Privacy Policy

Introduction

GADSA – Arquivo e Deposito SA, taxpayer no. 504595440 complies with all community and national legal standards, applicable legislation within the scope of Document Management, data protection, privacy and information security activities.

GADSA is committed to treating with maximum security and maintaining absolute and strict confidentiality on all information and documentation provided to it, complying with all confidentiality, security and privacy requirements.

And because we care about your Personal Data, we are aware of the legal provisions in force in Portuguese territory, reflected in this Privacy Policy that complements the principles established in the Code of Conduct.

Legal Principles and Lawfulness of Processing

In accordance with the General Data Protection Regulation and Law 58/2019, all data processing operations comply with the fundamental legal principles within the scope of data protection and privacy, namely regarding their circulation, lawfulness, loyalty, transparency, purpose, minimization, conservation, accuracy, integrity and confidentiality, with GADSA – Arquivo e Depósito available to demonstrate its responsibility towards the data subject or any other third party that has a legitimate interest in this matter.

The following are grounds that legitimize the processing of personal data by GADSA:

a) Consent: your personal data may be processed through a free, specific, informed and explicit expression of will, under which you accept, through a declaration, or unequivocal positive act, that your personal data be processed by GADSA. We will ask for your consent to send newsletters, invitations to events organized by us and to send communications related to GADSA's activities. Regarding application processes, we will ask for your consent to keep your personal data collected to be considered in future applications.

b) Legitimate Interest: We will process your personal data based on GADSA's legitimate interest, namely for the purposes of recruiting and selecting candidates according to GADSA's needs, as well as to respond to contact requests sent to us, except in cases in which your rights to privacy and data protection prevail.

c) Whenever necessary to comply with legal obligations

d) Whenever processing is necessary for the exercise of functions of public interest or the exercise of public authority vested in the person responsible for the processing

e) Processing is necessary to defend the vital interests of the data subject or another natural person

f) In the context of providing services: we process your personal data, to the extent strictly necessary to provide our services contracted by you.

Definitions

"Personal data"

“Personal data”, information relating to an identified or identifiable natural person (“data subject”); An identifiable natural person is considered to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier. Personal identifiers are considered, for example, a name, an identification number, location data, electronic identifiers or one or more elements specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

«Personal Data Processing»

“Processing” means an operation or set of operations carried out on personal data or on sets of personal data, by automated or non-automated means, such as collection, recording, organization, structuring, conservation, adaptation or alteration , retrieval, consultation, use, disclosure by transmission, broadcast or any other form of availability, comparison or interconnection, limitation, erasure or destruction.

Collection and Processing of Personal Data

GADSA – Arquivo e Depósito processes personal data strictly necessary for the provision of information and the operation of its channels, in accordance with the uses of website visitors.

In particular, the use or activation of certain channel functionalities may involve the processing of several direct or indirect personal identifiers, such as name, home address, contacts, device addresses or geographic location, whenever there is to this end the express consent of the User.

For application purposes, we will also collect, if sent by you, your Curriculum Vitae. The personal data you provide to us will be processed for the purposes indicated at the time of collection.

Responsible for data processing

The person responsible for data processing is GADSA – Arquivo e Deposito SA, taxpayer no. 504595440, with headquarters at Quinta dos Palmares, Rua Ferro, Fetais, 2680-177 Camarate

Purpose of treatment/Consent and Conservation

Depending on the selected preferences, all data is processed to maintain, improve and develop the interests of each user, prioritizing communication with Data Subjects (e.g. applications and service subscription requests…): in a proportionate manner to the extent that the data is processed in accordance with the necessary, appropriate and relevant purposes;

All Personal Data will only be processed with the user's explicit consent.

We will only retain personal data for as long as strictly necessary for the purpose for which it was collected, or to comply with a legal obligation.

What personal data do we collect and process?

GADSA collects and processes personal data such as name, email, telephone number, this data is collected and processed in order to respond to your questions, requests, or to provide you with information. For application purposes, we will also collect, if sent by you, your Curriculum Vitae. The personal data you provide to us will be processed for the purposes indicated at the time of collection.

How and when personal data is collected

Your personal data may be collected:

The. When you fill in the fields in the “Contacts” form, present on our website;

B. When you request registration or participate in one of the events organized by GADSA;

d. When you send an application to collaborate with GADSA, by email or through our website;

It is. When we receive applications via email, directly at our facilities, recruitment agencies, or partners;

Personal data retention period

Personal Data is stored and preserved by GADSA for the minimum period necessary for the purposes that motivated its collection and subsequent processing. Whenever there is no specific legally fixed period, the data will be stored and retained for five years. Once the maximum retention period has been reached, personal data will be securely destroyed.

Rights of the Personal Data Holder

All personal information relating to customers or visitors who use the GADSA Website will be treated in accordance with the General Data Protection Regulation, and the Holder may request consultation, portability, rectification, limitation, erasure, opposition and withdrawal of consent (for processing) your personal data from our database at any time.

If consent is legally necessary for the processing of personal data, the data subject has the right to withdraw consent at any time, although this right does not compromise the lawfulness of processing carried out based on previously given consent, or subsequent processing thereof. data, based on another legal basis such as compliance with the contract or legal obligation to which GADSA is subject.

Any questions related to this matter may be addressed by email to the Data Protection Officer:

protecao.dados@gadsa.pt

COOKIES

By browsing this website you are consenting to the use of cookies.

Cookies are small text files with relevant information that are sent by websites when they are visited and stored on the user's access devices (computer, mobile phone/smartphone or tablet) obtained through their internet browser (browser) and which may retain related information with your preferences.

The information obtained does not usually identify directly, but collects information about interactions.

Cookies are used to improve the user experience and performance of the website, while allowing faster and more efficient browsing, so if you want to use our website fully, you must accept cookies.

Cookies can be managed by the user directly through browser settings and can change the settings or even deactivate them, being aware that they are limiting some services and functionality of the website.

Cookie Categories:

Temps

Persistent

The 3rd

Cookies used:

Strictly necessary Cookies are always active, they are necessary for the normal and correct functioning of the website and as such they cannot be deactivated. They do not store any personally identifiable information and are normally used in response to user requests.

Analytical cookies

Cookies functionality

Cookies are essential for the correct functioning of websites and also to provide important information to website managers, particularly statistical information.

Security and Confidentiality Measures

GADSA is committed to ensuring the security and confidentiality of Personal Data, collected and processed by it, adopting security measures, of a technical and organizational nature, in order to protect personal data against dissemination, loss, misuse, alteration, unauthorized treatment or access, as well as against any other form of illicit treatment. Such as protection of information technology systems through firewalls, in order to minimize the risk of unauthorized access and Backup Policy.

GADSA also requires its partners to adopt security measures, of a technical and organizational nature, equivalent to those it practices and adopts, and to guarantee limited access to Personal Data, based on the “need to know” criterion in the scope of the communicated purposes.

We also respect the confidentiality of your information, so we do not sell, distribute or in any way make your information commercially available to third parties.

Gadsa reserves the right to change this Privacy and data protection policy whenever necessary