PRIVACY POLICY
WE ARE COMMITTED TO PROTECTING THE PRIVACY AND PERSONAL DATA OF USERS OF THE WEBSITE, WHICH IS WHY WE HAVE PREPARED THIS POLICY AND THE PRACTICES DESCRIBED HEREIN. IN THIS POLICY, WE EXPLAIN HOW YOUR PERSONAL DATA IS COLLECTED AND PROCESSED, SO WE ADVISE YOU TO READ IT.
1. IDENTIFICATION OF THE DATA CONTROLLER.
Entity: ENCOSTA DA PAREDE – SIC IMOBILIÁRIA FECHADA, S.A. (adiante, “ENCOSTA”)
NIPC: 507809653
Headquarters: Edifício Sodi, Estrada Nacional nº249, Km 6, Abóboda, 2785-599 São Domingos de Rana, Portugal
Telephone Contact: +351 214 418 430
Email: francisco.sousa.dias@sdi-sgps.pt
2. WHAT IS THIS POLICY ABOUT?
2.1. This Privacy Policy explains how we collect and process personal data that is necessary for the provision of services that are available through the website and describes the practices adopted for that purpose.
3. WHAT ARE PERSONAL DATA?
3.1. Personal data shall mean all information relating to an identified or identifiable individual, whatever the nature and support of the information, including sound and image of the individual.
3.2. An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identification number or to other factors specific to his physical, physiological, mental, economic, cultural or social identity.
4. HOW DO WE USE YOUR PERSONAL DATA?
4.1. The personal data processing operations that we carry out are an essential tool for your satisfaction and for the activity of ENCOSTA and are performed in accordance with applicable law and best practices.
4.2. Your personal data will not be reused for other purposes that are not previously identified or that have no connection with those purposes for which they were initially collected.
5. WHAT ARE THE PURPOSES, LEGAL BASIS AND RETENTION PERIODS FOR THE DATA COLLECTED?
5.1. The personal data we process has specific bases, depending on the purposes for which they are intended, and will be kept for the time necessary for the respective purposes, as listed in this Privacy Policy.
5.2. The personal data collected are only those necessary and appropriate for the purposes indicated.
5.3. The following table shows the purposes of processing and data collected for these purposes, the respective grounds and the periods or criteria for storing data:
5.3. If the law provides for a specific or mandatory period, the data will be kept for that period. In all other cases, personal data will be kept for a maximum of the times indicated above, periods that the ENCOSTA considers sufficient to fulfil the purposes.
5.5. At the end of the conservation period, all personal data collected will be deleted.
6. HOW DO WE COLLECT YOUR PERSONAL DATA?
6.1. We will collect your personal data through the forms on the website, but also through the website and the communication that it makes with your device and email messages that you send us.
6.2. Your personal data is collected through your equipment as follows:
(a) When you fill in the contact form that exist on the website;
(b) Through your browser;
(c) Through cookies;
(d) IP Address.
6.3. ENCOSTA is committed to process your data lawfully and legally.
6.4. ENCOSTA will not sell, rent or share your personal data with third parties, except as clearly identified in this Privacy Policy (see Section 11 to understand how).
7. WHAT ARE COOKIES?
7.1. Cookies are small information files that help you identify your browser and can store information, for example, User settings and preferences.
7.2. ENCOSTA will store cookies on your device to personalize and facilitate browsing as well as troubleshooting, statistics, quality assurance, and to monitor system security.
7.3. With the exception of cookies specifically required for the performance of the website, the storage of other cookies will always depend on the acceptance and consent of the User, and this consent may be withdrawn at any time through specific browser tools.
7.4. To know more about the cookies we use please refer to our Cookies Policy.
8. HOW DO WE PROTECT YOUR PERSONAL DATA?
8.1. Your personal data is kept secure by adopting a variety of technical and organizational security measures to ensure that only those employees who are required to access the personal data in accordance with the access requirements and rules created for this purpose have access to it.
8.2. To protect your personal data, we only use data center providers that offer adequate and documented security measures, including guarantees that your personal data is stored on servers that are maintained in controlled environments with limited access.
8.3. Although we take all necessary precautions, we deem appropriate to protect the personal data you provide and we collect, one must be aware that no security system is impenetrable.
9. WHICH ARE YOUR RIGHTS:
9.1. Before we explain how you can exercise your rights, we inform you which they are:
(a) Access: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, the right to access your personal data;
(b) Rectification: the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed;
(c) Erasure: the right to obtain the erasure of your personal data when one of the grounds listed in the legislation applies, namely where:
i. The personal data is no longer needed in relation to the purposes for which they were collected;
ii. The data subjects withdraws consent on which the processing is based and there is no longer other legal ground for the processing;
iii. The data subjects objects to the processing and there are no overriding legitimate grounds for the processing;
iv. The personal data have been unlawfully processed;
v. The personal data have to be erased for compliance with legal obligations;
vi. The personal data have been collected in relation to the offer of information society services.
(d) Restriction of processing: the right to obtain limitation of processing if one of the situations listed in the legislation applies, namely where one of the following applies:
i. The accuracy of the personal data is contested by the data subject;
ii. The processing is unlawful and the data subject opposes the erasure of the personal data requesting the restriction of their use instead;
iii. The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
iv. The data subject has objected to processing related with automated individual decision-making.
(e) Objection: the right to object on grounds relating to data subject’s particular situation, at any time of the processing of personal data concerning him or her which is based on public interest or legitimate interests;
(f) Data portability: the right to receive personal data concerning him/her in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from the controller to which the data have been provided where the processing is based on consent or on a contract or where the processing is carried out by automated means.
9.2. You also have the right to lodge a complaint with a supervisory authority (National Data Protection Commission at cnpd.pt).
9.3. In addition to the rights described above, when the basis for the processing of data is consent, the User has the right to withdraw such given consent at any time, without this invalidating the processing of data carried out up to that point.
10. HOW CAN YOU EXERCISE YOUR RIGHTS?
10.1. By writing to the following addresses:
a) Via email: hcascais@ENCOSTA.pt
10.2. if you request us to delete some or all of your personal data, some of the services you have requested may not be provided to you and ENCOSTA will retain only the personal data necessary to comply with its legal obligations.
11. WHEN DO WE COMMUNICATE DATA TO THIRD PARTIES?
11.1. ENCOSTA may use third parties to provide certain services, such as maintenance, technical support and marketing, which may have access to some personal data, in particular, data required for contractual purposes.
11.2. ENCOSTA ensures that the entities that have access to the data are credible and offer high guarantees of protection, and that that data will never be transmitted beyond what is necessary to provide for the contracted service, nevertheless ENCOSTA remains responsible for the personal data made available.
11.3. ENCOSTA may also transmit data to third parties in the context of investigations, inquiries and judical and / or administrative proceedings or of similar nature, provided that it is duly ordered by a court.
12. THIRD PARTY WEBSITES.
12.1. The WEBSITE may contain links to other websites which may collect and process your personal data, and this processing is the sole responsibility of the owners of these websites, and ENCOSTA does not take any responsibility for its policies and / or practices.
13. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION.
13.1. Your data will be processed by us within the worldwide economic Area.
13.2. In the event that data transfers may occur to third countries outside the European Union or the European Economic Area, ENCOSTA will make the necessary efforts to adopt the appropriate guarantees so that these are realized in accordance with the applicable legislation.
14. MINORS.
14.1. The WEBSITE is not intended for minors under the age of 18, thus, we request that minors do not provide us with personal information through the website, social media and/or emails.
15. SENSITIVE PERSONAL DATA.
15.1. ENCOSTA requests you not to send or disclose to us any sensitive personal data, i.e. information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health data or data concerning a natural person’s sex life or sexual orientation.
15.2. If you nevertheless send or make known such categories of personal data to us, it will be deleted immediately.
16. CHANGES TO THE PRIVACY POLICY.
16.1. ENCOSTA reserves the right to readjust or change this Privacy Policy at any time. These changes will promptly be made public.
16.2. ENCOSTA recommends that users who interact with the website visit this Privacy Policy on a regular basis, as a way of keeping abreast of any changes made to it.
17. CONTACT DETAILS.
17.1. If you have any questions about this Privacy Policy, please email us at hcascais@norfin.pt.
18. LAST REVIEW.
18.1. 28 October, 2024, Lisbon (Portugal)