1. Framework
This Privacy and Personal Data Protection Policy, hereinafter referred to as the "Privacy Policy", establishes the terms under which RESIBRAS collects and processes personal data, as well as the rights of the respective holders, in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and other applicable national legislation on privacy and data protection.
The purpose of the defined Privacy Policy is to inform and guarantee the security, protection and transparency of the mechanisms for processing personal data under the responsibility of RESIBRAS and all entities with which it relates, reiterating the commitment to scrupulous compliance with the applicable legislation in this matter.
The general nature of the information provided is highlighted, and may be complemented or updated by other policies, notices or information of a more specific nature, in case of request by data subjects or need detected by the organization itself.
2. Definitions
In order to facilitate the understanding of this Privacy Policy, the following terms are defined:
- Personal Data – Information relating to an identified or identifiable natural person; An identifiable person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier.
- Data processing – Set of operations carried out on personal data or on sets of personal data, by automated or non-automated means, such as: collection, registration, organization, structuring, conservation, adaptation, alteration, consultation, dissemination and elimination.
- Subcontractor – Natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
- Consent of the data subject – Manifestation of will, free, specific, informed and explicit, by which the data subject accepts, through a positive and unequivocal statement or act, that the personal data concerning him are subject to treatment.
- Breach of personal data – A breach of security that causes, accidentally or unlawfully, the destruction, loss, alteration, disclosure or unauthorized access to personal data transmitted, stored or subject to any other type of treatment.
- Control authority – Independent public authority represented, in Portugal, by the National Data Protection Commission (CNPD), with supervisory powers regarding compliance with rules on the protection of personal data.
3. Responsible for the Processing of Personal Data
RESIBRAS processes personal data in accordance with the legislation in force and in strict compliance with the rights, freedoms and guarantees provided for in the Constitution of the Portuguese Republic, and it is carried out in a lawful, legal, clear, transparent and non-misleading manner.
As the entity responsible for the processing of personal data provided by the respective holder, directly or through third parties, RESIBRAS values their security and privacy, adopting and continuously implementing the necessary measures to comply with the applicable legislation.
4. Collection, Processing and Storage of Personal Data
RESIBRAS processes personal data collected within the scope of commercial relationships established with customers and subcontracted companies, taking into account compliance with legal and regulatory obligations to which it is subject.
The processing of data obtained through the relationships described above is carried out in accordance with the principles of lawfulness, loyalty and transparency; purpose limitation; data minimization; accuracy; limitation of conservation; integrity and confidentiality and accountability.
Within the scope of the activity, the use of the personal data collected is only for the pursuit of the purposes for which they were collected, either by legal and contractual basis, or by specific consent and legitimate interest, the collection always being preceded by information regarding the purpose for which determined it. In this way, RESIBRAS undertakes to use them exclusively for strictly necessary purposes, without, under any circumstances, carrying out the transition to third parties, without the consent of the holders or legal basis.
The period of time during which personal data is stored and maintained varies according to the purpose for which the information is processed. Within the scope of its operation, RESIBRAS is obliged to retain data for a legally required period. Thus, and whenever there is no specific legal requirement, the data will be stored and kept only for the minimum period necessary to pursue the purposes that motivated its collection or subsequent processing, under the terms defined by law. After the established period, the personal information will be deleted and no longer kept.
The defined retention periods are provided for procedurally and can be consulted via email:
5. Rights of the Personal Data Holder
RESIBRAS ensures the exercise of rights by the holder of personal data, upon written request addressed to the company through its general contacts, having the opportunity to request:
- Access, under the legally established terms and conditions, to personal data concerning you and which are subject to processing by the same, with the respective copy being made available to you;
- More detailed information, namely on the purposes, legal grounds and retention periods of your personal data;
- The correction or updating of incorrect or outdated personal data concerning you;
- The processing of missing personal data, if they are incomplete;
- The elimination, limitation of processing and portability of personal data concerning you, with the exception of data strictly necessary for the execution of the purposes;
- Termination of the consent given, when this constitutes the legal basis associated with the processing of data.
The data subject also has the right to present complaints about the way their personal data are treated, directly to the company through the contact means available, without prejudice to having the possibility of also doing so with the National Data Protection Commission (CNPD).
6. Data Communication
RESIBRAS, in the pursuit of its activity, may resort to third parties to provide certain services, which may imply access, by these third parties, to the personal data of the respective holders. In these circumstances, the confidentiality of the data is ensured, compliance with the Privacy Policy implemented in accordance with the applicable legal requirements, its use in accordance with the corporate purpose of the group companies and always in a manner compatible with the determining purposes of the treatment.
The treatment under these terms is regulated by contract or other normative act, which binds the subcontractor or third party to the guidelines established by RESIBRAS, as the entity responsible for data processing, and defines the object, duration, nature and purpose of the treatment, the type of personal data, the categories of data subjects and the obligations and rights of the controller.
7. Security Measures
RESIBRAS guarantees adequate levels of security and protection of the personal data processed. For this purpose, it adopts measures of a technical and organizational nature, in order to avoid the loss, dissemination, alteration, treatment or unauthorized access, as well as any other form of illicit treatment.
The RESIBRAS website includes protection in connections between users and servers, with communication between the server and your browser encrypted using SSL/TLS technology. The server ports to access the system (database and files) are only available for the RESIBRAS IP. The backup processes carried out include the databases, in order to guarantee the recovery of information in situations of failure or loss.
For more accurate and up-to-date information on this matter, contact via email rui.pinto@resibras.pt.
8. Use of Cookies
RESIBRAS uses cookies on its website in order to optimize the user experience. These files collect information of a generic nature, such as the origin of the traffic, the search path and the way of use and navigation, not obtaining any data that personally identifies the user. In order to guarantee the transparency of the process, RESIBRAS notifies the user of the existence of cookies, when entering the website, and allows him to define permissions through the configuration of his browser.
The functionalities of cookies vary depending on their type, as follows:
- Persistent or Permanent – They allow a more personalized navigation, as they are stored in the browser used and accessed whenever the user visits the website again, forwarding and assisting in navigation, according to their previous searches;
- Session – They constitute temporary files used only while the user browses the page, allowing personalized and optimized navigation;
- Third-party – Allow quantifying access or views of website applications or external elements (eg advertising);
- Essentials – Enable navigation on the website and use of its features, such as accessing specific areas or secure areas that require authentication;
- Analytics – Allows you to analyze how users navigate the website by monitoring behaviors and accounting for data such as the most visited pages, the most viewed content, navigation flows and error messages;
- Functional – Allow user preferences to be saved, as well as data entered in fields (eg forms) so that they can be reused later automatically;
- Advertising – They analyze and direct advertising according to the interests of each user, allowing the limitation of repetitions that an ad is presented to each user.
The authorization for the use of cookies that has been granted by the user can be deactivated at any time, partially or completely, at the level of your browser, making it possible to make adjustments to the settings and delete installed cookies. It is emphasized that the deactivation of certain cookies may affect the functionalities of the pages.
To submit questions, complaints, comments or requests related to the use of cookies on the website, contact RESIBRAS via email rui.pinto@resibras.pt.
9. Changes to the Privacy Policy
This Privacy Policy may be changed periodically, with the most up-to-date version available for consultation at RESIBRAS facilities and on the institutional website www.resibras.pt
Any changes to the Privacy and Personal Data Processing Policy will be published on the RESIBRAS website and, if the changes are significant, the information will be prominently disclosed. The rights of data subjects, acquired under this Privacy Policy, will not be reduced without prior communication on the RESIBRAS website, and always in express compliance with the law.
English 
Portuguese 
Spanish