous decisions (Art.22 of the GDPR): The data owner has the right not to be subject to any decision taken exclusively on the basis of automated processing, including the definition of profiles, which has an effect on its legal sphere or that significantly affects it in a similar way. The provisions of the previous paragraph do not apply if the decision:
a) It is necessary for the conclusion or execution of a contract between the data owner and a controller;
b) is authorized by Union or Member State law to which the controller is subject, and in which appropriate measures are also provided for to safeguard the rights and freedoms and legitimate interests of the data owner;
c) It is based on the explicit consent of the data owner.
n) Right to be warned in case of personal data breach (Article 34 of the GDPR): When the personal data breach is likely to imply a high risk to the rights and freedoms of individuals, our company will report the data breach personal data to the data owner without undue delay. o) Rights related to the principles of the processing of personal data as enshrined in article 5 of the GDPR - General Data Protection Regulation; To request the exercise of any of the rights listed above, in addition to the forms specifically mentioned in the respective paragraphs, you can send a communication addressed to the contacts identified above. You are invited to use our contacts if you want to address us any questions regarding this Privacy Policy.
F) HOW LONG DO WE STORE YOUR DATA?
We only keep Personal Data for as long as it is necessary to achieve the purpose for which it was collected, to respond to your needs or to comply with our legal obligations. To determine the period for which we keep your data, we use the criteria mentioned below. If several criteria are applied simultaneously, we will keep your personal data in accordance with the criteria that implies the conservation of your Personal Data for the longest period.
a) When purchasing products and / or services, we will keep your personal data for the duration of our business relationship, including any complaints that may arise, as well as for a period of two years after the end of the same, without prejudice to compliance with legal obligations of the controller;
b) When you contact us to ask questions, we will keep your personal data for as long as necessary to resolve your question;
c) When making online reservations on our website, we will retain your data until you ask us to delete it or after a two-year period of inactivity;
d) When you have consented to sending direct marketing, we will keep your personal data until you cancel the subscription or ask us to delete it;
e) Regarding the data collected in the recruitment process, for a maximum period of 1 year from the end of the process;
f) The period of time provided for in the applicable legislation; or
g) Until the specific purpose applicable to certain data ceases to exist. In any of the aforementioned situations, if there is a pending legal or administrative proceeding, the data will be kept for the duration of the process and up to six months after the final decision has been handed down.
h) We may also retain some of your personal data to the necessary extent to comply with our legal obligations, as well as to manage or enforce our rights, namely through recourse to the courts. After the aforementioned conservation periods, Personal Data will be deleted and/or erased safely
G) GUARANTEES
The data owner guarantees that the Personal Data communicated to our company is certain and accurate and undertakes to notify them of any changes or modifications and assumes sole responsibility for the losses and damages caused by the erroneous, inaccurate or incomplete communication of the data. The data owner is expressly warned that when revealing Personal Data in public media of our establishments (company) such as Facebook, and Instagram, this information may be seen and used by third parties. We do not read any personal communications published on your clients' websites.
