What is personal data?Personal data is any information of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person. Any identifiable person, directly or indirectly, identified by reference to a name, identification number, location data, identifiers by electronic means or one or more specific elements of his or her physical, physiological, genetic, mental, economic, cultural or social.
What is the processing of personal data?The processing of personal data consists of an operation or set of operations carried out on personal data or personal data sets, by automated means or not, namely collection, registration, organization, structuring, preservation, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, limitation, erasure or destruction.
Our data protection policy guarantees that the data is: Object of lawful, fair and transparent treatment in relation to the data subject ('lawfulness, loyalty and transparency'); Collected for specific purposes, explicit and legitimate and can not be further processed in a way incompatible with those purposes; Appropriate, relevant and limited to what is necessary in relation to the purposes for which they are processed; Accurate and up-to-date whenever necessary; taking all appropriate measures to ensure that inaccurate data, taking into account the purposes for which they are processed, are erased or rectified without delay; Preserved in a way that allows the data subjects to be identified only for the period necessary for the purposes for which they are processed; Treaties in a manner that guarantees their safety, including protection against their unauthorized or unlawful treatment and against their accidental loss, destruction or damage by adopting appropriate technical or organizational measures;
Purposes of Treatment of Personal Data.Guaranteeing, where necessary, the prior consent of the holder of the personal data, we will collect, among others, the following information: Name and Surname, Civil Identification Number; Tax Identification Number; Date of Birth, Email and Telephone. In general, the personal data collected are based on the management of the contractual relationship, the provision of contracted services, the suitability of the services to the needs and interests of the Customer, namely for the purpose of accessing specific features of the services, suggestions for content, proximity information services as well as information and marketing actions. In addition, personal data may also be processed for the purpose of complying with legal obligations and for the purposes of investigation, detection and prosecution of serious crimes.
Shelf life:The length of time during which personal data are stored and stored varies according to the purpose for which the information is processed. Effectively, there are legal requirements that require you to retain the data for a minimum period of time. Thus, and whenever there is no specific legal requirement, the data will be stored and kept only for the minimum period necessary for the pursuit of the purposes that led to their collection or subsequent processing, under the terms defined by law.
Use of personal dataDive Club Cipreia will contact you to present the goods and / or services you sell. The processing of such data is based on the consent given by the data subject. Access to personal data is strictly limited to the personnel of the data controllers and subcontractors. Sharing of personal data Dive Club Cipreia guarantees that it does not intend to transfer data to third countries to the General Regulation of Data Protection and if it does, it will ask for this consent. Dive Club Cipreia entered into an agreement with its subcontractors to oblige them not to transfer data to third countries. In certain situations, both Dive Club Cipreia and its Subcontractors may be notified to disclose personal information in response to requests by supervisory authorities to fulfill the requirements of the RGPD.
Processing SecurityThe Cipreia Dive Club is committed to ensuring the protection of the personal data that is made available to it, and has adopted and implemented strict rules in this regard. Compliance with these rules is an obligation of all those who legally access them. Bearing in mind the concern and commitment that Dive Club Cipreia reveals in the defense of personal data, a number of technical and organizational security measures have been adopted in order to protect the personal data made available to it against its dissemination, loss, use unauthorized alteration, processing or access, as well as against any other form of illicit treatment. In addition, third parties who, in the scope of the provision of services, process the personal data of the Customer in the name and on behalf of the Dive Club Cipreia, are obliged in writing to carry out adequate technical and safety measures which, at any time, comply with the requirements of the legislation in force and ensure the protection of the rights of the data subject (in particular, the protection of the privacy and personal data of Customers).
Access and rectification or deletion of personal dataAs the holder of the data, the Client has the right to request access to the data concerning him, to ask for rectification and to eliminate them. It may also limit the processing of data as well as oppose it and still require data portability. You may do so, either directly or by written request, addressed to the person responsible for the treatment, through the contacts made available for this purpose in this document. You may also request clarification from the Data Protection Officer or submit a complaint to the CNPD whenever you understand that your rights are being violated.
Right of accessThe holder of the personal data has the right to obtain from the Dive Club Cipreia the confirmation that the data relating to him are treated or not and, if appropriate, to access his personal data and access the information provided by law .
Direito de retificaçãoThe holder of personal data has the right to obtain from the company of the Dive Club Cipreia without undue delay the rectification of inaccurate or incomplete data concerning him.
Right to erase data ("right to be forgotten")The holder of the personal data has the right to obtain from the Dive Club Ciprei the erasure of his data without undue delay and the latter has the obligation to erase the personal data without undue delay when one of the following applies in particular: (a) personal data are no longer necessary for the purpose for which they were collected or processed; (b) the consent holder has withdrawn his consent for the processing of data (in cases where treatment is based on consent) and there is no other basis for such treatment; (c) the proprietor is opposed to the treatment and there are no prevailing legitimate interests justifying the treatment;
Right to limit treatmentThe data subject has the right to obtain from the Dive Club Cipreia the limitation of the treatment if one of the following applies in particular: a) To answer the accuracy of the personal data, during a period that allows the Dive Club Cipreia to verify its accuracy; b) The processing of data is lawful and the holder of the data opposes the erasure of personal data and request, on the other hand, the limitation of its use; c) Dive Club Cipreia no longer needs personal data for treatment purposes, but such data are required by the holder for the purposes of declaration, exercise or defense of a right in a legal process; (d) if he opposes the processing until it is established that the legitimate grounds of the controller prevail over those of the data subject.
Right of portability of dataIf the processing depends on the consent of the data subject and such consent has been provided by automated means, the data subject has the right to receive the personal data relating to him and which he has provided to the Dive Club Cipreia in a structured, current use and automatic reading.
Right of oppositionIn cases where the processing of data is carried out for 1) effect of the legitimate interests pursued by the Dive Club Cipreia; or 2) the processing of data is carried out for the purposes of direct marketing or 3) definition of profiles, you can also, at any time, oppose the treatment of your personal data.
Marketing E-mailsData controllers are allowed, after explicit consent, to send marketing emails to site users. At any time the user may cancel the consent through the link, existing for this purpose, in each email sent.
Changes to this policyThis policy may be updated from time to time, for example due to changes to relevant legislation. If any material changes are made, customers will be notified by email or notification on the website.
ContactsRESPONSIBLE FOR TREATMENT
Dive Club Cipreia
Tel: +351 21 843 55 80