Privacy Policy
Planbelas Sociedade Imobiliária S.A. respects the privacy of its customers/users and suppliers.
This Privacy Policy describes who we are, for what purposes we may use your data, how we handle it, who we share it with, how long we keep it, and how to contact us and exercise your rights.
The rules provided in this Data Protection Policy complement the provisions, regarding the protection and processing of personal data, provided in the contracts that the Customers/Users enter into with Planbelas Sociedade Imobiliária S.A, as well as the rules provided in the terms and conditions that regulate the offer of various products and services and that are duly advertised on their respective websites.
Your data is collected by Planbelas Sociedade Imobiliária SA, headquartered at Alameda do Aqueduto, Offices, Belas Clube De Belas, 2605-193 BELAS, hereinafter referred to as Planbelas.
Planbelas processes and stores personal data within the European Union (EU) and adheres to best practices in the field of security and protection of personal data, having taken the necessary technical and organisational measures to comply with the General Data Protection Regulation, (Regulation (EU) 2016/679) as well as Law no. 58/2019, of 08 August, which are directly binding legislative acts for individuals and entities that, whether resident in the EU or not, process data of EU citizens and ensure that the processing of personal data is lawful, fair, transparent and limited to authorised purposes.
The privacy statement is under the responsibility of Planbelas, which is considered the data controller for the purposes of the GDPR, and will determine the purpose and means of processing personal data presented and collected online.
The Data Protection Officer (DPO) ensures compliance with the regulation and is involved in all matters related to the protection of personal data. Their identification and contact mode are indicated at the end of this document.
What is Personal Data?
Personal data is any information, of any nature and regardless of its support, including sound and image, relating to an identified or identifiable individual.
An individual is considered identifiable if they can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, electronic identifiers or one or more specific elements of their physical, physiological, genetic, mental, economic, cultural or social identity.
What is the Processing of Personal Data?
The processing of personal data consists of an operation or set of operations carried out on personal data or sets of personal data, through automated means or not, namely the collection, registration, organisation, structuring, preservation, adaptation, recovery, consultation, use, disclosure, dissemination, comparison, interconnection, limitation, erasure or destruction.
Our data protection policy ensures that the data is:
Subject to lawful, fair and transparent processing in relation to the data subject (“lawfulness, fairness and transparency”);
Collected for specified, explicit and legitimate purposes and may not be further processed in a manner incompatible with those purposes;
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
Accurate and up-to-date whenever necessary; all appropriate measures being taken to ensure that inaccurate data, considering the purposes for which they are processed, are erased or rectified without delay;
Kept in a form that allows the identification of data subjects only for the period necessary for the purposes for which they are processed;
Processed in a way that ensures their security, including protection against unauthorised or unlawful processing and against their loss, destruction or accidental damage, adopting appropriate technical or organisational measures;
Purposes of Processing Personal Data
Ensuring, whenever necessary, the prior consent of the data subject, we will collect, among other things, the following information: Name and Surname, Civil Identification Number; Tax Identification Number; Date of Birth, Email and Phone.
In general, the collected personal data is based on and intended for the management of the contractual relationship, the provision of contracted services, the adaptation of services to the needs and interests of the Customer/User, namely for access to specific features of the services, content suggestions, proximity information services as well as information and marketing actions.
Additionally, personal data may also be processed to comply with legal obligations and for the purposes of research, detection and repression of serious crimes.
Cookies
Our website uses cookies or similar technologies to ensure the best user experience and to analyse trends, track users’ movements within the website and gather demographic information about our user base as a whole. Our Cookies record information such as Internet Protocol (IP) address, browser type, Internet Service Provider (ISP), referring/exit pages, the files accessed on our site (e.g. HTML pages), operating systems, date and time, to analyse trends on the site.
Retention Period
The period during which personal data is stored and preserved varies according to the purpose for which the information is processed.
Effectively, there are legal requirements that require the preservation of data for a minimum period of time. Thus, and whenever there is no specific legal requirement, the data will be stored and preserved only for the minimum period necessary for the purposes that motivated its collection or its subsequent processing, under the terms defined by law.
Majority
By accepting this privacy policy, you guarantee to be 18 years of age or older.
Children
The exercise of rights in relation to personal data of children is carried out by their respective legal representatives, without prejudice to the possibility of the children themselves exercising them directly, as long as they have completed 13 years of age, and in situations where the processing of data is already legitimised by the consent of the child, as provided for in article 8 of the GDPR and in article 16 of Law 58/2019 of 8 August.
Use of Personal Data
Planbelas will contact you to present the goods and/or services it markets. The processing of such data is based on the consent given by the data subject. Access to personal data is strictly limited to the personnel of the data processing controllers and subcontractors.
Sharing of Personal Data
Planbelas guarantees that it does not intend to transfer data to third countries to the General Data Protection Regulation and if it does, it will ask for your consent.
Planbelas has entered into an Agreement with its subcontractors, by which they undertake not to transfer data to third countries.
In certain situations, both Planbelas and its Subcontractors may be notified to disclose personal information in response to requests by supervisory authorities to meet the requirements of the GDPR.
Processing Security
Planbelas is committed to ensuring the protection of the security of the personal data provided to it, having approved and implemented strict rules on this matter. Compliance with these rules is an obligation for all those who legally access them.
Given the concern and commitment that Planbelas shows in the defence of personal data, several security measures, of a technical and organisational nature, have been adopted to protect the personal data made available against its dissemination, loss, misuse, alteration, treatment or unauthorised access, as well as against any other form of illicit treatment.
Additionally, third-party entities that, in the context of service provision, process personal data of the Customer/User on behalf of and for Planbelas, are obliged, in writing, to implement adequate technical and security measures that, at each moment, meet the requirements provided for in current legislation and ensure the defence of the rights of the data subject (namely, the protection of privacy and personal data of Customers/Users).
Access and Rectification or Deletion of Personal Data
As the data subject, the Customer/User has the right to request access to data concerning them, to ask for them to be rectified and to be deleted. They can also limit the treatment given to the data, as well as oppose it and also request the portability of the data.
This can be done, directly or by written request, addressed to the respective Data Controller, through the contacts provided for this purpose in this document.
Clarifications can also be requested from the Data Protection Officer or complaints can be submitted to the CNPD whenever it is understood that their rights are being violated.
Right of Access
The data subject has the right to obtain from Planbelas confirmation as to whether or not data concerning them are being processed and, where that is the case, to access their personal data and access the information provided for by law.
Right to Rectification
The data subject has the right to obtain from Planbelas, without undue delay, the rectification of inaccurate or incomplete data concerning them.
Right to Erasure (“right to be forgotten”)
The data subject has the right to obtain from Planbelas the erasure of their data, without undue delay, and Planbelas has the obligation to erase personal data, without undue delay, when one of the following grounds applies:
a) The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) The data subject withdraws consent on which the processing is based (in cases where processing is based on consent) and there is no other legal ground for the processing;
c) The data subject objects to the processing and there are no overriding legitimate grounds for the processing;
Right to Restriction of Processing
The data subject has the right to obtain from Planbelas restriction of processing where one of the following applies:
a) The accuracy of the personal data is contested, for a period enabling Planbelas to verify the accuracy of the personal data;
b) The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c) Planbelas no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; d) The data subject has objected to processing, pending the verification whether the legitimate grounds of the controller override those of the data subject.
Right to Data Portability
If the processing is based on the consent of the data subject and such consent has been given by automated means, the data subject has the right to receive the personal data concerning them, which they have provided to Planbelas, in a structured, commonly used and machine-readable format.
Right to Object
In cases where data processing is carried out for 1) the purpose of the legitimate interests pursued by Planbelas; or 2) data processing is carried out for direct marketing purposes or 3) profiling, the data subject may, at any time, object to the processing of their personal data.
Marketing Emails
The data controllers are permitted, after explicit consent, to send marketing emails to the site users. At any time, the user can cancel consent through the link, existing for this purpose, in each email sent.
Changes to this Policy
This policy may be updated occasionally, for example due to changes in relevant legislation. If any material changes are made, customers will be notified by email or by notification on the website.
Contacts
DATA CONTROLLER
Planbelas, Sociedade Imobiliária Lda.
Departamento Jurídico – Paulo Vieira
Tel: +351 21 962 66 00
E-mail: protecaodados@planbelas.pt
SUBCONTRACTOR
Zyrgon Portugal Unipessoal Lda
Tv. do Fiuza 39
Tel: +351 912113167
E-mail: geral@zyrgon.com
DATA PROTECTION OFFICER
Dra. Patricia Fatana Afonso
Morada: Rua Miguel Bombarda n.º 344, Edificio Plátano, Loja 9, 2775-247 Parede
Tel: +351 965 808 082
E-mail: patriciafatana@gmail.com