The protection of privacy and personal data is a commitment of Say U Consulting

The protection of privacy and personal data is a fundamental commitment of Say U Consulting - Comunicação, Lda, to the owner of personal data (also, "owner") who uses its website.

With the application of the new General Data Protection Regulation (GDPR)As of May 25, 2018, Say U Consulting hereby states that it remains strongly committed to and committed to protecting the privacy and personal data of the respective holder who uses this website and, to that extent, is updating its Privacy Policy, in accordance with all the principles and standards of data protection that underpin the GDPR.

In this document, we attempt to explain what personal data we collect, for what purposes we may use it, how we handle it, with whom we share it, and for how long we retain it.

General Data Protection Regulation

The new GDPR establishes the rules regarding the processing by a person, a company, or an organization of personal data relating to individuals in the European Union (EU).

The GDPR protects personal data regardless of the technology used to process such data, the protection is technology-neutral, and applies to both automated processing and manual processing, provided that the data is organized according to pre-defined criteria (e.g. alphabetical order). It is also irrelevant how the data is stored, whether in a computer system, through video surveillance, or on paper; in all these cases, personal data is subject to the protection requirements of the GDPR.

Processing of personal data, scope and amendment of the Privacy Policy

By providing your personal data to Say U Consulting, you consent to the processing of your personal data in accordance with this Privacy Policy and the rules and principles contained in the Terms and Conditions of this website.

This Privacy Policy applies to data that has been directly provided by the data subject or collected in accesses by the data subject to the Say U Consulting website. Therefore, please note that the Say U Consulting website has links (hyperlinks) to other digital platforms and refers to third party content that is not covered by Say U Consulting Privacy Policy, so it is advisable that whenever the owner of personal data browsing these platforms is informed of the content of their privacy policies, as well as the terms and conditions applicable.

Say U Consulting reserves the right to change its Privacy Policy, so we encourage you to regularly review this document as well as the Terms and Conditions of the Say U Consulting website. If the Privacy Policy changes, we will post a notice on our digital platforms.

What kind of information does Say U Consulting collect?

Say U Consulting collects two types of information: personal information and anonymous information. Anonymous information occurs while the personal data subject visits the website and is intended to improve the functioning of the website, including content management and prioritization. Personal information is provided voluntarily by the personal data subject at the time of optional registration. All data collected are processed automatically, and information collected from the personal data subject is encrypted and managed with advanced security.

Registration is for the holder of personal data to access the Say U Consulting newsletter subscription service and the completion of a message form for the Say U Consulting team.

Say U Consulting may need to make personal and anonymous information available to third parties. This will only happen, however, under these specific circumstances:

1. a) With the personal data subject's express consent;b) When in good faith we believe it is required by law;c) When in good faith we believe it arises from contractual stipulation;d) When in good faith we believe it is necessary to protect our rights or property;

   e) When there is a transfer to some successor or buyer, in a merger, acquisition, liquidation, dissolution or sale of assets.

The consent of the personal data subject will not be required for disclosure in the situations referred to in points (b) and (e). In any event, we will endeavor to notify you to the extent permitted by law.

What is personal data?

Personal data is information relating to an identified or identifiable person. An identifiable person is one who can be identified directly or indirectly. Personal data is also the collection of separate information that can lead to the identification of a specific person.

Examples of personal data:

• First and last name;
• Email address;
• Location data (for example, the location data function in a cell phone);
• Cookies;
• Sound or image.

Who is the data subject of personal data?

The data subject is the natural person to whom the data relate and who has used the Say U Consulting website.

How long does Say U Consulting process and retain your personal data?

Say U Consulting processes and keeps your personal data in accordance with the purposes for which they are processed and only for the period of time necessary for the fulfillment of the purposes that motivated their collection and storage, and always in accordance with the law, guidelines and decisions of the CNPD, or, as applicable, until you exercise your right to object, right to be forgotten or withdraw consent.

After the expiration of the respective retention period, Say U Consulting will delete or anonymize the data where it should not be retained for any other purpose that may subsist.

Rights of the personal data subject

The holder of personal data has rights to information, access and rectification or erasure of personal data and the right to data portability, the right to limit or oppose the processing of their data, within the scope and under the terms of the RGPD and other applicable legislation.

The data subject may withdraw, at any time, the consent he or she has given for the processing of his or her personal data, within the framework of the GDPR. Revocation of consent shall not affect the lawfulness of the processing of personal data that has hitherto been carried out on the basis of the consent previously given.

This request can be made through the email address letus@say-u.pt.

You also have the right to lodge a complaint regarding the processing of your data with the CNPD.

A response to a request shall be provided without undue delay within one month of receipt of the request, unless the request is particularly complex or occurs in exceptional circumstances. That period may be extended to two months where necessary, taking into account the complexity of the request and the number of requests received.

As part of your request, you may be asked to provide proof of your identity to ensure that personal data is only shared with the data subject.

Transmission of personal data

Personal data may be transmitted to subcontractors to process it on behalf of Say U Consulting. In this case, Say U Consulting will take the necessary contractual measures to seek to ensure that the subcontractors respect and protect the personal data of the data subject.

The data may also be transmitted to third parties - entities other than Say U Consulting or subcontractors or entities to whom the data must be communicated by law, such as the Tax Authority, judicial authorities, criminal police agencies, among others.

Liability for Say U Consulting and third-party websites

On the Say U Consulting website's use and processing of personal data, please refer to Say U Consulting's Cookie Policy.

Say U Consulting is not responsible for the content accessed through any link that leads the holder of personal data to navigate outside Say U Consulting website and the processing of personal data carried out on these sites, where such links are the responsibility of third parties. The websites and contents of third parties are not subject to this Privacy Policy, so we advise you to look and read the privacy policies and terms and conditions applicable whenever you browse these sites.

What security procedures ensure the protection of your data?

Say U Consulting takes all necessary and legally required precautions to ensure the privacy of personal data processed and/or transmitted through its digital platforms. These precautions ensure the online and offline security of such information.

Last update: June 08, 2020.

 About General Data Protection Regulation (GDPR): Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016).