WEBSITE PRIVACY POLICY
WICCE - WATER INFRASTRUCTURES CONSTRUCTION COSTS ESTIMATOR
Introduction
AdP VALOR, Serviços Ambientais, S.A., hereinafter AdP VALOR, is committed to protecting the privacy of your personal data.
With the entry into force of the General Regulation on Data Protection (RGPD), AdP VALOR remains engaged and committed regarding the compliance with the legislation on personal data protection, privacy and information security, in order to protect personal data and the privacy of its holders.
This privacy policy sets out:
- What personal data we collect and process about you and your relationship with us as a data subject and through your use of the desktop browsing or mobile application of the WICCE - WATER INFRASTRUCTURES CONSTRUCTION COSTS ESTIMATOR (WICCE) website, https://wicce.adp.pt/;
- From where we get the data;
- What we do with that data;
- How we store the data;
- To whom we transfer/to whom we disclose the data;
- How we ensure your data protection rights;
- And how we comply with data protection rules.
Data Controller
AdP VALOR, with head office at Rua Visconde de Seabra n.º 3, 1700-103 Lisboa, registered in the Commercial Registry Office of Lisbon, with the single registration and taxpayer number 505296950, and with a share capital of € 50,000.00, is responsible for the collection and processing of the personal data of the data subjects, under the terms and for the purposes indicated in this document, in compliance with the legal obligations applicable in this matter.
Privacy and personal data protection principles
Data is received directly from a data subject and only personal data that is relevant and necessary for the registration and activation of user accounts is collected.
AdP VALOR is committed to adhering to the data protection principles established by the RGPD.
What personal data we collect
Personal data refers to any information relating to the data subject which makes it possible to identify him or her, as well as information relating to the data subject's access to our website or platform.
We may collect personal data from the data subject when they register as a user on our website or access the platform.
The following personal data is collected:
- Name;
- Email;
- Mobile phone;
- Name and TIN of the entity associated to the registration;
- Position held in that entity.
What are the purposes of data processing, why and for how long
The data of the data subject will be processed for the following processing purposes:
- Process personal registration data to verify that you are part of a Company and meet the requirements to access the platform;
- Create user account;
- Configure profile;
- Website management;
- Management and response to contacts received through the contact form on the website.
Your personal data will only be processed in cases where a lawful basis exists. The lawful basis for this processing is the consent of the data subject, i.e. the data subject must consent to the processing of their personal data for the purposes identified above.
It is possible that legal obligations may be derived from said processing, so your data may also be processed on this legal basis.
We may also process your data on the basis of legitimate interest, for example to inform you of news on the platform.
Personal data will not be kept longer than necessary to fulfil the purpose for which it was collected. In determining the appropriate retention period, the amount, nature and sensitivity of the personal data and the purposes of processing have been considered.
Personal data will be securely deleted after the defined retention period. Over time, full consideration will be given in order to reduce the personal data that is subject to processing, as well as to evaluate the prospect of anonymising said data, so that it cannot be associated with the data subject, nor used to identify the latter, in which case it will be possible to use this information without further notification.
Security of the data subject's personal data
AdP VALOR undertakes to guarantee the security of the information it holds, as well as all resources associated with it, whether procedural, technological or human.
When personal data is collected via our website or our platform, this information is transmitted securely over the internet using high level encryption.
The management of information security and the systems that support it is carried out ensuring, through an approach based on risk management and continuous improvement, the confidentiality, integrity and availability of information. Safeguarding these three pillars of information security guarantees the image, reputation and credibility of the organisation and its production processes among users.
Sharing of the data subject's personal data
AdP VALOR may transmit the holders' personal data to third parties who process the data on behalf of AdP VALOR, which implies access, by these entities, to such data, and, when this occurs, it will take the appropriate measures, contractually provided, to ensure that these entities have sufficient and adequate guarantees of execution of technical and organisational measures, acting only in accordance with our instructions.
Your data protection rights
By law, the data subject has the right to:
- Request information about whether we hold personal data about you and, if so, what that data is and why we hold it.
- Request access to personal data, receiving a copy of the personal data we hold about you and verifying that we are processing it legitimately.
- Request the rectification of the personal data we hold about you and you can rectify at any time the incomplete or inaccurate data we hold about you.
- Request the deletion of your personal data, and you may delete or remove your personal data at any time when a retention period is reached or the data processing is no longer lawful. You will also have the right to ask us to delete or remove your personal data where you have exercised your right to object to the processing.
- Object to the processing of personal data in cases where we rely on a legitimate interest (or those of a third party) and there is a justifiable reason to object. You also have the right to object where we are processing your personal data for direct marketing purposes.
- Opposition to automatic decision-making, including profiling.
- Request the limitation of data processing by compelling the suspension of personal data processing.
- Request the portability of personal data in a structured, electronic form to you or another entity.
- Withdrawing consent - The data subject has the right to withdraw his or her consent for the specific processing at any time.
How to exercise your rights
If you wish to exercise any of these rights, please contact us at dpo@adp.pt or send your request by letter to Rua Visconde de Seabra n.º 3, 1700-421 Lisboa.
We may need to ask you for specific information to help us confirm your identity and to help us secure your right to access the information (or to exercise any of your other rights). This is another applicable security measure to ensure that personal information is not disclosed to any person who is not entitled to receive it.
Without prejudice to any other administrative or judicial appeal, the data subject has the right to lodge a complaint with the National Commission for Data Protection, or another competent supervisory authority under the law, if he or she considers that his or her data is not being lawfully processed by AdP VALOR, pursuant to applicable legislation and this Policy.
Data collection
The personal data we will process will be that which you provide to us at the time of registration and during the course of the agreement.
As your registration is subject to belonging to a Company, this Company will inform us whether or not it meets the requirements to formalise the registration. And once registered this same Company may ask us to cancel the service.
On certain circumstances the company also provides us with personal data which we add to your profile to enable you to fill in your details.
Changes to the Privacy Policy
AdP VALOR reserves the right at any time, and for any reason it considers relevant, to make modifications or updates to this Policy, such changes being duly reflected on the website.
We suggest that holders check this page regularly to keep abreast of any changes.
Without prejudice, should these changes imply a substantial change regarding the way your data will be processed, AdP VALOR will notify you using the contact details made available to you and/or by placing a notice in a prominent place on the website.
Get in touch with us
If you have any questions, comments or suggestions about our Privacy Policy, please contact us by email at dpo@adp.pt or send your request by letter to Rua Visconde de Seabra n.º 3, 1700-421 Lisboa.
Date of last revision: 3 October 2022