Política de Privacidade
Reflecting its vision and aligned with the goal of acting responsibly in the community where it operates and in its relationships with customers, suppliers, service providers, and employees, the protection of privacy and personal data and their transparent and fair treatment are essential values for GWIC.
For this reason, GWIC processes personal data based on the following principles:
- Personal data is processed lawfully, fairly, and transparently;
- Data collection is only carried out for duly determined, explicit, and legitimate purposes in accordance with applicable legislation;
- The collected data is limited to what is strictly necessary and for the time needed for the purposes for which they are processed;
- Only GWIC employees, collaborators, and partners whose functions require it have access to processed personal data;
- Personal data is processed confidentially.
Personal Data
According to data protection legislation, personal data refers to any information related to an identified or identifiable individual (the data subject). An identifiable individual is considered one who can be identified directly or indirectly, particularly through reference to an identifier, such as a name, identification number, location data, electronic identifiers, or one or more specific elements of the individual’s physical, physiological, genetic, mental, economic, cultural, or social identity.
Data Controller
The controller of the personal data is GWIC, with whom the data subjects are in a relationship.
Conditions for Processing
GWIC will only process personal data if one of the following conditions is met, as stipulated in data protection legislation, namely:
- If the data subject has given prior and informed consent for their personal data to be processed;
- If the processing of personal data is necessary for the performance of a contract in which the data subject is a party or for pre-contractual steps at the request of the data subject;
- When processing is necessary for compliance with a legal obligation to which GWIC is subject;
- If processing is necessary to safeguard GWIC’s legitimate interests.
Personal Data Retention Period
In line with the principles mentioned above, personal data processed by GWIC is retained only for the time strictly necessary for the purposes for which it was collected. These time periods are determined based on retention criteria appropriate for each type of data processing, while respecting GWIC’s legal and regulatory obligations.
Data Subject Rights
GWIC ensures that the data subject can exercise the rights granted under data protection legislation, namely:
- Right of access (the data subject can obtain confirmation of whether their personal data is being processed and access information about it);
- Right to rectification (the data subject can request the correction or completion of their personal data);
- Right to erasure (the data subject can request the erasure of their personal data in certain situations: if the personal data is no longer necessary for the purpose for which it was collected, if the data subject withdraws their consent, if the data subject objects to the processing, if the personal data has been unlawfully processed, if the personal data must be erased to comply with a legal obligation, or if the personal data was collected in relation to the offer of information society services);
- Right to restriction of processing (the data subject can request the limitation of the processing of their personal data in specific cases, such as contesting its accuracy or opposing its use);
- Right to data portability (when processing is based on consent or contract and carried out by automated means, the data subject can request their data in a structured format and ask for it to be transferred to another data controller);
- Right to object (the data subject can object to the processing of their data at any time, particularly when it is based on legitimate interest);
- Right not to be subject to automated individual decisions (the data subject has the right to request human intervention when decisions are made solely by automated processes);
- Right to withdraw consent (the data subject can withdraw consent at any time for data processing);
- Right to lodge a complaint with the National Data Protection Commission regarding any concerns related to personal data processing.
To exercise any of these rights or address any issues related to privacy and personal data protection, the data subject can contact GWIC through the following channels:
- Email: sgq@gwicgroup.com;
- Mail: GWIC Group, Lda, Rua dos Lusíadas nº 9 – 2º Dto. 1300-365 Lisboa.
Security Measures
GWIC has technical and organizational security measures in place to protect personal data against data breaches (“data breach”: a security breach that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed) and against any other form of unlawful processing.
Additionally, any time personal data is transmitted to other entities, these entities are required to adopt technical and organizational measures that ensure the same level of protection.
Communication of Personal Data to Other Entities
In the course of its activities, GWIC may need to communicate or provide access to personal data to other entities, ensuring that these entities present adequate technical and organizational measures to protect personal data. Personal data will only be accessed or shared with the following entities:
- Entities providing services to GWIC, such as IT support, document management, legal assistance, and human resources;
- Companies with which GWIC has partnerships;
- Public authorities (e.g., Tax and Customs Authority).
Additional Information
If desired, the data subject can access detailed information about privacy and personal data processing by sending an email to info@gwicgroup.com. GWIC’s privacy policy may be subject to changes at any time. In such cases, these changes will be announced and published on the website: www.gwicgroup.com.
