This document sets out the Privacy and Cookie Usage Policies (hereinafter "Policy") of the company CUDELL - Outdoor Solutions, S.A. (hereinafter "COS"), with registered office at Estrada Nacional N12, Estrada da Circunvalação, 14037, 4100-179 Porto, VAT number 500 142 453.
LegislationThe processing of personal data carried out by COS, as well as the sending of commercial communications carried out by electronic means are in accordance with the national and EU legislation in force, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data and guidelines issued by European and national authorities, model clauses approved by the European Commission or supervisory authorities, as well as any relevant case law, jointly referred to as the "Data Protection Regime", hereinafter "GDPR".
Processing of personal dataThe processing of personal data is carried out in accordance with the general principles set out in the "RGPD", namely:
In the context of the relationship established with the data subject, we ensure that personal data will be processed lawfully, fairly and transparently ("Principle of lawfulness, fairness and transparency");What personal data we process
In the context of the activities carried out by COS, the Data Holder is, without limitation, the client and/or former clients, potential clients, investors, partners, job applicants, employees and former employees, employees of partners, suppliers and service providers and their employees, applicants and complainants, visitors and individuals and all those individual persons who maintain a relationship with COS and to whom the personal data concern.COS does not voluntarily or directly solicit or collect personal data from minors. If COS discovers that it has inadvertently collected personal data from a minor under the age of 18, it will promptly delete the records containing that minor's personal data. We note, however, that COS may collect personal data relating to minors when provided by parents or a legal guardian who expressly consents to such collection or when such data is collected through CCTV systems.
In the course of its activities, COS processes personal data of a significant number of categories of Data Subjects.The personal data COS collects always depends on the nature of the interaction, but may include the following:
Identification and contact data: First name, last name, postal address, telephone or mobile number, email address,Why we treat your information
The development and performance of the various activities pursued by COS means that there is a relevant set of specific, explicit and legitimate purposes for the processing of personal data, such as: provision of services, sending communications, administrative, economic and accounting management, selection and recruitment of job applicants and compliance with reporting obligations.What we treat your information for
By reference to the "Lawfulness Principle" enshrined in the RGPD, in developing and carrying out its activities, COS only processes personal data when there is a basis of lawfulness that legitimizes the processing, namely:- Consent
COS will only treat personal data if it consents to the respective treatment through a free, specific, informed and explicit manifestation of will, by which it accepts, through a declaration (written or oral) or unequivocal positive act, that the personal data be the object of treatment.- Pre-contractual steps or execution of a contract
COS may process personal data if they are necessary, without limitation, for the performance of a contract to provide services and/or supply products to which it is a party as an employee, client and/or supplier, or to carry out pre-contractual procedures upon request.- Compliance with a legal obligation
COS may process personal data to ensure and guarantee compliance with legal obligations to which it is subject under the laws of a Member State and/or the European Union.
- Legitimate Interests
COS, other Controllers or Third Parties may process your personal data provided that such processing does not override the interests or fundamental rights and freedoms of the Data Controller.
How long we keep personal data
The data are kept for until the purpose or administrative obligation is fulfilled or for as long as necessary to comply with the legal obligations that are applicable in each case. If the basis of the processing is consent, the data is kept until the consent is revoked. During the personal data processing period, COS guarantees that they are processed in accordance with this Privacy Policy. As soon as the data is no longer necessary for the pursuit of the purpose, COS will securely delete it.
Sharing personal data with third parties
Personal data may be shared with entities responsible for providing services to COS.
The companies responsible for providing services are bound to COS by a written contract, and may only process the personal data for the purposes specifically established and are not authorized to process the personal data, directly or indirectly, for any other purpose, for their own benefit or for that of a third party.
Personal data may be shared internally with other COS companies which will comply with the applicable data protection rules depending on the purposes of the processing performed.
Upon request and with due consent, personal data may be shared with other entities.
In compliance with legal and/or contractual obligations, personal data may also be transmitted to judicial, administrative, supervisory or regulatory authorities and also to entities that lawfully carry out data compilation, fraud prevention and combat actions, market or statistical studies.
Transfers across the EEA
COS does not transfer personal data outside the European Economic Area (EEA).
What are the rights of the Data Controller?
As the Holder of the personal data processed by COS, he/she has the right to access, rectification, limitation, portability, erasure and the right to oppose the processing of personal data, under certain circumstances, which can be exercised under the terms of this chapter of the Privacy Policy.
- Right to Information
You have the right to obtain clear, transparent and easily understandable information about how COS uses personal data and what your rights are. That is why COS makes all of this information available to you in this Privacy Policy.
You have the right to obtain information about what Personal Data COS is handling (if any) and certain information (similar to that provided in this Privacy Policy) about how that data is handled. This right lets you know and confirm that we use your data in compliance with data protection laws.
COS may refuse to provide the information requested where to do so would require COS to disclose another person's personal data or the information would adversely impact another person's rights.- Right of rectification
If your data is incorrect or incomplete (for example, if your name or address is wrong), you may ask COS to take reasonable steps to correct it.- Right to erasure of data
This right is also known as the "right to be forgotten" and, in simple terms, allows you to request the erasure or deletion of your data, provided that there are no valid grounds for COS to continue using it or its use is unlawful. This is not a generic right to erasure, as exceptions are allowed (for example, whenever such data is necessary for the defense of a right in legal proceedings).- Right to restriction of processing
You have the right to "block" or prevent the further use of your data while COS evaluates a request for rectification or as an alternative to erasure. Where processing is limited, COS may still store your data, but may not use it further. COS maintains a list of data subjects who have requested "blocking" of the future use of their data to ensure that this limitation is respected.- Right to data portability
You have the right to obtain and reuse certain personal data for your own purposes in various organizations. This right applies only to your own data that you have provided to COS and which COS processes with your consent and those processed by automated means.- Right to object
You have the right to object to certain types of processing, on grounds relating to your particular situation, at any time when such processing is carried out for the legitimate interest of COS or a third party. COS may continue to process such data if it can prove "compelling legitimate grounds for the processing which override your interests, rights and freedoms" or if such data is necessary for the establishment, exercise or defence of legal claims.- Right to withdraw consent
When the basis of lawfulness is consent, you have the right to revoke consent at any time.- Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority, the Comissão Nacional de Proteção de Dados - CNPD (National Commission for Data Protection), if you consider that the processing performed on your personal data violates your rights and/or the applicable data protection laws. You may do so through the website www.cnpd.pt.Security and confidentiality
The personal data will be processed by COS, in the context of the purposes identified in this Policy, in accordance with other policies, procedures and internal rules of COS and using techniques and organizational measures adequate to promote their availability, confidentiality and integrity, namely in relation to the unauthorized or illicit processing of the personal data and their accidental loss, destruction or damage.However, because transmission of information over the Internet is not completely secure, COS cannot guarantee data security when transmitted over an open network.
COS recognizes that the information you provide to us may be confidential. COS does not sell, rent, distribute, or otherwise commercially or commercially available personal data to any third party, except where it needs to share information with Service Providers for the purposes set out in this Privacy Policy. COS preserves the confidentiality and integrity of data and protects it in accordance with this Privacy Policy and applicable laws.Use of cookies
COS automatically collects information whenever someone visits the Websites. COS obtains information from the user's computer and assigns a "cookie" (a small package of information about that user) when someone visits its web site. This data is not supplied by the user - it is collected automatically as a means of facilitating links to and use of the Websites.We only use cookies that are strictly necessary to provide the website (technical cookies) which are not shared with third parties.
In case of doubt or for exercising rightsIf you have any questions or would like more information about how we treat personal data or about our information security practices, please feel free to contact us at our address or at gestao.rgpd@cudellos.pt.
You may at any time, in writing, exercise the rights enshrined in the GDPR by using the contacts listed above.For the exercise of rights, if necessary, you must attach a copy of an identification document proving the identity of the holder. The exercise of rights is free of charge, except in the case of a manifestly unfounded, excessive or repeated request.
Changes to this Privacy PolicyCOS may periodically update this Privacy Policy, as well as any other specific privacy and data protection statement. When we make changes to this Privacy Policy, we will add a new update date. We encourage you to check it whenever you visit us.