Privacy Policy (GDPR)

I. OBJECTIVES AND COMMITMENT

This Privacy Policy aims to:

a. Inform that “PROJECTCARGO” processes the personal data of natural persons who have a relationship with PROJECTCARGO.
b. Inform data subjects of the rights they are entitled to in this matter, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“General Data Protection Regulation” or “GDPR”).

PROJECTCARGO is strongly committed to protecting the privacy of the personal data of its clients and suppliers. Likewise, PROJECTCARGO is committed to safeguarding, at all times, the rights of data subjects provided for in the applicable legislation.

II. ESSENTIAL CONCEPTS: PERSONAL DATA, DATA SUBJECTS, DATA PROCESSING AND DATA CONTROLLER

a. PERSONAL DATA – Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, electronic identifiers, or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b. DATA SUBJECTS – Data subjects are the natural persons to whom the personal data relate. In this case, the data subjects are the Clients and Suppliers of PROJECTCARGO’s services.

c. PROCESSING OF PERSONAL DATA – The processing of personal data consists of an operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d. DATA CONTROLLER – The data controller is the natural or legal person who determines the purposes and means of the processing of personal data. The controller of the personal data of Clients and Suppliers is the company PROJECTCARGO that provides the service and that specifically decides which personal data are collected, the purposes and means of processing, and the retention period of the personal data.

III. PRINCIPLES OBSERVED IN THE PROCESSING OF PERSONAL DATA

In processing the personal data of Clients and Suppliers, PROJECTCARGO permanently observes and respects the following fundamental principles:

a. Lawfulness of Processing: personal data will only be processed if and to the extent that at least one of the following situations applies:
(i) the data subject has given consent to the processing of their personal data for one or more specific purposes;
(ii) processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract;
(iii) processing is necessary for compliance with a legal obligation to which PROJECTCARGO is subject or for the protection of the vital interests of the data subject or another natural person;
(iv) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in PROJECTCARGO; or
(v) processing is necessary for the purposes of the legitimate interests pursued by PROJECTCARGO or by third parties.

b. Transparency: information regarding the processing of personal data will be provided to the respective data subjects in a concise, easily accessible and understandable manner, using clear and plain language.

c. Purpose Limitation: personal data will be processed for specified, explicit and legitimate purposes and will not be further processed in a manner incompatible with those purposes.

d. Data Minimisation: personal data will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

e. Accuracy: personal data must be accurate and, where necessary, kept up to date. PROJECTCARGO will take appropriate measures to ensure that inaccurate data, having regard to the purposes for which they are processed, are erased or rectified without delay.

f. Integrity and Confidentiality: personal data will be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, through the adoption of appropriate technical or organisational measures.

g. Storage Limitation: personal data will be kept in a form which permits identification of data subjects only for as long as is necessary for the purposes for which the data are processed.

h. Data Protection by Design and by Default: PROJECTCARGO will implement appropriate technical and organisational measures, both at the time of determining the means of processing and during the processing itself, in order to effectively apply data protection principles.

IV. PERSONAL DATA PROCESSED BY PROJECTCARGO AND HOW THEY ARE COLLECTED

PROJECTCARGO may process the following categories of personal data of Clients and Suppliers:

Identification and Contact Data: name, address, tax identification number, payment details, data from social networks (name, profile photo, email, date of birth and location), email address, telephone contact and date of birth.

Service Data: data relating to services contracted or acquired from PROJECTCARGO.

Interests: interest in PROJECTCARGO’s services.

Usage Profile: data resulting from technical information made available by the device used by the Client or Supplier whenever they access a PROJECTCARGO service.

The personal data of Clients and Suppliers will be collected when they subscribe to or use a PROJECTCARGO service.

The collection of personal data may be carried out through a written document, email, the PROJECTCARGO website or by telephone.

PROJECTCARGO may collect personal data from publicly accessible sources or other sources, namely through third parties (in this case, PROJECTCARGO undertakes to comply with all applicable legal requirements and to impose on the transmitting third parties compliance with their legal obligations, namely the obligation to obtain consent for the transmission of personal data).

EXERCISE OF RIGHTS

You may exercise your rights through the following contacts:
By post: addressed to PROJECTCARGO and sent to Rua Pinto de Araújo, no. 12, 2nd Floor Left, 4450-774 Matosinhos, Portugal;
By email: to the email address rgpd@projectcargo.pt