1. Introduction
Nova Conservação, complying with the provisions of the Data Protection Regulation (GDPR), approved by Regulation (EU) 2016/679, of April 27, 2016, defined a privacy and personal data protection policy, regulating the processing and systematization information in this area.
The implementation of this policy constitutes the company's commitment, as controller of personal data, to comply with the GDPR, seeking to act in accordance with the principles set out therein.
Nova Conservação recognizes a duty of secrecy and confidentiality in the processing of personal data, adopting technical measures considered appropriate to prevent unauthorized access and guarantee their confidentiality.
2. Principles for processing personal data
The processing of personal data is carried out in accordance with the general principles set out in the “GDPR”, namely:
In the context of the relationship established with the data subject, we ensure that personal data will be treated in a lawful, fair and transparent manner ("Principle of lawfulness, loyalty and transparency");
We collect personal data for specific, explicit and legitimate purposes and do not subsequently process the same data in a way that is incompatible with those purposes (“Principle of purpose limitation”);
We ensure that only personal data that is adequate, relevant and limited to what is strictly necessary for the purposes for which it is processed ("Principle of data minimization") is processed;
We adopt appropriate measures so that personal data that is inaccurate, taking into account the purposes for which it is processed, is erased or rectified ("Principle of accuracy");
We keep personal data in a way that allows their identification only for the period necessary for the purposes for which they are processed (“Principle of conservation”);
We ensure that personal data is processed in a way that guarantees its security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, adopting appropriate technical or organizational measures ("Principle of integrity and confidentiality" ).
3. Processing of personal data
As part of the exercise of its activity, and in accordance with the achievement of its purposes, Nova Conservação collects and processes personal data, in particular, for the following purposes and legal bases:
Response to contacts, requests for information, quotations or proposals relating to the services it develops (Legitimate interest, pre-contractual due diligence and contractual execution);
Preparation and conclusion of contracts, such as works contracts, acquisition of services and various supplies (Pre-contractual due diligence and contractual execution);
Execution of contracts and development of tasks, within the scope of its activity and in support of it, in accordance with its corporate purpose (Contract execution, compliance with legal obligations, legitimate interest);
Carrying out recruitment processes or responding to requests for collaboration, as part of a spontaneous application (Consent from the holder of personal data and pre-contractual measures);
The data collected is, in essence, identification, contact or other data that proves to be indispensable for achieving the indicated purpose, based on admissible legal grounds.
The data is collected from its holders and is only communicated to third parties when this is essential, given the existence of contractual and/or legal obligations.
When, due to the aforementioned obligations, other Entities transmit personal data to Nova Conservação, it is their responsibility to ensure compliance with the GDPR with its holders.
Personal data is kept for the period strictly necessary, in accordance with the purpose that legitimizes its collection and processing. Exceptionally, if personal data is of historical importance, it may be kept for this purpose and strictly necessary.
4. Personal data holders
The data subject is, in particular, the representative/employee or point of contact of a Customer, or potential Customer, Partner, Developer, Supervision, Security Manager, Designer, Subcontractor, Supplier, Service Provider, who individually or representing a person legal, establish a relationship with Nova Conservação, within the scope of contract execution, pre-contractual due diligence, request for information or commercial contact.
The data subject may also be a person visiting an intervention or a candidate who sends a collaboration request or participates in a recruitment process.
The personal data of Nova Conservação workers will be treated in accordance with this policy, detailed in an internal document.
5. How to exercise rights
The data subject has the rights set out in the GDPR, namely, the right of access, rectification, cancellation, limitation of processing and opposition, and may exercise them by means of written communication to the company, to its postal address or via email .
Contact details:
New Conservation – Restoration and Conservation of SA’s Artistic-Cultural Heritage
Largo Vitorino Damásio, n.º 3, 3rd Left, 1200-872 Lisbon
nc@ncrestauro.pt
6. Communications
The company seeks to make its privacy and data protection policy known to the respective data subjects, through the most appropriate means.
7. Update of the privacy and data protection policy
Nova Conservação reserves the right, at any time, to revise this privacy and data protection policy. For this reason, it is recommended that you periodically consult this policy on our website to stay informed about the processing of your personal data.
Last updated date: 08/13/2024
Back