PRIVACY POLICY
Conceito is committed to protecting and respecting the privacy of the holders of personal data, guaranteeing the confidentiality and integrity of information, complying with the General Regulation for the Protection of Personal Data (GDPR) and the Portuguese law for the protection of personal data in force.
In light of the applicable legislation, Registro assumes the role of controller in relation to the personal data of its employees, visitors and suppliers; and assumes the role of subcontractor for its customers, whenever within the scope of the contracted services it has access to personal data of its customers' employees.
Customers are solely responsible for collecting and managing the data of their employees that are provided to the Conceito.
Conceito processes the personal data of the holders with the following legalities and purposes:
In order to carry out the different purposes, Registro may process different types of personal data:
-
Identification (such as name, date of birth, identification document number);
-
Contact (such as mobile phone, address or email);
-
Qualification and professional status (such as schooling, performance);
-
Banking, finance and transactions (such as IBAN, tax identification number, fees and discounts);
-
SPI Sensitive Personal Information (such as health data, data on households with disabilities, administrative offenses, criminal offenses, images collected through video surveillance systems and event recording images);
-
PII Personally Identifiable Information (such as biometric data from facility access).
In accordance with the retention policy of Registro, personal data will be destroyed as soon as its legality and purpose ends, that is, within the period considered adequate and/or necessary to fulfill the objectives that motivated its collection, in accordance with the applicable laws.
Conceito periodically assesses the risks of breach of privacy for its holders and has implemented the privacy and information security management system consisting of various technical and organizational measures considered appropriate within the reach of the organization to avoid breaching the principles of confidentiality , integrity and availability of personal data held by the organization and the resilience of processing operations.
When the processing of data is carried out by third party subcontractors chosen by Registro, a contract is established between the parties with respect for the stipulations in the RGPD, in order to obtain sufficient guarantees to ensure that the treatment meets the requirements and ensures the defense of the rights of the data subjects. personal data holders.
As the holder of personal data, you have the following rights:
1. Right to obtain confirmation that the data concerning you are being processed and, if applicable, to access your personal data and access the information provided for by law;
2. Right that, without undue delay, Conceito rectify any inaccurate or incomplete data relating to it;
3. Right to request the deletion of your data, without undue delay, when the personal data is no longer necessary for the purpose that motivated its collection or processing;
4. Right to request the limitation of the processing of your data in certain cases, namely, if the processing is unlawful and if you oppose the erasure of the data, requesting, in return, the limitation of its use;
5. Right of portability of your personal data that you have provided to Registro, in a structured, commonly used and machine-readable format, also including the right to transmit this data to another controller;
6. If the treatment depends on your consent, you have the right to withdraw it;
7. Right to submit a complaint to the Data Protection Officer (DPO) via compliance@conceito.pt and/or to the CNPD (National Data Protection Commission) as the Portuguese Control Authority.
To exercise your rights, you must request in writing via compliance@conceito.pt.
For your safety and whenever deemed necessary, Conceito will request additional information to confirm your identity. The controller will be responsible for responding as soon as possible.
Conceito reserves the right to periodically review the current policy, so we recommend that you periodically consult the Privacy Policy available and updated on the page www.conceito.pt.
The Administration
April/2023