Personal data and privacy protection are Public Relations Portugal’s commitments.
With the application of the new General Data Protection Regulation (GDPR) on May 25th, 2018. Public Relations Portugal states that it stands fully committed and engaged in the data and privacy protection of the corresponding holder that it uses in its website and proceeds, in this aspect, to updating its data privacy accordingly with all the principles and standards that support the GDPR.
In this document, we aim to explain the personal data we retrieve, for which purposes we may use it, how we treat it, who we share it with, and for how long we keep it.
General Data Protection Regulation
The new GDPR establishes the rules regarding the treatment, by a person, company, or organization, of personal data related to people in the European Union (EU).
The GDPR protects personal data regardless of the technology used for that data treatment; the protection is neutral in terms of technology and is applied to both automatic and manual treatment, as long as the data are organized according to predefined criteria (alphabetically, for example). It is also irrelevant how the data is stored in an informatics system, through video surveillance, or on paper; in all these cases, the personal data is bound to the protection requirements envisaged in the GDPR.
What kind of information does Public Relations Portugal retrieve?
Public Relations Portugal retrieves two kinds of information: personal information and anonymous information. The anonymous information happens when the personal data owner visits the website with the goal of improving the website, including the management and prioritization of content. The personal information is provided voluntarily by the personal data holder at the time of the optional registry. All the retrieved data is processed automatically, since the personal data owner’s retrieved information is encrypted and managed with advanced security.
The registry allows the personal data owner to access the Public Relations Portugal subscription newsletter and for the Public Relations Portugal team to fill out the message application form.
Public Relations Portugal may disclose personal and anonymous data to third parties. However, this will only happen in these specific circumstances:
- a) with the explicit consent of the personal data holder
- b) when, in good faith, we believe it is required by law
- c) when, in good faith, we believe it is due by the contract stipulation
- d) when, in good faith, we believe it is necessary to protect our rights or property
- e) when there is a transmission to a successor or buyer in a merger, acquisition, liquidation, dissolution, or asset sale
The personal data holder’s consent will not be required to be disclosed in the situations mentioned in points b) and e). In any case, we will seek to notify it as far as it is allowed by law.
What is Personal data?
Personal data is information about an identified or identifiable person. It is considered identifiable as a person who may be directly or indirectly identified. It is also personal data, a set of different pieces of information that may lead to the identification of a certain person.
Personal data examples:
Name and surname
Electronic mail adresse
Location data (for instance, the location data function on a mobile telephone)
Image or sound
Who is the personal data owner?
The personal data owner is the single person to whom the data pertains and who used the Public Relations Portugal website.
For how long does Public Relations Portugal treat and keep your personal data?
Public Relations Portugal keeps and treats the personal data accordingly to the ends that those are treated and only for the length of time required for the fulfillment of the goals that reasoned its retrieve and conservation, and always according to the law, the National Commission for the Protection of Data (CNPD) guidelines and decisions, or, as the case may be, until the opposition right, oblivion right, or consent withdrawal right is wielded.
After the respective conservation period has elapsed, Public Relations Portugal will delete or anonymize the data whenever it is determined that it should not be kept for the distinctive purpose for which it may serve.
Personal data holders’ rights
The personal data owner has personal data information, access, rectification, or deletion rights, the right to data portability, and the right to limit or oppose the data treatment within the scope and terms of the GDPR and other applicable legislation.
The holder may withdraw, at any given moment, the consent that may have been given to the personal data treatment within the GDPR frame. The consent revocation will not affect the lawfulness of the data treatment that has been carried out based on the consent that has been previously provided.
This request may be made to the email address email@example.com.
It also has the right to present a complaint regarding the data treatment to the CNPD.
The answer to the requests should be given, without unjustified delay, within a month counting from the request’s reception, except if the request is especially complex or occurs in exceptional circumstances. The period may be extended for two months, whenever necessary, in consideration of the complexity of the request and the number of existing requests.
Within the scope of the request, it may be asked to provide an identity proof to ensure that the personal data is shared only with the given holder.
Personal data transmission
The personal data may be transmitted to subcontractors so that they may treat them on behalf of Public Relations Portugal. In this case, Public Relations Portugal will take the necessary contractual measures to seek assurance that the subcontractors respect and protect the holder’s personal data.
The data may also be transmitted to third parties—entities other than Public Relations Portugal or the subcontractors or entities to whom the data may have to be communicated by law, such as the Autoridade Tributária, judicial authorities, and criminal police bodies, among others.
Public Relations Portugal’s website and third parties’ responsibility
Which security procedures assure data protection?
Public Relations Portugal takes every necessary and legally required step to assure the protection of the personal data treated or transmitted through its digital platform. These protections assure the online and offline security of that information.
Last updated: August 16th, 2020
Regarding the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679 of the European Parliament and the European Council concerning the protection of single people about the personal data treatment and free circulation of this data revokes Directive 95/46/CE (General Data Protection Regulation) (OJ L 119, 4.5.2016).