I. The Privacy and Personal Data Protection Policy, complementary to the Terms and Conditions of Use, is intended to regulate the processing of personal data to be carried out by CVRBI.
II. The Data Controller is Cláudia Carrilho; email: claudiacarrilho@cvrbi.pt
1. Data Collection
a) Data provided directly by the data subject;
b) Data collected within the framework of the relationship established with the data subject, especially through registration under legal terms or within the framework of fulfilling legally established duties and powers;
c) Personal data requested from the data subject and processed with their consent; (d) In the case of data relating to minors, this will be obtained through their legal representatives or guardians.
2. In all interactions, we strive to minimize the amount of data requested. Therefore, we only request data that is actually necessary for the exercise of our duties and powers.
3. Thus, we request personal data that allows us to identify and contact individuals. These data are strictly necessary for this contact and management, for purposes directly related to the duties and responsibilities of CVRBI. As mentioned, in the case of minors, we request the identification of the person responsible for registration or contact.
III. The processing of personal data includes, in particular, the registration, collection, consultation, use, adaptation, alteration, storage, destruction of data, among other operations.
IV. The use of the collected data has the following purposes:
a) Fulfillment of CVRBI's mission, duties and responsibilities;
b) Provision of services requested by the data subject;
c) Providing information about products and services, especially of a promotional nature, in accordance with the law, with prior consent.
V. CVRBI guarantees the processing of personal data in accordance with current legislation regarding its collection, processing, use, disclosure, storage and privacy.
VI. CVRBI will not process personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data to uniquely identify a person, data concerning health, or data concerning a person's sex life or sexual orientation.
VII. By accessing, using, or benefiting from our services, the user agrees to CVRBI's privacy and personal data protection policy, consenting to the collection and processing of their data for the purposes mentioned in point V by providing it directly. Failure to provide or partial provision of personal data by the data subject may limit or prevent the provision of services.
VIII. Personal data will only be collected:
a) In compliance with a legal obligation;
b) When the user registers;
c) When the data subject requests a product, a service, or requests more information about a CVRBI activity, through any means of contact with CVRBI. IX. The data subject will give their prior consent regarding the receipt of communications or other information for promotional or dissemination purposes, being granted the right to object at any time by means of written communication addressed to CVRBI. The aforementioned information may be sent by CVRBI via email, mail, telephone, SMS or any other means of electronic communication, social networking sites, Web 2.0, any mobile content or method.
X. In addition to the obligations referred to in the applicable data protection law or the safeguarding and protection of its own interests, as well as the transmission of data resulting from legal obligations, CVRBI will not share any personal data with third-party entities, except with the prior authorization of the data subject.
XI. CVRBI has adequate technical and organizational measures in place to ensure the security of the data processed, in particular against unauthorized access or any other form of illegal or illicit processing. CVRBI guarantees, in addition to the security and internal protection measures of its facilities, the limitation of access to personal data only to its duly identified employees for the fulfillment of the processing purposes. Furthermore, we limit their access and keep them in environments protected by firewalls and complex passwords. Finally, we also use encryption keys in the transmission of data between the storage location and the access terminal.
XII. The data subject is granted the right to access and rectify the processed data, and may, at any time, withdraw consent for processing and request the erasure of data, in accordance with the law, by means of written communication addressed to CVRBI.
XIII. CVRBI will make the necessary efforts to ensure that...