Oitoemponto is committed to protecting the privacy of all users of its website (hereinafter the “Website”), having drawn up this privacy policy in order to demonstrate its commitment and respect for the personal data of its users, having as well as adopted the best practices regarding the security and protection techniques for personal data (the “Privacy Policy”), as further described below.
I. OUR COMMITMENT
Oitoemponto ensure compliance with the obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council, General Data Protection Regulation (hereinafter “GDPR”), from Law no. 58/2019, of August 8 (Personal Data Protection Law) and other applicable data protection legislation.
Protecting your privacy is a priority to Oitoemponto, as the compliance with applicable legal obligations, which is why we are committed to only processing the strictly necessary personal data to provide you with the best service, guaranteeing respect for your privacy, transparency in information and application of best practices in the field of security and protection of personal data.
II. DATA CONTROLLER
The Data Controller is OITO EM PONTO, S.A., with headquarters at Rua de Tânger, no. 1378, zip-code 4150-721 Porto, taxpayer number and legal person no. 503 246 905 (hereinafter “Oitoemponto” and “we”).
If you need to contact us, you can do it through the following e-mail address: oitoemponto@oitoemponto.com.
III. PURPOSES OF THE PROCESSING, LEGAL BASIS AND STORAGE PERIODS
Users can access, browse, and use this Website without necessarily having to provide information. Notwithstanding the above, the use of certain tools on the website may involve the provision of personal data. In this regard, please also read our Cookies Policy.
In this context, the processing of your personal data has the following purposes, legitimate basis and storage periods:
a) Website Management
The computer systems used to operate this Website acquire, during their normal operation, some personal data which transmission is implicit in the use of Internet communication protocols.
These data (such as domain names, IP addresses, operating system used, type of device and browser used for connection) is not accompanied by any additional personal information and are used to: i) obtain anonymous statistical information on the use of the site; ii) manage the control requirements of the methods of use of the site, iii) determine liability in the event of hypothetical computer crimes.
The processing of this personal data is necessary to enable the correct use of the Website, the processing is based on the execution of a contract whose terms are governed by the Terms & Conditions and, when there is an omission, by the general principles of law.
Your data will be stored for up to 6 (six) months after your last visit to the website and by the information provided in the Cookies Policy .
b) Contacts Management
The processing of this data is necessary for the receipt, analysis, follow-up, and response to requests for information and/or complaints. This processing is based on Oitoemponto's legitimate interest in following up on your requests.
Your data will be kept for up to 1 (one) year after the last contact interaction.
c) Applications
We may process your personal data whenever you send us your CV (spontaneous application). The legitimate basis of this processing is to take steps at the request of the data subject prior to entering into a contract.
Your data will be kept for six (6) months upon the receipt of your CV, after which it will be deleted in case you are not contacted by Oitoemponto.
d) Newsletters
The personal data provided by the User through the form are collected and processed to send periodic newsletters and advertising material by e-mail; and to receive updates on our activities, projects, articles, and/or events.
Personal data are processed based on the User's consent when they subscribe to Oitoemponto's electronic communications.
Users may withdraw their consent at any time by opting out of the newsletters received by e-mail, at which point Oitoemponto will no longer store their personal data for this purpose.
Data will only be kept for the strictly necessary time for the management and fulfilment of the legal basis for which data are collected, in accordance with the applicable legislation.
In any case, Oitoemponto adopts procedures that prevent data from being stored indefinitely, limiting the storage period by the principle of data minimisation and storage limitation. Once the defined storage period has expired, we undertake to delete, destroy, or anonymize your personal data, except for data that we are legally obliged to retain for a longer period.
IV. PERSONAL DARA CATEGORIES
In the context of these purposes, we only process data that are strictly necessary for the pursuit of those purposes, namely:
• Identification data (e.g. full name);
• Contact (e.g. e-mail, telephone contact);
• Traffic (e.g. browsing cookies).
Oitoemponto does not process special categories of data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, nor does it process genetic data, biometric data to unequivocally identify a person, data relating to health or data relating to a person's sex life or sexual orientation.
V. DATA TRANSFERS
The processing of the data collected is carried out by internal employees, designated for this purpose and authorized to process the data by specific instructions given in compliance with the legislation in force.
In certain cases, we may disclose your personal data, to the extent strictly necessary, to third parties who provide services to us (“data processors”) for the purposes mentioned above and under contractual obligations and instructions established with them.
If, in any case, your personal data have to be shared with service providers located outside the European Economic Area, Oitoemponto will ensure that your personal data benefits from a high level of protection by promoting the data transfer under an adequacy decision of the European Commission or the Standard Contractual Clauses, pursuant to Commission Implementing Decision (EU) 2021/914 of June 4, 2021.
Your data may also be communicated to authorities when the transmission is made in compliance with a legal obligation, a resolution of the National Data Protection Commission (“NDPC”), another relevant supervisory authority and/or to comply with a court order.
Under no circumstances will Oitoemponto process Users' personal data for purposes that are not provided for in this Privacy Policy and/or without a legitimate basis for processing, by the applicable legislation.
VI. DATA SUBJECTS
Under the terms of the applicable legislation, the User, as a data subject, may at any time request the right of access, rectification, erasure of their personal data, limitation of processing, portability, opposition and not to be subject to automated decisions, following its applicability.
In cases where the User has given your consent to certain processing of your personal data, you may withdraw it at any time.
To exercise any of these rights, please send a request to the following e-mail address: privacy@oitoemponto.com.
Users may also contact us with any questions regarding the processing of their data and the exercise of their rights under the applicable legislation, and particularly this Privacy Policy, through the mentioned e-mail.
Notwithstanding any other administrative or judicial remedy, you may also file a complaint with the CNPD (www.cnpd.pt) if you believe that our processing of your personal data infringes the current legal framework.
VII. COOKIES
We recommend you read our Cookies Policy, which forms an integral part of this policy, to find out more about the processing of your personal data carried out through this functionality.
VIII. SECURITY MEASURES
We have a variety of technical security measures aligned with national and international best practices to protect your personal data, including technological controls, administrative, technical and physical measures and procedures that guarantee the protection of your personal data, preventing its misuse, unauthorized access to the data, its disclosure, loss, improper or inadvertent alteration, or its destruction.
In terms of information security, we are committed to the same continuous improvement that we are guided by in our daily activities.
However, it is the responsibility of Users to guarantee and ensure that the devices and equipment used to access this website are adequately protected against harmful software, computer viruses and worms.
IX. HYPERLINKS
We may provide hyperlinks to other websites (owned by Oitoemponto) and to third-party websites for product marketing, as well as hyperlinks to our social media pages.
Oitoemponto is not liable for the privacy policy, cookie policy or terms and conditions of use of i. websites owned and/or managed by third parties and ii. social networks.
The User acknowledges that by accessing other websites, through the links provided, the entities managing those websites may collect information about him/her. We recommend that when accessing other websites, the User check and read all the policies made available, beforehand.
X. PRIVACY POLICY UPDATES
This Privacy Policy may be reviewed and updated at any time, and these changes will be duly published and communicated on the Website.
Updated on 12 November, 2024