PRIVACY POLICY
This Privacy Policy explains what we do with your personal data, in the process of starting or continuing our commercial relationship, in terms of providing a service to you. It describes how we collect, use and process your personal data and, in doing so, how we comply with our legal obligations to you. Your privacy is important to us and we are committed to protecting and safeguarding your data privacy rights. This Privacy Policy applies to the personal data of our Customers (individuals). For the purposes of applicable data protection legislation [including, among others, the General Data Protection Regulation [Regulation (EU) 2016/679] ("GDPR")], Marés do Sotavento, Lda. is responsible for your personal data.
COOKIES
When you visit our website, a small text file (Cookie) is created and saved on your computer's disk. This file, when recognized, will allow you to access it more easily and quickly, and personalize the page in terms of your online experience. We also identify technical information about your computer when you visit pages on our website, such as IP (Internet Protocol), operating system, browser type.
HOW DO WE COLLECT YOUR PERSONAL DATA?
We collect personal data directly from you.
HOW DO WE SAFEGUARD YOUR PERSONAL DATA?
We are committed to taking all reasonable and appropriate measures to protect the personal information we hold from misuse, loss or unauthorized access. We do this by creating a set of appropriate technical and organizational measures.
WHAT TYPE OF PERSONAL INFORMATION DO WE COLLECT?
If you are one of our customers, we need to collect and use information about you or your company as part of our service provision, namely to comply with tax obligations.
HOW DO WE USE YOUR PERSONAL DATA?
After providing your data: we use Customer information to help us in the exercise and scope of our commercial relationship. With the strictly necessary information, we intend to personalize our service.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
Data must be kept for as little time as possible. This period must take into account the reasons why we need to process the data, as well as any legal obligations to retain the data for a certain period of time.
HOW CAN YOU ACCESS, ALTER OR REMOVE THE PERSONAL DATA YOU HAVE PROVIDED TO US?
One of the main objectives of the GDPR is to protect and clarify the rights of EU citizens and people in the EU as regards data privacy. This means that you have several rights with respect to your data, even when we have been provided by you. They are described in more detail below. Please note that we may keep a record of your communications to help us resolve any issues raised by you. If you wish to exercise any of the following rights, you must request the form for the purpose of the electronic address.
Right to object: persons are entitled to oppose in cases where a public administration is processing the data in the context of its public tasks or where an undertaking is processing the data based on its legitimate interests. In such cases, the company/organization can no longer handle the data, unless it is able to demonstrate that it must perform the treatment for reasons that should prevail over the rights and freedoms of persons or if it needs the data for the Declaration, the Exercise or the defence of a right in a judicial proceeding.
People also have the right to oppose, at any time, the processing of their personal data for the purposes of Direct Marketing. Direct marketing is understood in the general regulation on data protection, such as any action by an undertaking intended to communicate advertising or marketing material to specific persons.
The company must inform people, at the time of the first communication with them, that they will use their personal data for direct marketing purposes and that they have the right to oppose free of charge. Where a person opposes the processing of personal data for the purpose of direct marketing, your company may no longer be able to process your personal data for that purpose.
Right to withdraw his or her consent: If we have obtained your consent to proceed to the processing of your personal data you may withdraw this consent at any time and we will cease to perform the specific activity you previously consented to, unless we consider there to be a Alternative reason to justify the continued treatment of our part of your data for this purpose, in which case we will inform you about this condition.
Right of access by the data subject: You may ask us at any time to confirm the information we have about you and may ask us to change, update or delete this information. We may ask you to verify your identity and further information about your request. If we grant you access to the information we hold about you, we will not charge that access unless your request is "manifestly unfounded or excessive". If you request additional copies of this information, we may charge you a reasonable administrative cost when legally permitted. In cases where we are legally permitted, we may refuse your request. If we refuse your request, you will always be informed of the reasons for doing so.
Right to erasure (right to be forgotten): In certain circumstances, you have the right to ask us to erase your personal data. Normally, the information should observe one of the following criteria:
-
The data is no longer necessary for the purpose for which we originally collected and/or treated them;
-
Once it has been given earlier, it has withdrawn its consent to proceed with the processing of its data and there is no other valid reason for us to continue to treat it;
-
The data were unlawfully treated (i.e., in a way that does not comply with the GDPR);
-
The data must be erased in order to comply with our legal obligations as a controller;
-
If we proceed to the processing of the data because we consider that it is necessary to do so for our legitimate interests, it opposes the treatment and we are not able to demonstrate legitimate imperative reasons for our continued treatment.
We may only refuse to fulfill your request for one of the following reasons:
-
To exercise the right of freedom of expression and information;
-
To comply with legal obligations or to perform a task of public interest or the exercise of an official authority;
-
For public health reasons in the interest of the public;
-
For file, research or statistical purposes;
-
For exercising or defending a right.
By fulfilling a valid request for data erasure, we will take all reasonable practical steps to erase the relevant data.
Right to restriction of processing: In certain circumstances, you have the right to restrict the treatment we make of your personal data. This means that we can only continue to store your data and we will not be able to perform further treatment activities with them until:
-
That one of the circumstances listed below is resolved;
-
Your consent;
-
Additional treatment is required for the declaration, exercise or defense of a right, protection of the rights of another person or important public interest of the EU or a Member State.
The circumstances in which you are entitled to request that the restriction of the treatment of your Personal data are:
-
If you dispute the accuracy of the personal data we treat about you. In this case, the processing of our part of your personal data will be restricted by the period during which the accuracy of the data is verified;
-
If you oppose the processing of your personal data for our legitimate interests. In this situation, you may request that the data be restricted while we check our fundamentals for the processing of your personal data;
-
If the treatment we make of your data is illicit, but prefer to restrict the treatment we make of them instead of the deletion;
-
If we no longer need to process your personal data, but you need the data for the declaration, the exercise or the defense of a right.
If we have shared your personal data with third parties, they will be notified of the restricted treatment, unless this is impossible or involves a disproportionate effort. We will, of course, notify you before you withdraw any restriction on the processing of your personal data.
Right to Rectification: You also have the right to request that we withdraw any inaccurate or incomplete personal data we possess about you. If we have shared such personal data with third parties, they will be notified of the rectification, unless this is impossible or involves a disproportionate effort. Where appropriate, we will also disclose to you that any third party disclosures the inaccurate or incomplete personal data. In cases where we consider it reasonable not to satisfy your request, we will explain the reasons for the decision.
Right to Data portability: If you so wish, you have the right to transfer your personal data between those responsible for the treatment. To allow you to do so, we will provide you with your data in a format that has to communicate to us. Alternatively, we may transfer the data directly to you. This right to data portability applies to:
-
Personal Data we treat automatically (i.e. without any human intervention);
-
Personal data provided by you;
-
Personal data we treat based on your consent or to fulfill a contract.
Right to Information: This right provides the data subject with the ability to request information from a company about what the personal data is and, on the processing, and justification for such processing.
Please note that we may keep a record of your communications to help us resolve any issues raised by you. It is important that the personal information we possess about you is accurate and current. Please let us know if there are any changes to your personal information during the period in which we retain your data.