The General Data Protection Regulation sets out principles and rights governing the processing of personal data. Here we summarise the essentials without replacing the Privacy Policy.
Process only what makes sense.
Personal data must be processed lawfully, transparently and only for relevant purposes. Collection should be adequate, relevant and not excessive in relation to the purpose.
What you can request.
- Access: know whether your personal data is being processed and obtain information about that processing.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion when the legal conditions are met.
- Restriction: temporarily restrict certain processing activities.
- Objection: object to processing based on certain legal grounds.
- Portability: receive data in a structured format where applicable.
- Withdrawal of consent: where processing is based on consent.
How to make a request.
You can use the contact details provided on the website and clearly state that you wish to exercise a data protection right. To protect the data subject, identity verification may be required before fulfilling the request.
Send your request using the WebCenter contact channels, indicating the right you wish to exercise and enough information to locate the relevant data.
Contact us ↗Not every request has the same outcome.
Some rights may be subject to legal limits or exceptions. For example, certain data may need to be retained to comply with legal obligations or defend legal rights.
Response to a request.
Requests are handled within the legally applicable timeframes, taking into account their complexity and number. Where an extension is needed within the permitted rules, the data subject should be informed.
Supervisory authority.
If you believe your data is not being processed in accordance with applicable rules, you may lodge a complaint with the competent supervisory authority, which in Portugal is the Comissão Nacional de Proteção de Dados (CNPD).
Privacy Policy.
For more complete information about data categories, purposes, legal bases, retention and recipients, please see the Privacy Policy.
Read Privacy Policy ↗