PRIVACY POLICY
MALEO
Within the scope of provision of the website hosted at www.maleo.com, it is made available detailed information on how Goldenhub Lisboa, Lda., a commercial company with headquartered at Av. da Liberdade, n.º 245, 4.º A, 1250-143, Lisbon, registered at the Commercial Registry Office of Vila Real de Santo António under the single registration and corporate number 513585184 (hereinafter “MALEO”) proceeds with the processing of your personal data.
The presente Privacy Policy aims to help Users/Costumers to understand the personal data that Goldenhub Lisboa, Lda. collect, how and for what reasons we use it, to whom we disclose it and how we protect their privacy when providing our products and services.
On the other hand, we want our Users/Customers to know the general rules of privacy and the terms of the data processing from the data that we collect, in strict respect and compliance with the applicable legislation in this area, namely Regulation (EU) 2016/679 of the European Parliament and the Council, of 27 April 2016 (“General Data Protection Regulation”)
Data Controller
The Data Controller, referred to in this policy as “we”, “MALEO” or “Goldenhub Lisboa, Lda.” means the following entity:
GOLDENHUB LISBOA, LDA.
Avenida da Liberdade, n.º 245, 4.º A, 1250-143 Lisboa
+351 215 844 635
dataprotection@maleo.com
Personal Data that we collect
MALEO collects the following personal data from Users
- Name
- Telephone (optional)
Considering that the Website has a field for sending messages to MALEO, personal data may be sent within the scope of said message. In the mentioned field, data belonging to special categories must not be entered (i.e. racial or ethnic origin, political opinions, religious or philosophical convictions, or trade union membership, genetic data, biometric data to uniquely identify a person, data relating to health or data relating to a person's sex life or sexual orientation).
Purposes/objectives for collection Personal Data
MALEO collects your personal data for the following purposes/objectives:
a) Provision of information;
b) Schedule visits;
c) Marketing;
d) Announcing promotions and campaingns;
e) Advertising new products;
f) Send relevant news regarding MALEO;
g) Send information about Maleo initiatives
The personal data referred are processed on for the porpuses of pre-contractual due diligence and drafting of the contract, pursuant to article 6, paragraph 1, point b) of the General Data Protection Regulation.
General principles applicable to the processing of Personal Data
MALEO undertakes to ensure that the personal data it processes are:
- Object of a lawful, fair and transparent treatment in relation to data subjects;
- Collected for specific, explicit and legitimate purposes, not being further processed in a way that is incompatible with those purposes for which they are processed;
- Accurate and updated whenever necessary;
- Kept in a way that allows the identification of data subjects only for the period necessary for the purposes for which they are processed;
- Processed in a way that guarantees their safety, including protection against unauthorized or illegal treatment and against their loss, destruction or unforeseen damage, with appropriate technical or organizational measures being adopted
Personal data storage period
The personal data collected are processed in strict compliance with the applicable legislation, being stored in specific databases created for this purpose.
The period during which the personal data collected by MALEO are stored and preserved varies according to the purpose for which the information is processed, being kept only for the necessary time to fulfill the purposes for which they are processed.
There are legal requirements that oblige you to keep the data for a minimum period, so whenever there is no specific legal obligation, the data will be stored and kept only for the minimum period necessary for the purposes that motivated their collection or subsequent processing, which in its term will be eliminated.
Rights of the data subjects
Under the General Data Protection Regulation, the data subject has the following rights in relation to the processing of their personal data:
-
RIGHT OF INFORMATION:
Right to receive information on the terms of the processing of their personal data. -
RIGHT OF ACESS:
Right to obtain confirmation as to whether or not the personal data are being processed and, if applicable, right to access their personal data, as well as information regarding the purposes of treatment, categories of personal data in question, recipients of the data, expected retention/storage period, among others. -
RIGHT OF RECTIFICATION:
Right to obtain, without undue delay, the rectification or updating of inaccurate personal data. -
RIGHT TO ERASE (“RIGHT TO BE FORGOTTEN”):
Right to obtain the erasure of their personal data, without undue delay, in certain circumstances determined by law. -
RIGHT TO LIMITATION OF TREATMENT:
Right to obtain treatment limitation, if one of the conditions set out in the General Data Protection Regulation applies. -
RIGHT TO DATA PORTABILITY:
Right to receive personal data concerning him/her and which you have provided in a structured, commonly used and machine-readable format. -
RIGHT OF OPPOSITION:
Right to object, at any time, for reasons related to their particular situation, to the processing of personal data concerning him/her, in particular when their data is processed for the purposes of direct marketing. -
RIGHT NOT TO BE SUBJECT TO AUTOMATED INDIVIDUAL DECISIONS:
Right not to be subject to any decision taken solely on the basis of the automated processing of their personal data, including profiling, that has an effect on your legal sphere or that significantly affects him/her in a similar way. -
RIGHT TO SUBMIT A COMPLAINT TO THE CONTROL AUTHORITY:
Right to file a complaint with the competent supervisory authority under the law (National Data Protection Commission) if they consider that their data is not being subject to legitimate treatment by MALEO, under the terms of applicable legislation and this Policy.
Under the law, the data subjet is also guaranteed the right to withdraw your consent for the processing of data whose consent constitutes the basis for the legitimacy of the respective treatment. For this purpose, the data subject have the right to withdraw his/her consent at any time, which does not, however, invalidate the treatment carried out until that date based on the consent previously given.
These rights can be exercised, at any time, by the User, through the following email: dataprotection@maleo.com.
MALEO will reply in writing (including by electronic means) to the User's request within a maximum period of one month from the receipt of the request, except in cases of special complexity, in which this period can be extended up to two months.
If the requests made by the User are manifestly unjustified or excessive, namely due to their repetitive nature, MALEO reserves the right to charge administrative costs or refuse to comply with the request.
Transfer of personal data
Within the scope of the processing of User Data, MALEO uses or may use third parties, subcontracted by it, to, on its behalf, and in accordance with the instructions given by it, proceed with the processing of User Data.
MALEO ensures that such subcontracting entities offer sufficient guarantees for the execution of appropriate technical and organizational measures so that the processing meets the requirements of the applicable law and ensures the security and protection of the rights of data subjects, under the terms of the subcontracting agreement entered into with the said subcontracting entities.
MALEO may also transmit its Customers' personal data to third parties, not qualified as subcontracting entities, when it deems such data communications as necessary or appropriate (i) in the light of applicable law, (ii) in compliance with legal obligations/court orders , or (iii) to respond to requests from public or governmental authorities. In this sense, MALEO may transmit personal data to public authorities and regulators.
The table below contemplate the recipients of personal data transmissionss:
Recipient categories
Consultants and Lawyers
Purposes for processing personal data
Service provision of consultancy and legal services
Recipient categories
Service providers and IT infrastructure
Purposes for processing personal data
Service provision (e.g., website hosting)
Tools used
Facebook:
On the Website there is interactivity with Facebook, through a connection to the server of this social network, this will allow to identify the website that the user is visiting and possibly store other data, such as the IP address. If the User has his Facebook session started, the data will be associated with their account. To prevent this from happening, the User must log out of Facebook before visiting the page.
Information on the data processing carried out by this social network is available at: https://www.facebook.com/about/privacy/.
Linkedin:
On the Website there is interactivity with Linkedin, through a connection to the server of this social network, this will allow to identify the website that the user is visiting and possibly store other data, such as the IP address. If the User has his Linkedin session started, the data will be associated with his account. To prevent this from happening, the User must log out of Linkedin before visiting the page.
Information on the data processing carried out by this social network is available at: https://www.linkedin.com/legal/privacy-policy .
Google Analytics:
This website uses the Google Analytics tool, a network analysis service provided by Google. Cookies will be stored that provide information on the use and navigability of the Site, including the User's IP address, which are transmitted to Google's servers. However, the data collected is not related to any other data held by Google.
The User can disable the tool by downloading and installing a browser add-on available from Google: https://tools.google.com/dlpage/gaoptout?hl=en.
Youtube:
On the Website there is interactivity with Youtube, through a connection to the server of this social network, this will allow to identify the website that the user is visiting and possibly store other data, such as the IP address. If the User has his YouTube session started, the data will be associated with his account. To prevent this from happening, the User must log out of Youtube before visiting the page.Information on the data processing carried out by this social network is available at: https://www.youtube.com/intl/pt-BR/yt/about/policies/#community-guidelines.
Contact us
For more information or questions regarding the privacy of your personal data, you should send an email to: dataprotection@maleo.com.