LEGAL INFORMATION REGARDING DATA PROTECTION
Robalo, S.A. operates on the basis of trust and transparency. This commitment is reflected in the day-to-day relationship with our customers, employees and suppliers. The privacy and security of the data you entrust to us are a priority for us.
This Privacy Policy sets out how Robalo, S.A. uses the personal data of its customers, employees and suppliers.
The use and protection of the Customer’s personal data under the responsibility of Robalo, S.A. comply with the provisions of EU Regulation 2016/679.
This Privacy Policy may be changed at any time.
In such circumstances, it will be made public.
Any content or personal data sent to us will be processed in accordance with this Privacy Policy.
Who is responsible for the processing of your personal data?
Robalo, S.A. is responsible for the processing of the personal data of customers, employees and suppliers.
How do we collect your personal data?
Your personal data will be collected and processed in the following situations:
• When establishing a relationship or a proposal for a commercial relationship with Robalo, S.A.; and/or
• By providing explicit consent for that purpose.
For what purposes and on what legal basis may your personal data be used?
Under the General Data Protection Regulation, the use of personal data must be justified based on at least one legal basis for the processing of personal data.
Your personal data will be collected and used for the purposes of complying with legal obligations, performing contracts, managing commercial relationships, assessing the interest of potential business relationships, as well as for communication and marketing purposes.
Under no circumstances will personal data relating to religious, political or philosophical beliefs, political or trade union membership, private life, racial or ethnic origin, or data concerning health or sexual life, including genetic data, be collected or processed.
What personal data may be collected?
The following categories of personal data may be collected through the channels and services described in this Privacy Policy:
Events and similar
By participating in events and similar activities organised by Robalo — Utilidades Domésticas e Hoteleiras, S.A., or held on our premises, you automatically agree to and authorise the use of photographs and videos in which you appear, captured during such events, for marketing, communication and other activities related to Robalo — Utilidades Domésticas e Hoteleiras, S.A. These images may be used across our communication channels, including, but not limited to, websites, social media and promotional materials. We understand the importance of your privacy and ensure that any use of such images will be carried out with the utmost respect and responsibility.
Personal information
Name, address, nationality, marital status, personal contact details, tax identification number, IBAN, social security number, number and validity date of the citizen card or identity card, number and validity date of the driving licence, date and place of birth.
Additional personal information
Household composition, position or role held, professional contact details, educational qualifications.
Reserved Area / Partners
By registering in the Reserved Area and using the website, you will be providing data related to your IP address, the device used for this purpose, as well as details of your usage, namely the date, time and nature of the requests made.
How do we keep your personal data secure?
We use a range of security measures and authentication tools to protect and maintain the security, integrity and availability of your personal data.
Although the transmission of data via the internet or a website cannot guarantee complete security against third-party intrusions, Robalo, S.A., its service providers and business partners make their best efforts to implement and maintain procedures, as well as physical and electronic security measures, aimed at protecting your personal data.
We have implemented, among others, the following measures:
- Restricted access to your personal data based on the “need-to-know” principle and only within the scope of purposes arising from contractual relationships or expressly consented;
- Protection of information technology systems through firewalls, in order to prevent unauthorized access to your personal data;
Monitoring access to information technology systems in order to prevent, detect and stop the misuse of your personal data.
Persons who come into contact with or become aware of personal data by virtue of their specific relationships (legal or contractual) are bound by professional confidentiality, even after the end of their duties, under the applicable legal terms, and in case of breach, will be subject to the liability and criminal sanctions provided for by applicable law.
How long do we retain your personal data?
We retain your data only for the period necessary for the purpose for which it was collected
Once the maximum legal retention period has been reached, your personal data will be anonymised or securely deleted.
With whom may we share your personal data and how do we keep it secure?
Your personal data is stored on protected servers, ensuring that it is processed in accordance with appropriate security measures, and is accessed and used exclusively under our security policies and standards and only by Robalo, S.A.
Robalo, S.A. will only engage subcontractors that provide guarantees and security standards equivalent to those implemented by the company.
Know your data protection rights
If you have any questions regarding our use of your personal data, you should first contact the following email address:
responsavel.dados@robalo-sa.com
Under the legally established terms, you have the right to request that we:
- Provide you with additional information about how we use your personal data;
- Provide you with a copy of your personal data;
- Provide your personal data to another data controller, at your request, provided it is submitted in writing;
- Update your personal data;
- Delete your personal data when its use is no longer legitimate, provided you present the relevant justification;
- Restrict the way we use your personal data until the complaint submitted has been analysed and a decision has been made.
If you exercise any of these rights, we will analyse your request and aim to respond within 1 (one) month.
If you are not satisfied with the use of your personal data or with our response after exercising any of the above rights, you may lodge a complaint with the Supervisory Authority (the National Data Protection Commission).