PRIVACY POLICY


This document concerns the protection of individuals with regard to the processing of personal data by JOSÉ CORREIA.

Know that the protection of your Privacy is one of our main objectives.


JOSÉ CORREIA is permanently committed to the online protection of its clients and/or users of its IT platform.
The purpose of this document is to make known our Privacy Policy and specifically the terms and conditions in which your personal data are processed by JOSÉ CORREIA, so that you can give your consent in a free and informed way to the treatment concerned.


Please note that if in the JOSÉ CORREIA website pages any personal data are collected, specific information is published in accordance with Article 13 of Regulation (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing personal data and the free movement of such data and repealing Directive 95/46/EC - General Regulation on Data Protection (hereinafter "the Regulation"), for its analysis before providing the personal data we have requested and collected, as mentioned above.


The information and personal data you provide or have access to will be treated in accordance with the provisions of the current Regulation and with the obligations of confidentiality to which JOSÉ CORREIA is legally bound.
According to the provisions of the Regulation, the processing of personal data carried out by JOSÉ CORREIA is subject to the principles of lawfulness, loyalty and transparency, as well as limitation of purposes, minimization of data and accuracy, limitation of conservation, and integrity, confidentiality and accountability.
In this way, JOSÉ CORREIA assumes the total and ongoing commitment to protect the privacy of the personal data provided by its website users.
This document is intended to provide users with the necessary information regarding the privacy policy assumed by JOSÉ CORREIA so that they can give their express, free and informed consent regarding the processing of their personal data by JOSÉ CORREIA, when requested to do so during the process of subscribing to the services provided by them.

The client declares to know and accept the norms of the privacy code available on the JOSÉ CORREIA website at www.josecorreia.pt, consenting to the publication and/or disclosure of his /her personal data.
The personal data provided by users during the subscription process of JOSÉ CORREIA services will be processed under legal and regularly scheduled terms.
The processing of personal data encompasses any operation or set of operations carried out with or without the aid of electronic or automated means for the collection, recording, organization, maintenance, interrogation, elaboration, modification, selection, extraction, comparison, use, interconnection , blocking, communication, disclosure, removal, deletion or destruction of data.

The processing of personal data may consist of (in part as a consequence of how the customer decides to use the services provided by JOSÉ CORREIA in text files, photographic or video images, audio tracks, telephone lines and any other information that may be used to identify the person concerned, according to the type of services requested.
This procedure shall also comply with the principles of legality, good faith and transparency and shall ensure respect for users' rights, including their right to privacy.


1 - RESPONSIBLE FOR TREATMENT AND IN CHARGE OF PERSONAL DATA PROTECTION

The person responsible for the processing of personal data is the natural person administering JOSÉ CORREIA who is also the person responsible for the Protection of Personal Data (DPO) and who is available to provide him with any information concerning the processing of your personal data by JOSÉ CORREIA, including any list of subcontractors with regard to the protection of personal data. You can contact the DPO by sending an email to info@josecorreia.pt with the subject "DPO".


2 - TREATED PERSONAL DATA

As the processing of personal data, we mean in the terms expressly provided in the Regulation "an operation or a set of operations carried out on personal data or on personal data sets, by automated or non-automated means, such as the collection, registration, organization, structuring, conservation, adaptation or alteration, retrieval, consultation, use, dissemination by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, erasure or destruction ".
Please note that the personal data collected by us, depending on your decisions regarding the services to be subscribed and the respective way of use, may integrate into the following categories: identifier as a name; identification number; location, an online ID or one or more elements of their physical, physiological, psychological, economic, cultural or social identity, suitable for their identification, according to the type of services they have contracted (hereinafter referred to as "Personal data").
The Personal Data processed or collected through our website are the following:

a) NAVIGATION DATA
The software systems and procedures used to operate our website collect, during its normal operation, some personal data whose transmission is implied in the use of Internet communication protocols. These are information that is not collected to be associated with identified stakeholders, but which by its very nature could, through processing and association with data maintained by third parties, enable users to be identified. This category of data includes IP addresses or domain names of users who connect to our website, addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to send the request, request to the server , the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system. This data is used for the sole purpose of obtaining anonymous statistical information about the use of our website and / or our clients' websites and to verify its correct functioning, to identify anomalies and / or abuse and are eliminated immediately and definitively after treatment. The data in question can be used to determine the responsibility for crimes against JOSÉ CORREIA or against third parties, committed through our website: except in this situation, the data in question are not kept for more than 60 (sixty) days, the unless than requested by the user.

b) SPECIAL CATEGORIES OF PERSONAL DATA
When subscribing to services, it may be possible to process your Personal Data, integrated into the special categories of personal data, in accordance with article 9 of the Regulation "personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data to identify a person unambiguously, health data or data relating to a person's sexual life or sexual orientation". Therefore, you should not publish such personal data, unless it is strictly necessary for the provision of the Service that you subscribe to. Special categories of Personal data may be treated with the express and unambiguous consent of the data subject and in accordance with applicable and current legislation on the protection of personal data. Please note that in addition to requesting your consent under the terms indicated above, processing operations involving such data by us are previously authorized by the competent control authority. In these terms, please note that in the absence of specific consent for the treatment in question, in terms that allow, however, the contracting of the Services required and, if you later intend to use a Service provided by JOSÉ CORREIA which involves the processing of special categories of personal data, will have to change its subscription form, giving its express and unequivocal consent to that effect. If you do not give your consent to the treatment in question, but using the Services to which the treatment relates (for example in the management of the shared web space), by publishing and disseminating your personal information that integrates the special categories of personal data, on JOSÉ CORREIA any responsibility, in accordance with the provisions of article 9 of the Regulation.

c) DATA PROVIDED VOLUNTARILY BY THE PERSONAL DATA HOLDER
In the use of certain Services, the processing of personal data of third parties by itself communicated to the Responsible for the treatment can be carried out. In this case, you will be responsible for the processing of personal data, assuming all the obligations and responsibilities inherent to that quality in the terms legally provided, namely with respect to the processing of personal data through the use of the Services in violation of the applicable protection legislation of personal data. In any case, if you provide or treat the Personal Data of third parties through the use of the Service, you acknowledge and accept that such treatment has a legal basis, in accordance with the provisions of article 6 of the Regulation.

d) TRAFFIC DATA
As an integral part of the e-mail service, JOSÉ CORREIA will collect certain personal data necessary for the transmission of electronic communications in a network:
- IP address used, e-mail address and possible additional identification of the sender;
- Domain IP address and full name of the exchange mail host, in the case of SMTP technology or any type of host related to a different technology used for communication transmission;
- E-mail address and possible additional identification of the recipient of the communication;
- Domain IP address and full name of the mail exchange host technology (in the case of SMTP), or any type of host (in relation to a different technology used), in the communication;
- IP address used to receive or consult the e-mails by the recipient, regardless of the technology or protocol used;
- Date and time (GMT) of the connection and disconnection of the user's e-mail service on the Internet and the IP address used, regardless of the technology and the Protocol;
- The internet service used.
These data are processed and maintained by JOSÉ CORREIA for the provision of the Service, as well as under the terms of Law 32/2008 of 17 July, which regulates the preservation and transmission of traffic and location data relating to persons legal persons and related persons and related data necessary to identify the registered subscriber or user for the purpose of investigating, detecting and prosecuting serious crimes by the competent authorities by transposing into Directive 2006/24/EC of the European Parliament and of the Council of 15 March on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC of the European Parliament and of the Council of 12 June 2002 concerning the processing of personal data and the protection of privacy in with the adoption of security measures that make them accessible only to JOSÉ CORREIA or its employees duly authorized in writing, such as the need for authentication, which will communicate them only to competent judicial authorities, in accordance with legal diploma. The personal data in question will be processed by JOSÉ CORREIA for the purpose of documentation in the event of litigation and/or claim of invoice payments by the Customers and to detect frauds carried out through our website, according to the law. In this case, the data are retained, with strict security measures applied in accordance with the legislation in force, for a maximum period of 6 (six) months from their collection/access and then definitively eliminated.

e) COOKIES
Cookies are small text files that the online platforms visited by the user send and record on your computer or mobile device, and then be relayed to the same online platforms on future visits. Thanks to cookies, websites recall user actions and preferences (for example, login data, chosen language, font size and other display settings, etc.) so that they can be shown again when you revisit that website online or navigate from one page to another. The cookies are thus used to perform computer authentication, session monitoring and storage of information about the activities of the users who access it and who may also contain a unique identification code that allows monitoring the user's navigation within the online website itself statistical or advertising purposes. During browsing, you may also receive cookies from online portals or web servers on your computer or mobile device other than those you are visiting (so-called "third-party cookies"). Some operations may not be performed without the use of cookies, which in some cases are thus technically necessary for the correct functioning of the online website.
There are several types of cookies, depending on their characteristics and functions (we recommend consulting our "Cookies Policy"), and they may remain on the user's computer or mobile device for different periods of time: such as session cookies, which are automatically deleted when the browser is closed and so-called persistent cookies, which remain on the user's equipment for a predetermined period.

In accordance with the legislation in force in Portugal, the use of cookies does not always require express consent on the part of the user. In particular, "technical cookies", that is, those used for the sole purpose of transmitting a communication through an electronic communications network, or to the extent strictly necessary to provide a service expressly requested by the user, do not require such consent. These are, in other words, cookies that are indispensable for the functioning of the website online or necessary to carry out activities requested by the user, namely: "cookies analytics" when used directly by the online portal manager to collect information, in aggregate form , on the number of users and on how they visit the website, browsing or session cookies (to be authenticated), functionality cookies that allow the user to navigate according to a series of selected criteria ( for example, the language, the products selected for purchase) in order to improve the service provided to the same. For "profiling cookies", vice versa, ie those intended to create user profiles and used to send advertising messages in line with the preferences expressed by the user in the context of Internet browsing, consent is required to the user. The website online uses the following cookies that may be unmarked, with the exception of third-party cookies in relation to which the user must refer directly to the respective methods of marking and clearing their cookies, indicated through links:

Technical Cookies:
- Navigation or session are strictly necessary for the operation of the online portal or to allow the user to use the contents and services as requested.
- Cookies analytics, which allow to understand how the online portal is used by users. With these cookies no information is collected on the user's identity, nor any personal data.

The information is treated in an aggregated and anonymous way.

- Functionality Cookies, this is used to activate specific features of the online portal and a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service provided.
- Profiling Cookies used to send advertising messages in line with the preferences manifested by the user in the scope of internet browsing.

ATTENTION:
By disabling technical and/or feature cookies the online website may become unavailable or some services or certain functions may not be available or may not work properly and you may be required to change or manually enter some information or preferences each instead visit the website again. Third-party cookies, ie cookies from online portals or from web servers other than the Holder, used for the purposes of those third parties, including also profiling cookies. It is necessary that those third parties, listed below with their respective links to the privacy policies, are independent holders of the treatment of the data collected through the cookies served by them; therefore, the user should consult their personal data treatment policies, information and consent forms (marking and clearing their respective cookies). As a complement, it should also be noted that JOSÉ CORREIA does what is reasonably required for it to be able to monitor cookies on its online website. Regarding the cookies of third parties, sent by service providers of these third parties, JOSÉ CORREIA can not exercise any control and knows neither its characteristics nor its purposes.

3 - PURPOSE OF TREATMENT OF PERSONAL DATA

The processing of personal data that we intend to perform, with your specific consent and expressed when necessary, has the following purposes:
a) Permit the provision of Services requested by you, including the collection, storage and processing of data for the operational, technical and administrative management of the commercial and contractual relationship related to the provision of the Services and for the performance of related communications with said relationship of JOSÉ CORREIA with the client;
b) Allow the navigation and consultation of the JOSÉ CORREIA website;
c) To respond to requests for assistance or information, which JOSÉ CORREIA can receive via e-mail, via telephone or through the various forms available on its website;
d) Comply with legal, accounting and tax obligations;
e) Send direct marketing communications (through the sending of electronic communications) regarding services similar to those already subscribed by the Client, except in case of initial opposition or for subsequent communications. Please note that in the case of a legal person, JOSÉ CORREIA may send electronic communications for the purpose of direct marketing relating to goods and services provided by the Company, except if the Customer expressly refuses to receive such communications in the future and to register in the national list of legal persons who expressly object to the receipt of unsolicited communications for direct marketing purposes.
f) To elaborate studies, surveys, market statistics; in order to be able to send advertising material, information or surveys of satisfaction with a view to improving the quality of the service provided through electronic communications and / or telephone calls, or through the official pages of JOSÉ CORREIA on social networks; g) For the exclusive purpose of security and prevention of fraudulent behavior, the person responsible for the processing of personal data establishes an automatic control system that involves the detection and analysis of the behavior of the user on the website associated with the processing of Personal Data, such as the IP adress. The consequence of such processing is that, if a person engages in fraudulent conduct on the JOSÉ CORREIA.pt website, JOSÉ CORREIA reserves the right to exclude that person from the promotion or to take any other appropriate action for their own protection.

4 - THE BASIS OF THE TREATMENT AND ITS MANDATORY OR OPTIONAL NATURE

The legal basis for processing personal data for the purposes indicated in points (a), (b) and (c) of the previous clause is that set out in Article 6 (1) (b). of the Regulation, since the treatment in question is necessary for the provision of the Services subscribed by the Client. Please note that the provision of personal data for these purposes is optional.
The purpose indicated in item d) above translates a legitimate treatment of personal data in terms of paragraph c) of paragraph 1 of article 6 of the Regulation, since such treatment is necessary for JOSÉ CORREIA to comply with the obligations to which you are subject.
The processing of personal data made for marketing purposes is based on the express and unequivocal consent of the Customer, in accordance with the provisions of article 6, paragraph 1 a), and article 2, paragraph c) 22 of the Regulation. The provision of your personal data for this purpose is therefore optional. If you wish to object to the processing of your personal data for direct marketing purposes, you may do so at any time through our email contact info@josecorreia.pt
The purpose referred to in item i) above is based on the legitimate interest of JOSÉ CORREIA in detecting fraud committed against you in accordance with the provisions of article 6, paragraph 1, f) of the Regulation.

5 - PERSONAL DATA RECIPIENTS

Your personal data may be communicated, for the purposes described above, to the following entities:
a) subjects who normally act as subcontractors, that is: natural or legal persons who provide assistance and advice to JOSÉ CORREIA in accounting, administrative, legal, tax, financial and credit recovery matters; entities with which it is necessary to interact with a view to the provision of the Services or persons performing technical maintenance functions (including maintenance of equipment and electronic communications).
b) Entities to which JOSÉ CORREIA must communicate personal data in accordance with the applicable legislation and/or in response to requests from competent authorities, duly substantiated for this purpose.
c) Persons authorized by JOSÉ CORREIA to treat the personal data strictly necessary to carry out operations related to the provision of the Services, which are contractually and/or legally bound to duties of confidentiality and professional secrecy.
d) Business partners for specific purposes only in case the Client has given their express, unequivocal and specific consent for the purpose.
You may request, in writing, a list of data controllers with which JOSÉ CORREIA relates to your personal data for info@josecorreia.pt

6 - TRANSFERS OF PERSONAL DATA

None of your personal information is communicated to third parties for commercial or marketing purposes.

7 - CONSERVATION OF PERSONAL DATA

Personal data processed for the purposes indicated in point 3 shall be kept for the period of time strictly necessary for the achievement of the same purposes.
Thus, the following are the periods of retention of the following personal data of the client:
Personal data processed for marketing purposes when the contract between JOSÉ CORREIA and the holders of personal data is no longer in force: such data may be retained until the data holder revoke the consent given. However, JOSÉ CORREIA established that it must erase them three years after the consent is given and after the termination of the service agreement.
Data retained and processed for profiling: this type of personal data is generally retained until the data subject revoke consent, unless further clarification is provided by the competent control authority.
Personal data of the customers made available when contracting: this type of personal data will be kept for ten years, if it respects data related to the billing of services and 5 years after the termination of the contract if the justifications for its conservation only respect the need for the OSCAR CONFEÇÕES defends against a legal claim based on contractual or extra-contractual liability.
Personal data delivered to JOSÉ CORREIA, as a Subcontracting Entity, by the customer as Treatment Entity: such data is deleted on the date of termination of the contract.
Personal data relevant for the fulfillment of tax obligations: Such data will be erased after 10 years of preservation, under the terms of the Tax Law.

8 - RIGHTS OF THE PERSONAL DATA HOLDERS

The Client has the right to request from JOSÉ CORREIA, at any time, access to its personal data, its updating or its removal, in accordance with the provisions of the Regulation. You also have the right to request the limitation of the processing of your personal data, in accordance with the provisions of article 18 of the Regulation, to obtain your personal data in a structured format, for common use and readable by automatic device, in the cases provided for in article 20. of the Regulation.
The requests in question must be sent in writing to the e-mail address info@josecorreia.pt Note that in the case of requests by data holders for reports of abuse of use of the Services or of spamming by an JOSÉ CORREIA Client (it should be noted that this client usually acts as a data controller in accordance with the RGPD) and, in the case of any other request for the exercise of the rights in art. 15 and the subsequent RGPD articles, JOSÉ CORREIA, without entering the details of the request, on the one hand, will promptly inform the data controller/client and, on the other hand, provide data holders with the details of the data controller/client.
If you consider that the processing of your personal data violates the provisions of the applicable legislation, you may lodge a complaint with the competent control authority in accordance with the provisions of the Regulation.

9 - DURATION

This privacy policy is effective from 05-25-2018.
JOSÉ CORREIA reserves the right to modify or simply update, in part or in full, its content, in order to comply with the applicable legislation and in force at any time. JOSÉ CORREIA will inform you of these changes as soon as they are introduced and these will be binding as soon as they are published on the JOSÉ CORREIA website, so you should periodically check them for the most up-to-date version of this Policy. Privacy and, specifically, the treatment of your personal data carried out by JOSÉ CORREIA.

Contacts
For any information in order to exercise the rights provided by law, as described above, the client may write to:

JOSÉ CORREIA
Urbanização do Rato, 120 Drt. Cave
Edifício Sol | Lugar do Rato
4770 – 457 Requião

The customer, alternatively, may send your information request via EMAIL to the following address info@josecorreia.pt