JOÃO JACINTO TOMÉ, S.A. values its relationship with its Customers and Suppliers, and has made the best efforts to implement organisational measures aimed at ensuring their privacy and respect for their rights and freedoms with regard to personal data processing.
- Personal Data Controller
- Principles applicable to Personal Data processing
- Personal Data, Personal Data Processing and Data Subject
- Categories of Personal Data that JOÃO JACINTO TOMÉ, S.A. processes
- Purposes of Personal Data processing
- Lawfulness Grounds
- Period of retention of Personal Data
- Sharing of Personal Data
- Rights and Exercise of Rights
- Security and Integrity
1. Personal Data Controller
As personal data controller, JOÃO JACINTO TOMÉ, S.A.:
- Ensures that the personal data processing is carried out only in the context of the purposes for which they were collected or for purposes compatible with them;
- Collects, uses and retains only the minimum, necessary and sufficient personal data for the purpose concerned;
- It does not transmit personal data for commercial or advertising purposes;
- It treats personal data exclusively for legally provided purposes.
2. Principles applicable to Personal Data processing
The Personal Data Processing is carried out in accordance with the general principles set out in the General Data Protection Regulation and other data protection legislation concerning data protection, namely:
Principle of lawfulness, fairness and transparency
JOÃO JACINTO TOMÉ, S.A. ensures that Personal Data will be treated lawfully, fairly and in a transparent manner.
Principle of purpose limitation
JOÃO JACINTO TOMÉ, S.A. collects Personal Data for specified, explicit and legitimate purposes and does not further process the same Data in a manner that is incompatible with those purposes.
Principle of data minimisation
JOÃO JACINTO TOMÉ, S.A. assures that it shall only process adequate, relevant and limited Personal Data strictly necessary to the purposes for which they are processed.
Principle of accuracy
JOÃO JACINTO TOMÉ, S.A. adopts appropriate measures so that Personal Data qualified as inaccurate, taking into account the processing purposes, are erased or rectified without delay.
Principle of storage limitation
JOÃO JACINTO TOMÉ, S.A. retains Personal Data so that their identification occurs only during the period necessary for the purposes for which they are processed.
Principle of integrity and confidentiality
JOÃO JACINTO TOMÉ, S.A. ensures that Personal Data are processed in a manner that ensures their security, including protection against their unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organisational measures.
3. Personal Data, Personal Data Processing and Data Subject
It means all information and/or elements which, regardless of their support, allow identifying or making identifiable, directly or indirectly, data subjects before JOÃO JACINTO TOMÉ, S.A., in particular by reference to an identifier, such as a name, identification number, location data and/or online identifier or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
Personal Data Processing
It means the operation or set of operations which is performed on Personal Data of Data Subjects, whether or not by automated means, from the collection of information to its destruction. Within this cycle, among others, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, and erasure are included.
It includes, without limitation: employees, partners, job seekers, former employees, partner employees, service providers and suppliers and their employees, applicants and claimants, visitors and all those natural persons who maintain a relationship with JOÃO JACINTO TOMÉ, S.A. and of whom the Personal Data are about.
4. Categories of Personal Data that JOÃO JACINTO TOMÉ, S.A. processes
In the development of its activities, JOÃO JACINTO TOMÉ, S.A. processes the Personal Data of a significant set of categories of Data Subjects.
The Personal Data that JOÃO JACINTO TOMÉ, S.A. collects always depend on the nature of the interaction, but may include the following:
- Personal contact data
- Commercial data for the provision of services and/or supply of products
- Payment data
- Account data
- Security credentials data
- Data on the use of information technologies
We note that you will not be required to share your Personal Data with JOÃO JACINTO TOMÉ, S.A. However, if you decide not to share your personal information, in some cases JOÃO JACINTO TOMÉ, S.A. may not be able to provide the services or products you want, ensure certain specialised features or respond effectively to any question you may have.
5. Purposes of Personal Data processing
The development and performance of activities by JOÃO JACINTO TOMÉ, S.A. mean the existence of a set of specific, explicit and legitimate purposes for the processing of Personal Data, such as:
- Tax and Administrative Accounting Management
- Business Activity and Marketing
- Profiling Definition and Analysis
- Access Control Management
- Human Resources Management
- Electronic Communications Management
- Compliance with Legal Obligations
6. Lawfulness Grounds
By reference to the 'Principle of Lawfulness' enshrined in the current laws of data protection, in the development and performance of its activities, JOÃO JACINTO TOMÉ, S.A. only processes Personal Data when there is a basis of lawfulness that legitimises the processing, namely:
JOÃO JACINTO TOMÉ, S.A. will only process Personal Data if the Data Subject consents to its Processing through a free, specific, informed and unambiguous indication, by which he or she accepts, by a (written or oral) statement or by a clear affirmative action (by filling an option), that their Personal Data are subject to Processing.
Pre-contractual proceedings or the performance of a contract
JOÃO JACINTO TOMÉ, S.A. may process Personal Data if it is necessary, without limitation, for the performance of a contract of work, service provision and/or product supply in which the Data Subject is a party as an Employee, Client and/or Supplier, or to perform pre-contractual steps at their request.
Compliance with a legal obligation
JOÃO JACINTO TOMÉ, S.A. may process Personal Data to ensure and guarantee compliance with legal obligations to which it is subject before the legislation of a Member State and/or the European Union.
Protection of the Data Subject's interests
JOÃO JACINTO TOMÉ, S.A. may process Personal Data to ensure the protection of the vital interests of the Data Subject, in particular when the same Processing is essential to his or her life.
JOÃO JACINTO TOMÉ, S.A., other Controllers or Third Parties, may process Personal Data except where this processing is overridden by the interests or fundamental rights and freedoms of the Data Subject.
7. Period of retention of Personal Data
JOÃO JACINTO TOMÉ, S.A. retains Personal Data only for the period of time required to perform the specific purposes for which they were collected. However, JOÃO JACINTO TOMÉ, S.A. may be required to retain some Personal Data for a longer period, taking into account factors such as:
- Legal obligations, under the laws in force, to retain Personal Data for a certain period;
- Limitation periods under the laws in force;
- (eventual) Litigation;
- Guidelines issued by the competent data protection authorities.
8. Sharing of Personal Data
- Processors: Your Personal Data may be shared with service providers to JOÃO JACINTO TOMÉ, S.A. The companies providing services are associated to JOÃO JACINTO TOMÉ, S.A. by written agreement, being able to process their Personal Data only for the purposes specifically established and are not authorised to process the Personal Data, directly or indirectly, for any other purpose, for their own or third party benefit.
- Other Controllers and/or Third Parties: Your Personal Data may be shared internally with other entities associated with JOÃO JACINTO TOMÉ, S.A., which will comply with the rules for the protection of applicable data depending on the purposes attached to the processing performed.
Upon request and/or with the consent of the Personal Data Subject, Personal Data may be shared with other entities.
In compliance with legal and/or contractual obligations, Personal Data may also be transmitted to judicial, administrative, supervisory or regulatory authorities and also to entities that lawfully conduct data compilation actions, actions to prevent and combat fraud, market or statistical studies.
9. Rights and Exercise of Rights
Right to provide information
The Personal Data Subject has the right to obtain clear, transparent and easily understandable information about how JOÃO JACINTO TOMÉ, S.A. uses his or her Personal Data and what his or her rights are.
Right of access
The Personal Data Subject has the right to obtain information about Personal Data that JOÃO JACINTO TOMÉ, S.A. processes (if it processes them indeed) and certain information about how such Data are processed. This right allows him or her to know and confirm that we use Personal Data in accordance with data protection laws. JOÃO JACINTO TOMÉ, S.A. may, however, refuse to provide the requested information where, in order to do so, it has to disclose someone else's Personal Data or the requested information harms the rights of another person.
Right of rectification
The Personal Data Subject has the right to request JOÃO JACINTO TOMÉ, S.A. to take reasonable steps to correct his or her Personal Data that are incorrect or incomplete.
Right to erase data
This right, also known as the ‘right to be forgotten’, allows the Personal Data Subject to request the deletion or elimination of his or her data, provided that there are no valid grounds for JOÃO JACINTO TOMÉ, S.A. to continue to use and/or store it.
Right to restriction of processing
The Personal Data Subject has the right to ‘block’ or prevent the future use of his or her Data while JOÃO JACINTO TOMÉ, S.A. evaluates a request for rectification or as an alternative to erasure.
Right to data portability
The Personal Data Subject has the right to obtain and reuse certain Personal Data for his or her own purposes. This right applies only to the own Data that he or she have provided to JOÃO JACINTO TOMÉ, S.A. and that JOÃO JACINTO TOMÉ, S.A. processes with his or her consent and those that are processed by automated means.
Right to object
The Personal Data Subject has the right to object to certain types of processing, on grounds relating to his or her particular situation, at any time such Processing takes place.
Right to lodge a complaint
The Personal Data Subject has the right to lodge a complaint with the competent supervisory authority, the National Data Protection Commission – CNPD (Comissão Nacional de Proteção de Dados) – if he or she considers that the Processing carried out to personal data infringes his or her rights and/or applicable data protection laws.
The Personal Data Subject may exercise at any time, in writing, the rights enshrined in the Personal Data Protection Act and other applicable legislation through the email: firstname.lastname@example.org.
10. Security and Integrity
JOÃO JACINTO TOMÉ, S.A., however, cannot guarantee the security of Personal Data when transferred over an open network, insofar as the transmission of information over the Internet is not absolutely secure.