Personal Data Protection Policy

Zyrgon Portugal Lda. respects the privacy of its customers/users, employees and suppliers. This Privacy Policy describes who we are, for what purposes we may use your data, how we process it, with whom we share it, how long we keep it, as well as how to contact us and exercise your rights. The rules set out in this Data Protection Policy complement the provisions on the protection and processing of personal data set out in the contracts that Customers/Users; Employees and suppliers enter with Zyrgon Portugal Lda, as well as the rules set out in the terms and conditions that regulate the offer of the various products and services, and which are duly advertised on the respective websites.

Your data is collected by Zyrgon Portugal Lda, with registered offices at Travessa do Sebeiro No. 12, hereinafter referred to as Zyrgon.

Zyrgon processes and stores personal data within the European Union (EU) and respects the best practices in the field of security and protection of personal data, having for this purpose taken the necessary technical and organizational measures in order to comply with the General Data Protection Regulation (Regulation (EU) 2016/679), which is a legislative act directly binding on natural and legal persons who, whether resident in the EU or not, process data of citizens of the European Union and which aims to ensure that the processing of personal data is lawful, fair, transparent and limited to authorized purposes.

The privacy statement is under the responsibility of Zyrgon, which is considered the data controller for the purposes of the GDPR and will determine the purpose and means of processing personal data submitted and collected online.

The Data Protection Officer (DPO) ensures compliance with the regulation and is involved in all matters relating to the protection of personal data. Their identification and contact details are listed at the end of this document.

What is personal data?

Personal data is any information of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person.

An identifiable natural person is one who can be identified, directly or indirectly, by reference to a name, an identification number, location data, an electronic identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

What does the processing of personal data consist of?

The processing of personal data consists of an operation or set of operations which is performed on personal data or on sets of personal data, whether by automated means, namely collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, restriction, erasure or destruction.

Our data protection policy guarantees that the data are:

1. Object of lawful, fair and transparent processing in relation to the data subject (“lawfulness, fairness and transparency”);
2. Collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;
3. Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
4. Accurate and up to date whenever necessary; all appropriate measures are taken to ensure that inaccurate data, considering the purposes for which it is processed, is erased or rectified without delay;
5. Kept in a form that allows data subjects to be identified for no longer than is necessary for the purposes for which they are processed;
6. Handled in a manner that ensures their security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by adopting appropriate technical or organizational measures;
7.  

Purposes for Processing Personal Data.

Whenever necessary, with the prior consent of the owner of the personal data, we will collect the following information, among others: Name and Surname, Civil Identification Number; Tax Identification Number; Date of Birth, Email and Telephone Number.

In general, the personal data collected is based on and intended for the management of the contractual relationship, the provision of the contracted services, the adaptation of the services to the needs and interests of the Client/User; Worker and Supplier, namely for the purposes of access to specific functionalities of the services, content suggestions, proximity information services as well as information and marketing actions.

In addition, personal data may also be processed for the purpose of complying with legal obligations and for the investigation, detection and prosecution of serious crimes.

Cookies

Our website uses cookies or similar technologies to ensure the best user experience and to analyze trends, track user movement within the website and gather demographic information about our user base. Our Cookies record information such as Internet Protocol (IP) address, browser type, Internet Service Provider (ISP), referring/exit pages, the files accessed on our site (e.g. HTML pages), operating systems, date and time, to analyze trends on the site.

Shelf life

The length of time for which personal data is stored and retained varies according to the purpose for which the information is processed.

In fact, there are legal requirements that oblige data to be kept for a minimum period. Therefore, and whenever there is no specific legal requirement, the data will only be stored and kept for the minimum period necessary for the pursuit of the purposes that led to its collection or subsequent processing, under the terms defined by law.

Majority

By accepting this privacy policy, you guarantee that you are 18 years of age or over.

Use of personal data

Zyrgon will contact you to present the goods and/or services it sells. The processing of such data is based on the consent given by the data subject. Access to personal data is strictly limited to the personnel of the personal data controllers and subcontractors.

Sharing personal data

Zyrgon guarantees that it does not intend to transfer data to countries outside the scope of the General Data Protection Regulation and if it does, it will ask you for your consent.

Zyrgon has signed an agreement with its subcontractors whereby they undertake not to transfer data to third countries.

In certain situations, both Zyrgon and its Subcontractors may be notified to disclose personal information in response to requests by supervisory authorities to fulfill the requirements of the GDPR.

Processing security

Zyrgon is committed to guaranteeing the protection of the security of the personal data made available to it and has approved and implemented strict rules in this regard. Compliance with these rules is an obligation of all those who legally access them.

Bearing in mind Zyrgon’s concern and commitment to the protection of personal data, various technical and organizational security measures have been adopted to protect the personal data made available to it against unauthorized disclosure, loss, misuse, alteration, processing or access, as well as against any other form of unlawful processing.

In addition, third parties who, in the context of the provision of services, process the personal data of Customers/Users, Employees and Suppliers in the name and on behalf of Zyrgon, are obliged, in writing, to implement appropriate technical and security measures that, at all times, meet the requirements of the legislation in force and ensure the protection of the rights of the data subject (in particular, the protection of the privacy and personal data of Customers/Users, Employees and Suppliers).

Access to and rectification or erasure of personal data

As the data subject, the Customer/User, Worker and Supplier have the right to request access to the data concerning them, to ask for it to be rectified and to have it deleted. They may also limit the processing of their data, oppose it and request data portability.

You can do this directly or by writing to the respective Data Controller using the contact details provided in this document.

You can also ask for clarification from the Data Protection Officer or lodge a complaint with the CNPD whenever you feel that your rights are being violated.

Right of access

The holder of the personal data has the right to obtain confirmation from Zyrgon as to whether the data concerning him or her is being processed and, where appropriate, to access his or her personal data and access the information provided by law.

Right to rectification

The holder of personal data has the right to obtain from the Zyrgon company, without undue delay, the rectification of inaccurate or incomplete data concerning him/her.

Right to erase data (“right to be forgotten”)

The holder of the personal data has the right to obtain from Zyrgon the erasure of his/her data without undue delay, and Zyrgon has the obligation to erase the personal data without undue delay where one of the following reasons applies in particular:

1. a) The personal data is no longer necessary for the purpose for which it was collected or processed;
2. b) The data subject has withdrawn their consent to the processing of data (in cases where processing is based on consent) and there is no other basis for said processing;
3. c) The data subject objects to the processing and there are no overriding legitimate interests justifying the processing;

Right to restriction of treatment

The data subject has the right to obtain from Zyrgon the restriction of processing if one of the following situations applies:

1. a) Challenge the accuracy of personal data for a period that allows Zyrgon to verify its accuracy;
2. b) The data processing is lawful, and the data subject opposes the erasure of the personal data and requests, instead, the restriction of its use;
3. c) Zyrgon no longer needs personal data for processing purposes, but such data is required by the data subject for the purpose of declaring, exercising or defending a right in legal proceedings;

4.d) has objected to the processing, until it is established that the legitimate reasons of the controller prevail over those of the data subject.

Right to data portability

If the processing depends on the consent of the data subject and that consent has been given by automated means, the data subject has the right to receive the personal data concerning him or her that he or she has provided to Zyrgon in a structured, commonly used and machine-readable format.

Right to object

In cases where the processing of data is carried out for 1) the purposes of the legitimate interests pursued by Zyrgon; or 2) the processing of data is carried out for the purposes of direct marketing or 3) profiling, you may also object to the processing of your personal data at any time.

Marketing emails

Data controllers are allowed, after explicit consent, to send marketing emails to users of the site. The user can withdraw consent at any time using the link on each email sent.

Changes to this policy

This policy may be updated from time to time, for example due to changes in relevant legislation. If any material changes are made, customers will be notified by email or by notification on the website.