Data protection policy

Data protection policy

The purpose is to inform all of the stakeholders about how Abílio Freire, Lda protects and manages the protection of personal data and senstive personal data, collected in the context of its activity. The privacy policy refers to all precautions to be taken when collecting data in terms of legitimacy, rights of data owners and the privacy policy. The privacy policy can be consulted at the head office of the company. 

SERVERS AND COMPUTER NETWORK PROTECTION

Abílio Freire, Lda., undertakes to have its computer system protected with the following tools and properly updated:

  • An antivírus properly updated;
  • A firewall properly updated and installed;
  • A software legalized;
  • User configuration requiring access entry by password;
  • Information hierarchy within the use or the computer system itself;
  • Updated backups of all information.

PASSWORD

Abílio Freire, Lda., uses an eficiente password management in order to minimize of data breach. In this way, passwords used by Abílio Freire, Lda. follow assumptions and principles, as:

  • Passwords are made upo f numbers, lowercase letters, uppercase letters and symbols;
  • Have at least 8 characters;
  • Are updated every 6 months;
  • They are non-transferable;
  • Different passwords are used for diferente devices or software;

BACKUP

Abílio Freire, Lda. performs backups regularly, with two backup levels: regular and periodic. Regular ones are done to the server and the devices connected to it every day, in contrast, the periodic ones are done every week.

Each one of these backups are performed and disconnected from the computer network for security and preservation.

DATA PERMANENCE

Personal data are processed by Abílio Freire, Lda., for the required legal period of time necessary to achieve the defined purpose, in the case of contractual and legal obligations. In cases which doesn’t exist no legislation that requires the archive for a minimum mandatory period of time, the data will be kept for 2 years, or until the right of opposition is exercised, the right to be forgotten or the withdrawal of consente (in which case i tis possible to effect). After the respective storage period has finished, Abílio Freire, Lda., will delete the respective data.

DELETING THE DATA

Abílio Freire, Lda., will delete the data in the following ways:

  • Data saved on paper will be destroyed with a paper shredder and later delivered to na ecocentre;
  • Data saved in computer support are deleted from the system, and later deleted in the backup after the period of 1 week defined by the periodic backup;
  • The data will also be deleted from the PC network computers of Abílio Freire, Lda.;
  • Any residual data existing in the e-mails will be kept for a maximum period of 2 years, which is shorter than the custody of any file mentioned;
  • At the time of personal data stored in computer destruction, in some cases, Abílio Freire, Lda., could anonymize the data for statistical purposes.

PAPER FILES

Paper file i salso a concern of Abílio Freire, Lda., so it’s safeguard from the common access of all users or those who visit Abílio Freire’s head office.

In this way, Abílio Freire, Lda, protects the access to your file, properly locked, and only employees who need it have access to it. Those employees are responsible for sorting this file in order to select the file that should be destroyed, and proceed with its respective destruction.

ORDER AND CLASSIFICATION OF INFORMATION

The information of Abílio Freire, Lda. is classified so that there is a clear separation of personal data, sensitive data and other data. Access to information is hierarchical and limited, with no free access for all to all information.

SECRECY AND CONFIDENTIALITY

Each of the employees of Abílio Freire, Lda. as well as its subcontractors, are contractually bound by the duties of secrecy and confidentiality required by Abílio Freire, Lda data, which can be contacted via e-mail geral@clauditis.pt.

DATA TRANSFER BETWEEN ENTITIES

Data transfer between Abílio Freire, Lda. and its subcontractors are always carried out in a secure manner, and after signing a contract obligation the subcontractor forcing to the duties of secrecy and confidentiality. In this way any database or set of personal data will always be transmitted by:

  • Encrypted e-mail;
  • Secure cloud with data in EU;

DATA TRANSMISSION OF DATA TO THIRD PARTIES

Your personal data may be transmitted to entities to which the data must be communicated in order to comply with legal obligations, such as:

  • Tax Authorities;
  • Social Security;
  • IEFP;

Personal Data, within the scope of the normal functioning of Abílio Freire, Lda. will also be processed by the following subcontractors:

  • Clauditis – Memórias & Critérios Unipessoal, Lda, with NIPC 516130170.
  • TOC;
  • IT;
  • HST;

All these communications are carried out without obtaining prior consent.

CHANGES TO THIS PERSONAL DATA PROTECTION POLICY

This data protection policy will be permanently updated in order to reflect the comments received and whenever justified. When we post changes to this policy, we will simultaneously change its update date. We recommend that you periodically consult out privacy policy to stay informed about how Abílio Freire, Lda. protects your Personal Data.

Updated in 18th December 2020