A.GENERAL PART

 

A.1. COLLECTION AND PROCESSING OF USER DATA

In connection with the provision of the website hosted at https://WWW.MESTRIDEIAS.COM/ ("Site") and the services and communications made available therein, MESTRIDEIAS, under tax number 516 170 384, with registered office at Estrada Regional 2 Mt Martins, Reguengos de São Mateus, 7050-352 Montemor-o-Novo, may require the User to provide personal data, i.e. information provided by the User enabling MESTRIDEIAS to identify and/or contact the User ("Personal Data"). As a rule, Personal Data is requested when the User

- registers on the Site;

- requests a contact from MESTRIDEIAS through the form available on the site; 

 

The Personal Data collected and processed consists of information relating to name, email address and other personal information provided by the User;

When directly collecting Personal Data, MESTRIDEIAS provides the User with detailed information about the nature of the data collected and about the purpose and treatment that will be carried out in relation to Personal Data, as well as the information mentioned in clause 7, by consulting the Privacy Policy available on the Site. MESTRIDEIAS also collects and processes information about its hardware and software, as well as information about the pages visited by the User within the Site. This information may include: your browser type, domain name, access times and the links through which you accessed the site ("Usability Information"). We use this information only to improve the quality of your visit to our Site. Usability Information and Personal Data are referred to in this Privacy Policy as "User Data".

 

A.2. SUBCONTRACTORS

When processing User Data, MESTRIDEIAS uses or may use third parties which it has subcontracted to, on behalf of MESTRIDEIAS, and in accordance with the instructions given by the latter, to process the User Data, in strict compliance with the provisions of the law and this Privacy Policy. These subcontracted entities may not transmit the User's Data to other entities without prior written authorization from MESTRIDEIAS, and are also prohibited from contracting other entities without prior authorization from MESTRIDEIAS. MESTRIDEIAS is committed to subcontracting only entities which present sufficient guarantees of execution of adequate technical and organizational measures, in order to ensure the defense of the User's rights. All entities subcontracted by MESTRIDEIAS shall be bound to the latter by a written contract in which the object and duration of the processing, the nature and purpose of the processing, the type of Personal Data, the categories of data subjects and the rights and obligations of the parties are regulated.

 

A.3. MESTRIDEIAS DATA COLLECTION CHANNELS

MESTRIDEIAS may collect data directly (i.e., directly from the User) or indirectly (i.e., through partner entities or third parties). The collection can be done through the following channels: Direct collection: in person, by phone, by email and through the Site; Indirect collection: through partners or official entities.

​

B. GENERAL PRINCIPLES APPLICABLE TO THE PROCESSING OF USER DATA

In terms of general principles concerning the processing of Personal Data, MESTRIDEIAS undertakes to ensure that the User Data it processes are:

- Lawfully, fairly and transparently processed in relation to the User;

- Collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;

- Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;

- Accurate and up-to-date where necessary, with every reasonable step being taken to ensure that inaccurate data, having regard to the purposes for which they are processed, are erased or rectified without delay;

- Kept in a form which permits identification of the User only for the period necessary for the purposes for which the data are processed;

- Processed in a manner that ensures their security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, with appropriate technical or organizational measures being taken.

Data processing carried out by MESTRIDEIAS is lawful when at least one of the following situations occurs:

- The User has given explicit consent to the processing of User Data for one or more specific purposes;

- The processing is necessary for the performance of a contract to which the User is a party, or for pre-contractual steps at the User's request;

- Processing is necessary for compliance with a legal obligation to which MESTRIDEIAS is subject;

- Processing is necessary in order to protect the vital interests of the User or of another natural person;

- Processing is necessary for the purposes of legitimate interests pursued by MESTRIDEIAS or third parties (unless the interests or fundamental rights and freedoms of the User prevail and require protection of Personal Data).

 

MESTRIDEIAS undertakes to ensure that the User's Data is processed only under the conditions listed above and with respect for the principles mentioned above. When processing of User Data is carried out by MESTRIDEIAS based on the User's consent, the User has the right to withdraw his/her consent at any time. Withdrawal of consent, however, does not compromise the lawfulness of the processing carried out by MESTRIDEIAS based on the consent previously given by the User. The period of time for which data is stored and retained varies according to the purpose for which the information is processed. In effect, there are legal requirements that require the data to be kept for a minimum period of time. Thus, and whenever there is no specific legal requirement, the data will be stored and kept only for the minimum period necessary for the purposes that motivated their collection or their subsequent processing, after which they will be deleted.

 

B.1. USE AND PURPOSES OF PROCESSING USER DATA

In general terms, MESTRIDEIAS uses User Data for the following purposes:

- To market the products and provide the MESTRIDEIAS services;

- Informing the user of new products and services, through any means of communication, being a legitimate interest of MESTRIDEIAS to do so, without prejudice to the right of the data subject to oppose such processing at any time;

- Allow access to restricted areas of the Site, according to previously established terms;

- Ensure that the Site meets the User's needs, by developing and publishing content that is as adapted as possible to the requests and type of User, by improving the Site's search capabilities and functionalities and by obtaining aggregate or statistical information regarding the User's profile;

- Provision of Services, and other services such as newsletters, opinion polls, or other information or products requested or consented to by the User;

​

In addition, MESTRIDEIAS may also contact representatives of corporate customers, for the purpose of presentation of MESTRIDEIAS products and services, resulting in a legitimate interest of MESTRIDEIAS to do so, without prejudice to the right of the data subject to oppose such processing at any time. User Data collected by MESTRIDEIAS is not shared with third parties without the user's consent, with the exception of the situations mentioned in the following paragraph. However, should the user contract with MESTRIDEIAS services which are provided by other entities responsible for the processing of Personal Data, the user's data may be consulted or accessed by such entities, to the extent necessary for the provision of such services. Under the applicable legal terms, MESTRIDEIAS may transmit or communicate the User Data to other entities in the event that such transmission or communication is necessary for the execution of the contract established between the User and MESTRIDEIAS, or for pre-contractual diligence at the request of the User, in the event that it is necessary for compliance with a legal obligation to which MESTRIDEIAS is subject or in the event that it is necessary for the purpose of pursuing the legitimate interests of MESTRIDEIAS or a third party.

 

B.2. TECHNICAL, ORGANIZATIONAL AND SECURITY MEASURES IMPLEMENTED

To ensure the security of User Data and maximum confidentiality, MESTRIDEIAS treats the information provided to us as absolutely confidential, in accordance with its internal security and confidentiality policies and procedures, which are periodically updated as necessary, as well as in accordance with the terms and conditions provided by law. Depending on the nature, scope, context and purposes of the data processing, as well as the risks arising from the processing for the rights and freedoms of the User, MESTRIDEIAS undertakes to implement, both when defining the means of processing and when processing itself, the technical and organizational measures necessary and appropriate for the protection of the User's Data and compliance with legal requirements. It further undertakes to ensure that, by default, only the data that is necessary for each specific purpose of the processing is processed and that such data is not made available without human intervention to an indefinite number of persons. In terms of general measures, MESTRIDEIAS adopts the following:

- Regular audits with a view to gauging the effectiveness of the technical and organizational measures implemented;

- Awareness and training of personnel involved in data processing operations;

- Pseudonymization and encryption of Personal Data;

- Mechanisms capable of ensuring the permanent confidentiality, availability and resilience of the information systems;

- mechanisms to ensure the timely restoration of information systems and access to Personal Data in the event of a physical or technical incident;

 

B.3. USE OF COOKIES

Cookies are small information files that are sent to your computer or cell phone when you visit a website. The cookies are sent back to the originating site on each subsequent visit or to another site that recognizes that cookie. Cookies are useful because they allow a site to recognize the user's device, enabling the user to navigate pages efficiently, also remembering the user's preferences and generally improving the user experience. Some of the cookies issued by the server will only last for the duration of the session and will expire when you close your browser. Other cookies are used to remember when a user returns to a site and have a longer lifetime. Most browsers automatically accept cookies. You can modify your browser setting to decline cookies or to be notified each time a cookie is created. You can find more information about cookies, including how to see what cookies have been set on your device and how to manage or delete them using different types of browsers, at www.allaboutcookies.org. The ability to enable, disable or delete cookies can also be done in your browser. To do this, follow the instructions in your browser (usually located in the "Help", "Tools" or "Edit" options). Disabling a cookie or category of cookies does not delete the cookie from your browser, you need to delete it manually. By blocking or deleting cookies you may not be able to enjoy the full functionality of the website.

​

C. USER RIGHTS (DATA SUBJECTS)

C.1. PROCEDURES FOR THE EXERCISE OF USER RIGHTS

The right of access, right of rectification, right of erasure, right to limitation, right of portability and right to opposition may be exercised by the user by contacting MESTRIDEIAS by e-mail mestrideias@gmail.com. MESTRIDEIAS will respond in writing (including by electronic means) to the user's request within a maximum period of one month from receipt of the request, except in cases of particular complexity, where this period may be extended to two months. If requests made by the User are manifestly unfounded or excessive, particularly due to their repetitive nature, MESTRIDEIAS reserves the right to charge administrative costs or refuse to comply with the request.

 

C.2. PERSONAL DATA BREACHES

In the event of a data breach and insofar as such breach is likely to involve a high risk to the rights and freedoms of the User, MESTRIDEIAS undertakes to communicate the breach of Personal Data to the User concerned within 72 hours from knowledge of the incident. In legal terms, communication to the User is not required in the following cases:

- In case MESTRIDEIAS has applied adequate protection measures, both technical and organizational, and such measures have been applied to the Personal Data affected by the Personal Data breach, especially measures that make the Personal Data incomprehensible to any person not authorized to access such data, such as encryption;

- where MESTRIDEIAS has taken subsequent measures to ensure that the high risk to the rights and freedoms of the User is no longer likely to materialize; or

- If communication to the User would involve a disproportionate effort for MESTRIDEIAS. In such a case, MESTRIDEIAS will make a public communication or take a similar measure by which the User will be informed.

 

D. FINAL PART

D.1. CHANGES TO PRIVACY POLICY

MESTRIDEIAS reserves the right to change this Privacy Policy at any time. If the change is substantial, a notice will be posted on the Site.

 

D.2. APPLICABLE LAW AND JURISDICTION

The Privacy Policy, as well as the collection, processing or transmission of User Data, are governed by the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and by the laws and regulations applicable in Portugal.

 

Contact information of the person responsible for processing

Address:

Estrada Regional 2 Mt Martins, Reguengos de São Mateus, 7050-352 Montemor-o-Novo

Phone Number: +351 926 754 196

E-mail: mestrideias@gmail.com