Privacy and Data Protection Policy

INFOS is responsible for this Privacy and Data Protection Policy. It covers this website, as well as other INFOS websites, forms and documents that mention the said policy.

Within the scope of this Privacy and Data Protection Policy, the following general concepts of applicability are defined:

• Client: any entity / company / institution / individual that acquires our products and/or services;
• User: any visitor to this website, as well as to other sites belonging to INFOS and/or subscribers to our Newsletter;
• Employee / former employee / applicant: any employee, former employee or job applicant at INFOS.

INFOS reserves the right to update or modify its Privacy and Data Protection Policy at any time, namely in order to adapt it to national and international legislative changes. We advise all our clients, employees, job applicants and users to consult this page regularly.

Personal Data means any information, of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person (the data subject).

An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to further specific elements of their physical, physiological, mental, economic, cultural or social identity.

INFOS collects data from its Clients, Employees and Users through the submission of forms provided for that purpose and other types of documents, in digital and/or physical format.

INFOS is the entity responsible for the collection and processing of this data, deciding the categories of data collected, how they are processed and the purposes it will give them.

All procedures carried out by automated and non-automated means that allow the collection, organisation, storage, modification and transfer of personal data shall be considered “personal data processing”.

The data collected by INFOS is intended for communication with Clients, Employees and Users, for processing requests for information, statistical analysis, satisfaction surveys, and its respective use for marketing purposes, as well as for other processing provided for by law.

INFOS will not sell or share its database of clients, employees and users with third-party entities.

The user expressly authorises INFOS to send information about products and services that may be of interest, using their personal data for direct marketing purposes through any communication channel, namely by means of email, telephone, SMS, MMS or other forms of automated calling.

INFOS does not disclose to third parties any personal data of its Clients, Employees and Users, without their consent, except:

• when they are INFOS companies;
• when it is necessary for the employees, staff, suppliers or commercial partners of INFOS to provide a product or service or perform a function on behalf of INFOS;
• when it is required or permitted by law.

INFOS will take reasonable precautions to ensure that its staff or employees with access to personal data receive training appropriate to its correct processing, in compliance with this policy and with the legal obligations of data protection. In the event of non-compliance, INFOS will apply disciplinary sanctions to its staff and employees.

Whenever INFOS discloses the user's personal data, it will safeguard compliance with the Personal Data Protection Law, namely through contractual provisions ensuring that the third party uses the data received only for the specified purposes, and in accordance with the purposes described in this policy, and that it makes use of adequate security measures, so as to protect the user's personal data against unlawful or unauthorised processing as well as against its accidental loss, destruction or other harmful actions.

INFOS asks that you do not send us and do not disclose to us any sensitive personal data, that is, information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic information, biometric information, data concerning health or data concerning a person's sex life or sexual orientation. Such personal data will be immediately deleted.

INFOS stores the data of its Clients, Employees and Users on its servers located in Portugal. These servers are protected and maintained in accordance with high security standards and so as to respect the applicable privacy laws.

The storage and retention period of the personal data of INFOS Clients, Employees and Users varies according to the purpose.

The personal data of Users of our website and microsites will be kept for as long as they remain active, being deleted at the end of this use.

The personal data provided for the purposes of our email content distribution list will be stored until the end of its use. In this case, Clients and Users may unsubscribe from the alerts at any time through the unsubscribe option provided in the Newsletters.

The data of Clients and Employees and other specific data to be retained for compliance with the legal obligations of INFOS may extend for a maximum period of up to 10 years (in accordance with Article 130 of the Corporate Income Tax Code), after which it will be deleted.

INFOS has taken the necessary technical and organisational measures to adequately protect its data against unauthorised processing and access.

INFOS makes all reasonable and appropriate efforts to prevent the unauthorised or unlawful use of the user's personal data, as well as its loss, destruction or damage. However, INFOS cannot provide an absolute guarantee regarding the data of the User, Client or Employee. Whenever there is a leak, loss or breach of personal data that is likely to result in a high risk to the rights and freedoms of the data subjects, INFOS will:

• Notify the supervisory authorities within 72 hours of becoming aware of the incident;
• Communicate the situation in good time to the affected data subject(s).

INFOS ensures the security of the user's personal data through the following means:

• use of certificate-based encryption on all website communications;
• use of a password for access to the website;
• limitation of access to personal data (for example, access only to INFOS staff or workers who need to access it for the purposes described above).

Under the applicable legislation, you are guaranteed, as the data subject of the data collected, the right, at any time, to:

• access your personal data;
• request its rectification or supplementation;
• object to the processing of the data, with the exception of that strictly necessary for the provision of the service and/or legal requirements;
• request the portability of the data;
• request the erasure of your data for marketing or telemarketing purposes or for inclusion in Newsletter subscriber lists and information services;
• the right to be forgotten regarding personal data in a human-resources context.

In the case of companies or website visitors, you may request any of the actions mentioned above by sending an email to: marketing@infos.pt

In the case of employees, former employees or job applicants, you may request any of the actions mentioned above by sending an email to: recursos.humanos@infos.pt

INFOS will retain the personal data necessary for the fulfilment of its legal obligations.

“Cookies” are pieces of text information that a website transfers to an individual's hard drive for record-keeping purposes.

Cookies allow the website to remember important information, making its use more convenient. A cookie generally contains the name of the domain it came from, its “lifespan”, and a unique randomly generated number or another value. As happens on most websites, we use cookies for various purposes: to improve your online experience, for analysis and for marketing.

However, you hold the power to turn off your cookies, in your browser's options, or by making changes in the tools of security programs.

This website may contain links to other sites of interest, namely links to INFOS websites. We are only responsible for those websites, as they are within our control.

As for third-party websites, we cannot be responsible for the protection and privacy of any information you provide while visiting such sites. Likewise, we recommend that you exercise caution and always consult the privacy statement applicable to the site in question.

INFOS reserves the right to adjust or change this Privacy and Data Protection Policy at any time, with such changes being made public.

For any questions or queries, contact us.

GDPR Regulation — Regulation (EU) 2016/679