Identification of the Data Controller
DICARGO – TRANSPORTES, LDA (hereinafter referred to as DICARGO) is responsible for the processing of your personal data, by automated or non-automated means, from its collection, organization, storage to its deletion.
Information and consent
The General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, hereinafter referred to as 'GDPR') ensures the protection of individuals with regard to the processing of personal data and the free movement of such data. Under legal terms, 'personal data' is considered any information, of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person, meaning that protection does not extend to data of legal entities. By accepting this Personal Data Protection and Privacy Policy, the data subject gives their informed, explicit, free, and unequivocal consent for the personal data provided to be included in a file under the responsibility of DICARGO, whose processing, under the GDPR, complies with appropriate technical and organizational security measures. The data in this base file are solely the data provided by the data subject at the time of their contact with DICARGO, being automatically collected and processed by DICARGO.
Need and purposes of personal data processing
- Your personal data is processed because it is necessary for the negotiation, conclusion, and/or execution of a contract, for the fulfillment of legal obligations imposed on DICARGO, for the pursuit of legitimate interests of the company, or because they were subject to consent.
- The personal data we process will only be used for the following purposes:
- Negotiation and processing of the purchase and sale of products and provision of services, including the fulfillment of tax obligations;
- Communication with customers and clarification of doubts;
- Processing of information requests;
- Processing of complaints;
- Prevention and fight against fraud;
- Requesting feedback on purchased products or services;
- Conducting satisfaction surveys;
- Debt collection arising from supplies and provision of services, based either on the execution of contracts or on its legitimate interest in enforcing its right to collect.
Transfer of personal data
DICARGO may disclose personal data to third parties hired by it to fulfill the purposes described above.
Security measures
DICARGO declares that it has implemented and will continue to implement the necessary technical and organizational security measures to ensure the safety of personal data provided to it, aiming to prevent their alteration, loss, processing, and/or unauthorized access, considering the current state of technology, the nature of the stored data, and the risks they are exposed to. Personal data is processed with the legally required level of protection to ensure its security and prevent its alteration, loss, processing, or unauthorized access, taking into account the state of technology. Whenever DICARGO accesses any personal data, it undertakes to:
- Store them through legally required security measures, of a technical and organizational nature, that ensure their security, thus preventing alteration, loss, processing, or unauthorized access, in accordance with the state of technology at any given time, the nature of the data, and the potential risks to which they may be exposed;
- Use the data exclusively for the previously defined purposes;
- Ensure that the data is processed only by employees whose intervention is necessary for the provision of the service, with those employees being bound by the duty of secrecy and confidentiality.
Data retention period
The data retention period varies depending on the purpose for which the data was collected, always being kept only for the minimum period necessary.
If you have entered into a purchase and sale or service provision contract with us, your data will be stored for the duration of the contract, plus the statutory limitation and expiration periods of the associated rights.
The personal data collected by DICARGO through contact forms, newslettersubscriptions, are intended for processing information requests, contact, and communication, and will be kept for as long as necessary for this purpose.
The personal data collected through the application form are confidential and are intended solely for recruitment purposes. The personal data of non-selected candidates will be retained by DICARGO for a minimum period of 180 days for future recruitment purposes.
After this period, DICARGO may still retain the data to comply with legal obligations and for statistical purposes, in which case the data must be anonymized.
Exercise of the rights of access, rectification, erasure, restriction of processing, objection to processing, data portability, withdrawal of consent, and complaint.
We inform you that you have:
- a) The right of access to personal data concerning you – the data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them is being processed, and, if that is the case, the right to access their personal data and the information provided in the General Data Protection Regulation.
- b) The right to rectification of your data – the data subject has the right to obtain, without undue delay, from the data controller the rectification of inaccurate personal data concerning them.
- c) The right to erasure of your data – the data subject has the right to obtain from the data controller the erasure of their personal data, without undue delay, and the data controller has the obligation to erase the personal data, without undue delay, when one of the following grounds applies: 1) the personal data is no longer necessary for the purpose for which it was collected or processed; 2) the data subject withdraws the consent on which the data processing is based (when the processing is based on consent) and there is no other legal basis for the processing; 3) the data subject objects to the processing and there are no overriding legitimate interests justifying the processing.
- d) The right to restriction of processing concerning the data subject – the data subject has the right to obtain from the data controller the restriction of processing if one of the following situations applies: a) contesting the accuracy of the personal data, for a period that allows the data controller to verify its accuracy; b) the processing is unlawful and the data subject objects to the erasure of the personal data and requests, instead, the restriction of its use; c) the data controller no longer needs the personal data for processing purposes, but the data is required by the data subject for the purpose of making, exercising, or defending a legal claim; d) if the data subject has objected to the processing, until it is determined whether the legitimate grounds of the data controller override those of the data subject.
- e) The right to object to processing – when the processing is carried out for the purpose of legitimate interests pursued by DICARGO, the data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them. The data controller will cease the processing of personal data unless they present compelling and legitimate reasons for the processing that override the interests, rights, and freedoms of the data subject, or for the purpose of making, exercising, or defending a legal claim.
- f) The right to data portability – the data subject has, under the terms and conditions defined by law, the right to receive the personal data concerning them that they have provided to a data controller, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another data controller without the controller to whom the personal data was provided being able to prevent it, if: a) the processing is based on consent or a contract; and b) the processing is carried out by automated means.
- g) The right to withdraw consent at any time – if the processing of data is based on consent, the data subject has the right to withdraw their consent at any time, without affecting the lawfulness of the processing carried out based on the consent previously given.
- h) The right to lodge a complaint with a supervisory authority – the data subject has the right to lodge a complaint at any time with the supervisory and regulatory authority: National Data Protection Commission (CNPD) – Rua de São Bento, No. 148, 3rd floor, 1200-821 Lisbon; Phone – +351213928400; Fax – +351213976832; Email – geral@cnpd.pt
If you wish to exercise any of the rights mentioned from a) to g), you should contact us in writing, via email at: dicargo@dicargo.pt or by letter sent to DICARGO – TRANSPORTES, LDA, EN 16, No. 4, 3530-031 Chãs de Tavares, Mangualde, Portugal.