Privacy Policy and Data Protection
Privacy Policy and Data Protection
At Mergulho, we handle the personal data of our customers and employees in the strictest respect for the rights and freedoms enshrined by the principles of personal data protection laid down in the General Data Protection Regulation (RGPD) and Act 58/2019.
The protection of data and privacy is assumed by us as a fundamental right that it is important to care for and preserve.
Through this Privacy and Data Protection Policy (hereinafter PPPD), we intend to present in a clear and objective manner, the principles, purposes and means of processing personal data followed by our brand.
At Mergulho, we handle the personal data of our customers and employees in the strictest respect for the rights and freedoms enshrined by the principles of personal data protection laid down in the General Data Protection Regulation (RGPD) and Act 58/2019.
The protection of data and privacy is assumed by us as a fundamental right that it is important to care for and preserve.
Through this Privacy and Data Protection Policy (hereinafter PPPD), we intend to present in a clear and objective manner, the principles, purposes and means of processing personal data followed by our brand.
1. Main Definitions
Personal data - information relating to a natural person (data subject), which identifies him/her or makes him/her identifiable. Examples: name, an identification number, location data, etc.
Controller - a natural or legal person who determines the purposes of processing and the means by which personal data are processed.
Processing - an operation or set of operations carried out on personal data by automated or non-automated means.
2. Who is the Controller?
Mergulho is responsible for the processing of personal data collected in the course of interaction with our websites and digital platforms.
3. Processed personal data / Purposes / Periods of Conservation and Grounds of Lawfulness
At Mergulho, personal data strictly necessary for the provision of the brand's services are collected, namely in the contacts that need to be made to meet the needs in the following areas: Communication Plans, Press Relations, Content Production, Social Media Management, Advertising Campaigns, Attracting Leads, Branding, Graphic and Editorial Design, Art Direction, Packaging, Web Development, UI/UX Design. which for the purposes of this PPPD we consider together as – Customer management.
Most of the data processed are company data and not personal data, so this PPPD will apply when referring to the processing of personal data. Data may be collected directly, in person or through the use of platforms.
We may also receive personal data indirectly through our service providers who provide services to you on our behalf or our partners.
The following table summarizes the purposes and lawfulness grounds on which we process your personal data.
1. Main Definitions
Personal data - information relating to a natural person (data subject), which identifies him/her or makes him/her identifiable. Examples: name, an identification number, location data, etc.
Controller - a natural or legal person who determines the purposes of processing and the means by which personal data are processed.
Processing - an operation or set of operations carried out on personal data by automated or non-automated means.
2. Who is the Controller?
Mergulho is responsible for the processing of personal data collected in the course of interaction with our websites and digital platforms.
3. Processed personal data / Purposes / Periods of Conservation and Grounds of Lawfulness
At Mergulho, personal data strictly necessary for the provision of the brand's services are collected, namely in the contacts that need to be made to meet the needs in the following areas: Communication Plans, Press Relations, Content Production, Social Media Management, Advertising Campaigns, Attracting Leads, Branding, Graphic and Editorial Design, Art Direction, Packaging, Web Development, UI/UX Design. which for the purposes of this PPPD we consider together as – Customer management.
Most of the data processed are company data and not personal data, so this PPPD will apply when referring to the processing of personal data. Data may be collected directly, in person or through the use of platforms.
We may also receive personal data indirectly through our service providers who provide services to you on our behalf or our partners.
The following table summarizes the purposes and lawfulness grounds on which we process your personal data.
Purpose | Personal Data | Keeping Time | Grounds For Lawfulness |
---|---|---|---|
Newsletter Submission | Name, e-mail | As long as the holder's consent is maintained | Consent |
Recruitment | Name, e-mail, phone number, CV | Data will be deleted 6 months after the vacancy is filled | Pre-Contractual Diligences |
Information provision | Name, e-mail, phone number | Data will be deleted after completion of purpose | Legitimate interest of the controller |
Customer Management | Name, e-mail, phone number | Data will be kept for the duration of the contractual relationship or for the legally defined periods (if applicable) | Legitimate interest of the controller |
4. How do we collect the data?
Mergulho only collects data that is necessary, pertinent and adequate for the purposes defined at the time of data collection.
Data is provided by the data subject by filling in the designated fields on our website or through our digital platforms.
5. Data Security
Mergulho is committed to ensuring the confidentiality, protection and security of its Customers' and Employees' personal data by implementing appropriate technical and organizational measures to protect their data against any form of improper or illegitimate processing and against any accidental loss or destruction of such data. To this end, we have systems and teams in place to ensure the security of personal data processed, creating and updating procedures to prevent unauthorized access, accidental loss and/or destruction of personal data, and we undertake to respect the legislation on the protection of Customers' personal data and to process this data only for the purposes for which it was collected, as well as to ensure that such data is treated with adequate levels of security and confidentiality.
6. What are the rights of the data subjects, and how can they exercise them?
Data subjects have the right to access the data processed concerning them, and may in certain circumstances object to the processing of their personal information.
Under certain conditions laid down by law, they may also request the erasure of their personal data and rectify or limit the processing thereof.
To exercise these rights, data subjects can make their request to the following email address: geral@mergulhoagencia.pt.
Caso considere que os seus dados foram tratados de forma ilícita, pode apresentar uma reclamação junto da autoridade de controlo – https://www.cnpd.pt
This PPPD may be revised, changing its scope and conditions, so it is recommended to read it paying attention to its latest version.
Updated on: 05/01/2024
4. How do we collect the data?
Mergulho only collects data that is necessary, pertinent and adequate for the purposes defined at the time of data collection.
Data is provided by the data subject by filling in the designated fields on our website or through our digital platforms.
5. Data Security
Mergulho is committed to ensuring the confidentiality, protection and security of its Customers' and Employees' personal data by implementing appropriate technical and organizational measures to protect their data against any form of improper or illegitimate processing and against any accidental loss or destruction of such data. To this end, we have systems and teams in place to ensure the security of personal data processed, creating and updating procedures to prevent unauthorized access, accidental loss and/or destruction of personal data, and we undertake to respect the legislation on the protection of Customers' personal data and to process this data only for the purposes for which it was collected, as well as to ensure that such data is treated with adequate levels of security and confidentiality.
6. What are the rights of the data subjects, and how can they exercise them?
Data subjects have the right to access the data processed concerning them, and may in certain circumstances object to the processing of their personal information.
Under certain conditions laid down by law, they may also request the erasure of their personal data and rectify or limit the processing thereof.
To exercise these rights, data subjects can make their request to the following email address: geral@mergulhoagencia.pt.
Caso considere que os seus dados foram tratados de forma ilícita, pode apresentar uma reclamação junto da autoridade de controlo – https://www.cnpd.pt
This PPPD may be revised, changing its scope and conditions, so it is recommended to read it paying attention to its latest version.
Updated on: 05/01/2024