Federation of Báquica Confraternities of Portugal

Data Protection and Privacy Policy

INTRODUCTION

The Federation of Báquicas Confraternities of Portugal is a legal person under private law, which is constituted as a non-profit association, with its head office at Rua da Restauração, 318 – 3º, 4050-501- Porto.

The privacy policy described below gives you an overview of how the Federation of Báquica Confraternities of Portugal treats your personal data and rights in this matter, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and the Council – General Data Protection Regulation (“GDPR”) and other applicable legislation on privacy and data protection. The specific personal data that will be processed and how they will be used depend largely on the services you request and agree with you.

This privacy policy applies to the personal data of our Users of our Sites, Customers, Suppliers and Candidates, where they are natural persons.

Each time you use the Site is subject to the application of the Privacy and Cookie Policy in force at any time, so we suggest that you carefully read these Policies to verify that you agree to their terms.

From time to time, we may change this Privacy Policy. If you want to keep up to date, please visit this page as all changes will be posted here.

For the purposes of applicable data protection legislation, the company responsible for the processing of your personal data is the Federation of Báquicas Confraternities of Portugal.

GLOSSARY

Delete – we will permanently delete your personal data as soon as the retention period ends or when we receive a valid request from you to do so and provided that there are no legitimate interests justifying the retention of your personal data.

Candidates – includes candidates for all functions announced or promoted by the Federation of Báquicas Confraternities of Portugal including permanent, part-time and temporary functions and functions in an independent work regime to the Federation of Báquicas Confraternities of Portugal; as well as people who submitted a spontaneous curriculum to the Federation of Báquica Confraternities of Portugal not related to a specific job offer. Individual contractors, self-employed and employees of suppliers or other third parties applying for office in the Federation of Báquicas Confraternities of Portugal will be treated as candidates for the purposes of this Privacy Policy.

Personal data – any information relating to a natural person that can directly identify it or that makes it identifiable, directly or indirectly, in particular by reference to an identifier.

Customers – customers and others to whom the Federation of Báquicas Confraternities of Portugal provides services or supplies goods in the course of its activity.

Suppliers – refers to partners, consultants, traders (including individual traders) and self-employed persons or any other entity that provides goods or services to Blue Lemon.

Staff – includes dependent workers, as well as interns directly involved in the activity of the Federation of Báquicas Confraternities of Portugal.

General Data Protection Regulation (GDPR) – a European Union legal instrument aimed at harmonising European data protection laws.

TYPE OF PERSONAL INFORMATION WE COLLECT

The Federation of Báquicas Confraternities of Portugal collects various types of personal data according to the different purposes, as explained below. Please note that we do not knowingly collect personal information from minors under the age of 18. If we detect that we involuntarily collect personal information from minors under the age of 18, we will take the necessary steps to delete the information as soon as possible, unless we are required by applicable law to keep it.

• CUSTOMER DATA: We only collect the data necessary for the preparation, fulfillment and execution of any budget or service requested by the Client to the Federation of Báquicas Confraternities of Portugal as well as to respond to any subsequent complaints related to it. Normally, we just need to have your contact details (such as name, phone number, email address, address and zip code) to allow us to ensure that our relationship unfolds without problems.

• SUPPLIER DATA: We only collect the data necessary for the preparation, performance and execution of any contract concluded between the Supplier and the Federation of Báquicas Confraternities of Portugal, as well as to respond to and manage any complaints related thereto. We collect the data of contact persons, including those of your company, such as names, phone numbers and email addresses. We also collect bank details.

• SITE USERS: We only collect the data necessary to ensure a good experience in the use of the Site and to allow you to enjoy all the potential and faculties provided by it, as well as to help us manage the services we provide. This includes information such as how you use our website, how often you access it, your browser type, your IP address, the location from which you consult our website, the language you choose to view it and the times when our site is most popular, as well as other information best described in our cookie policy below.

• CANDIDATE DATA: Depending on the relevant circumstances and applicable local laws and requirements, we may collect all or part of the information listed below: such as name, and contact details (telephone and email), Immigration status (in case you require a work permit), a photograph of yourself; situation and professional activity, such as data on education; employment history; current remuneration, pensions and benefit-related provisions, if it is necessary for the vacancy to which you wish to apply; additional information you choose to share with us, including in your cover letter, curriculum vitae or interviews; additional information that our Customers may share about you or that we discover from other third-party sources (e.g., references);

Please note that the above list of categories of personal data that we may collect is not exhaustive.

OBLIGATION TO PROVIDE DATA

In the context of our business or employment relationship, you will need to provide the personal data necessary to establish and create that relationship and to comply with the pre-contractual and contractual obligations and steps arising and also those that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude or perform the contract or we will not be able to keep the contract and we will have to resolve it.

If you do not provide us with the necessary information and documentation, we will not be able to establish or continue the business or employment relationship you want, or to follow up on requests you address to us.

HOW WE COLLECT PERSONAL DATA

We may collect personal data in a number of ways

-Personal data we receive directly from you if you contact us proactively, usually by phone or e-mail; and/or if we contact you by phone or by email or through commercial development activities more generally.

-Enter your data on the Website of the Federation of Báquicas Confraternities of Portugal through the form as part of the registration process;

-Send your resume by email, or through social networks or leave a copy of the resume on paper;

-Participate in a contest through a channel of a social network, such as Facebook, Instagram, or other;

-Registration in our newsletter;

– Personal data we receive from other sources, usually through due diligence or other market information. We also receive personal data from other sources, for example if you “like” us on our Facebook page or “follow us” on Twitter and/or LikedIn and/or Instagram and/or Pinterest we will receive personal information from these sites.

– We collect your data automatically through cookies, in accordance with the cookie settings of your browser.

LEGAL GROUNDS

1) For the supply of products and services: the Federation of Báquicas Confraternities of Portugal may use your personal data when necessary to execute the contract concluded between you and the Federation of The Báquicas Confraternities of Portugal, as well as to identify it. We may also use your Personal Data to prevent and investigate possible misuse of your Personal Data.

2) Marketing Activities: We may periodically send you information that we consider to be of interest to you. In particular, we may use your data for the purposes listed below, where appropriate, namely: allow us to develop commercial or marketing actions, in particular to promote actions to disseminate new features or new products and services; send you data on reports, promotions, offers and contact establishment; provide you with information about certain discounts and offers to which you are entitled due to your relationship with the Federation of Báquicas Confraternities of Portugal; allow us to send newsletters, which may contain information regarding promotional campaigns, discounts, promotions and offers, invitations, reminders regarding your reservations, actions to disseminate new features, new products or services and to send information about participation in contests and sweepstakes, in accordance with the thematic preferences you have indicated to us, by email; provide you with information about personalized and exclusive offers of products and services identified based on your personal preferences and behaviors, as well as from the use of products, services and navigation on the websites.

3) Other purposes: to store (and update when necessary) your information in our database, so that we can contact you regarding the contracts you wish to enter into/entered into with us; to offer you services or to obtain support and services from you; to comply with certain legal obligations; to help us direct appropriate marketing campaigns, and the Federation of Báquica Confraternities of Portugal can adopt automated decisions, including profiling; in rare circumstances, to assist us in the declaration, exercise or defense of a right and to defend the vital interests of the data subject, we may still use your personal data if we deem it necessary to do so for the defense of our legitimate interests.

4) Development of products and services: the Federation of Báquica Confraternities of Portugal may use your personal data for the development of its products and services. However, we will predominantly use aggregated data and statistical information for this purpose. The Federation of Báquicas Confraternities of Portugal keeps track of the pages that our customers visit within the website to determine which services/products are most requested. In this case, information is collected regarding the computer or device (including mobile devices) you use to access it, the website through which you accessed ours, the type and language of your browser, operating system, cookies, the country from which you are accessing, reference and exit pages, URL, platform type, number of clicks made, domain names, landing pages, pages visited and the order in which you visited them, the time spent on a particular page, the date and time you accessed our website, access errors and other similar information that your browser sends us.

5) Communication: The Federation of Báquicas Of Portugal May use your personal data to communicate with you, in particular, to send you news related to our products or services, or to assist you in aspects related to customer support, in particular to respond to and process your requests through customer service channels, as well as monitoring the quality of our service. In this case your full name, email address and telephone number are collected.

6) Recruitment Activities: to fill vacancies, we can internally develop recruitment activities. We list below several ways in which we may use and process your personal data for this purpose:

6.1) Collect your data through you or other sources such as LinkedIn or Facebook, among other channels;

6.2) Store your data (and update it when necessary) in our database, so that we can contact you regarding recruitment;

6.3) Assess data about you in relation to vacancies that we think are appropriate for you;

6.4) Allow you to submit your resume, apply online for job offers or subscribe to alerts on job offers that we think may be of interest to you;

6.5) Fulfill our obligations under any contracts entered into between us;

6.6) Fulfill our obligations arising from any contracts concluded between the Federation of Báquicas Confraternities of Portugal and third parties relating to their recruitment;

6.7) Streamline our processes of treatment of payment of remuneration and billing;

6.8) To verify the data you have provided, using resources from third parties (such as psychometric assessments or competencies tests) or to request information (such as references, to the extent that this is appropriate in accordance with applicable law and has provided us with the details of the reference contacts and obtained prior authorisation of them for the transmission of your personal data, and authorize us to contact them);

6.9) Comply with our legal obligations, including in particular regarding the investigation of crime or the collection of taxes or duties.

We use and process your personal data for the management and execution of contracts or other steps requested by the data subject (Art. 6.1(b) RGDP); in the context of a legitimate interest (Art. 6(1)(f) RGDP); on the basis of your consent (Art. 6(1)(a) RGDP) and a legal imperative or for the benefit of the public interest (Art. 6(1)c) and e) RGDP).

ENTITIES WITH WHICH WE SHARE YOUR PERSONAL DATA

Where appropriate and in accordance with local laws and requirements, we may share your personal data in various ways and for various reasons with the following categories of persons:

-In the course of an investigation, complaint or procedure, the Tax, Audit Authorities, the Administration, public bodies, the Court and the Security Forces, which are responsible for the matter;

-Third party service providers performing functions on our behalf (including external consultants, business partners and professional advisors such as lawyers, auditors and accountants, recruitment companies, technical support functions and computer consultants who perform testing and development work on our company’s technology systems);

-Third parties providing computer services and outsourced document storage, where we have an appropriate processing contract (or similar protections);

-In the event of acquisition or disposal of business or assets, we may share your personal data with potential acquirers of such business or assets;

-In the case of payments, credit entities and other payment service providers, as well as providers of payment services related to payment services to whom the data are transmitted to carry out the transaction, and which may be obliged by the legislation of the State in which they operate, or by agreements concluded by it, to facilitate information on transactions to the authorities or official bodies of other countries, located both within and outside the European Union, in the fight against terrorist financing, serious forms of organised crime and the prevention of money laundering.

SAFEGUARDING YOUR PERSONAL DATA

We are committed to taking all reasonable and appropriate measures to protect personal information we hold from misuse, accidental or unlawful changes, loss and disclosure or unauthorized access. For this purpose the Federation of Báquicas Confraternities of Portugal uses security systems, rules and other procedures in order to ensure the protection of your personal data, as well as to prevent unauthorized access to data, improper use, disclosure, loss or destruction.

If you suspect misuse, loss or unauthorized access to your personal information, please let us know immediately.

RETENTION OF PERSONAL DATA

We only store your personal data for as long as necessary to achieve the purpose for which we collect it, to respond to your needs, to requests you address us, or to comply with our contractual and legal obligations, using the above criteria:

a) When you purchase products and services, we will retain your personal data for the duration of our business relationship, including any claims that may arise, as well as and for the period of ten 10 years after the termination of such relationship, without prejudice to the compliance with legal obligations of the controller;

b) When you contact us to ask questions, request information and clarification, we will retain your personal data for the period necessary to resolve your question/provide you with the information and/or clarifications requested;

c) When you create a customer account, that is, when you register on our website, we will retain your data until you ask us to delete it or after a five-year period of inactivity;

(d) for data collected in the recruitment process for a maximum period of five years after the closure of the recruitment process;

e) Regarding the use of cookies, we keep them as long as necessary to achieve the purposes inherent thereto, as detailed in the Cookie Policy;

(f) the time provided for in the applicable legislation; or

(g) until the specific purpose applicable to certain data ceases to exist.

h) If there is pending judicial or counterordenational proceedings, the data will be kept for the duration of the proceedings and up to six months after the final judgment of a decision that may be given.

After the above retention periods, personal data will be deleted and/or deleted in an absolutely secure manner.

HOW TO ACCESS, CHANGE OR REMOVE THE PERSONAL DATA YOU HAVE PROVIDED TO US

• Right to objects: this right allows you to owe the processing of our part of your personal data for reasons related to your particular situation when your personal data is processed for one of the following reasons: (i) our legitimate interests; (ii) to enable us to perform a task in the public interest or exercise official authority; (iii) to send you direct marketing materials, including profiling; and (iv) scientific, historical, research or statistical purposes.

If you exercise the right of opposition, we will terminate the processing of the data to which you have objected, unless: we can demonstrate that we have mandatory legitimate grounds for processing that overlap your interests or we are processing your data for the declaration, exercise or defense of a right.

• Right to withdraw consent: If we have obtained your consent to process your personal data you may withdraw this consent at any time and we will stop performing the specific activity you have previously consented to, unless we consider that there is an alternative reason to justify the continued processing of our data for this purpose, in which case we will inform you of this condition.

• Requests for Access of the Data Subject: You may ask us, at any time, to confirm the information we have about you, as well as request additional information about the purposes of the processing, the period for which we keep your data, the existence of automated decisions, the recipients to whom the data are disclosed, among other information provided for in Article 15 of the GDPR. We may ask you to verify your identity and more information about your request. If we grant you access to the information we hold about you, we will not charge you for that access unless your request is “manifestly unfounded or excessive.” If you ask us for additional copies of this information, we may charge you a reasonable administrative cost where legally permitted. Where we are legally permitted, we may refuse your request. If we refuse your request, you will always be informed of the reasons for doing so.

• Right to forget/erase: In certain circumstances, you have the right to ask us to delete your personal data. Normally, the exercise of this right must meet one of the following criteria: the data are no longer necessary for the purpose for which we originally collected and/or processed it; when you have withdrawn your consent to process your data and there is no other valid reason for us to continue processing it; if it opposes the processing and there are no prevailing legitimate interests justifying it: the data have been unlawfully processed (i.e. in a way that does not comply with the GDPR); or it is necessary that the data be erased in order to comply with our legal obligations as controller.

This right, however, does not apply, and therefore the Federation of Báquica Confraternities of Portugal may continue to process your data legitimately when necessary:

-to exercise the right of freedom of expression and information;

-to comply with legal obligations or to carry out a task in the public interest or to exercise an official authority;

-for public health reasons in the public interest;

-for file, research or statistical purposes;

-for the exercise or defence of a right.

By complying with a valid request for erasure of data, we will take all reasonable practical steps to erase the data.

• Right to limitation of processing: In certain circumstances, you have the right to restrict our processing of your personal data. This means that we can only continue to store your data and we will not be able to carry out further processing activities with them until: (i) one of the circumstances listed below is resolved;(ii) we have obtained your consent; or (iii) additional treatment is required for the declaration, exercise or defence of a right, the protection of the rights of another person or reasons of significant public interest of the EU or a Member State.

The circumstances in which you are entitled to request that the restriction of the processing of your personal data are:

-in the event that you dispute the accuracy of the personal data we process about you. In this case, the processing of our part of your personal data will be restricted for the period during which the accuracy of the data is verified;

-in case you objects to the processing of your personal data for our legitimate interests. In this situation, you may request that the data be restricted while we verify our grounds for the processing of your personal data;

-if our processing of your data is unlawful, but you prefer to restrict our processing of your data rather than the payment of your data;

-if we no longer need to process your personal data, but we need the data for the declaration, exercise or defense of a right.

If we have shared your personal data with third parties, they will be notified of the restricted processing, unless this is impossible or involves a disproportionate effort. We will, of course, notify you before lifting any restrictions on the processing of your personal data.

• Right of rectification: You have the right to ask us to rectify any inaccurate or incomplete personal data we hold about you. If we have shared this personal data with third parties, they will be notified of the rectification, unless this is impossible or involves a disproportionate effort. Where appropriate, we will also disclose to you that third parties disclose inaccurate or incomplete personal data. Where we consider that it is reasonable not to comply with your request, we will explain the reasons for the decision. It is important that the personal information we hold about you is accurate and current. Please let us know if there are changes to your personal information during the period in which we keep your data.

• Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority, which in Portugal is the National Data Protection Commission. You can contact her in the following ways: Phone (+351) 213928400 / Privacy Line: +351 21 393 00 39 E-mail: [email protected]/ Address: Rua de São Bento, nº 148-3º, 1200-821 Lisboa / Fax: +351 21 397 68 32

If you wish to exercise any of these rights or withdraw your consent to the processing of your personal data (if consent is our legal basis for processing your personal data), please contact us. Please note that we may keep a record of your communications to help us resolve any issues raised by you:

CONTACT

If you wish to exercise any of the above rights, suspect misuse, loss or unauthorized access, or have any comments or suggestions to this Privacy Policy, you can contact us at the following address: [email protected].

GUARANTEES

The user warrants that the personal data communicated to the Federation of Báquicas Confraternities of Portugal are right and accurate and undertakes to notify any change or modification thereof and assumes exclusive responsibility for the losses and damages caused by the erroneous, inaccurate or incomplete communication of the data. The user is expressly advised that when revealing personal data in public media of the Federation of Báquicas Confraternities of Portugal on channels such as Facebook, LinkedIn and Instagram, this information may be seen and used by third parties. The Federation of Báquica Confraternities of Portugal does not read any personal communication published on its clients’ own websites.

COOKIE POLICY

What is a cookie?

A “cookie” is a file of information that is stored on your computer’s hard drive and that records your browsing on a website so that when you visit that site again, you can present custom options based on the information stored about your last visit. We may also use cookies on our website to analyze traffic and for advertising and marketing purposes, which do not harm your system. If you want to check or change the type of cookies you accept, you can do so in your browser settings.

Cookies collected and used:

Website language, User age, browser “pixel- “

Referring to google

Cookies used for analytics.

How do we use cookies?

We use cookies to do two things to track your use of our website. This allows us to understand how you use the site and track any patterns that arise individually or from larger groups, which will help us develop and improve our website and services in response to what our visitors want and need; and

Assent

Pursuant to Law No. 41/2004 of 18 August, the storage of information and the possibility of access to information stored on a user’s terminal equipment (including through cookies) are only carried out by the Federation of Báquicas Confraternities of Portugal if the user has given his/her prior and express consent to the installation of cookies on his equipment, for which we ask you, prior to the use of the websites, to accept this Privacy and Cookies Policy.

How to avoid using Cookies on websites

The Client has the right to withdraw at any time the consent to the use of cookies by the Federation of Báquicas Confraternities of Portugal, eliminating cookies stored on his computer through the configuration options of his Internet browser.

Finally, if you want to have greater control over the installation of cookies, you can install programs or add-ons to your browser, known as “do not track” tools, which will allow you to choose the cookies you want to allow.

In case of blocking or not authorization for the use of cookies, no cookie will be stored on your equipment, but the proper functioning of our websites is not guaranteed, so the customer cannot take the maximum benefit from the content sofa available on the websites, and in each new access to the website, you will always be asked for authorization for the use of cookies.

DECLARE, EXERCISE OR DEFEND RIGHTS

We may sometimes need to process personal data and, where appropriate and in accordance with local laws and requirements, sensitive personal data in relation to the exercise or defense of rights. Article 9(2)(f) of the GDPR permits such processing where it “is necessary for the declaration, exercise or defence of a right in judicial proceedings or where the courts act in the exercise of their judicial function”. This may arise, for example, where we need to obtain legal advice in relation to legal proceedings or where we are required by law to retain or disclose certain information as part of legal proceedings.

CHANGES TO THE DOCUMENT

The Federation of Báquicas Confraternities of Portugal may occasionally change this statement and its Privacy Policy to be able to reflect the company’s image and customer feedback. We encourage our customers to periodically review our Privacy Policy to be up to date on how the Federation of Báquicas Confraternities of Portugal protects your information, without prejudice to informing you whenever relevant changes occur in our Privacy Policy.