Last updated: August 20, 2018

The privacy of External Providers is important to Chancexpression, Lda.

We are committed to ensuring confidentiality and privacy in the collection and processing of personal or business data from our External Providers, fulfilling our obligations under the General Data Protection Regulation, hence developing this Privacy Policy.

General Scope

Chancexpression is responsible for this Privacy Policy, as well as for the processing of any data collected through the CV, the External Provider Data Sheet—completed and signed at the beginning of the collaboration—or through any other means, provided by External Providers.

In the scope of this Privacy Policy, Chancexpression has defined:

External Provider: any entity which provides us with services.

Chancexpression reserves the right to update or modify its Privacy Policy at any time, namely, to adapt it to legislative changes.

 

Data Collection

Chancexpression collects data from its External Providers through email (or any other electronic means, such as, for example, its pages on social networks or Skype).

Chancexpression is the entity responsible for the collection and processing of such data, deciding on the categories of data collected, its processing, and the purposes for which it will be used.

All procedures, automated or not, undertaken to enable the collection, compilation, storage, modification and transfer of personal data shall be considered “personal data processing”.

Use of Data

The data collected is used in the communication process, in the management of the relationship between the company and the External Provider, and for the fulfilment of legal obligations.

Some of these personal data are transferred to authorized third parties (for example, chartered accountant, banks, etc.) solely for the previously mentioned purposes.

Access to Data

Chancexpression shall not disclose to any third parties any of its External Providers personal data without their consent.

Chancexpression shall take reasonable precautions to ensure that its internal employees or External Providers with access to personal information receive appropriate training for its correct processing, respecting this policy and the legal obligations on data protection. In the event of non-compliance, Chancexpression will apply disciplinary sanctions to its internal employees and External Providers.

External Providers may, at any time, obtain information about their personal data, and have the right to have it deleted, rectified or blocked, either in whole or in part.

Data Storage

Chancexpression stores the data of its External Providers in its dedicated server located in Portugal. This server is protected and maintained in accordance with safety regulations and in compliance with applicable privacy laws.

Data Storage Time

The data is collected only for the period required for the purpose for which they were collected.

For the purposes described in this Privacy Policy, data will be retained for the duration of the contractual and commercial relationship, or until the External Provider requests its deletion. The storage period of other specific data to be retained for compliance with legal obligations may be extended for a maximum period of up to 10 years (in accordance with article 130 of the IRC code), after which it will be deleted.

Data Security

Chancexpression has taken the technical and organizational measures necessary to adequately protect its data from unauthorized processing and access.

Chancexpression has undertaken all reasonable efforts to prevent the unauthorized or unlawful use of External Providers’ personal data, as well as the loss, destruction or damage of such data. However, we cannot guarantee its absolute security. In the event of a leakage, loss or breach of personal data, which is likely to result in a high risk to the rights and freedoms of our External Providers, we will:

Notify the supervisory authorities within 72 hours after becoming aware of the incident;

Report the situation to the owner of the affected data in a timely manner.

 

Data Processors

 Chancexpression uses the following data processors

Entity name	Purpose	Country of the entity
PTServidor® – Sampling Line Lda	Dedicated server	Portugal
CiberConceito, Lda.	Website and email hosting	Portugal
Orlanda Rodrigues	Accounting	Portugal
Weo Consulting	Invoicing system	Portugal
BPI	Homebanking	Portugal

Rights of External Providers

According to Data Protection Laws, External Providers have the right to obtain information on their personal data. External Providers have the right to know which personal data has been processed by Chancexpression. External Providers may at any time, request information about their personal data, as well as request to have it rectified, deleted or blocked, in whole or in part, should the information be incorrect, incomplete, or irrelevant for the purposes of processing.

External Providers may, at any time, change or withdraw their consent. Should they wish at any time, to be removed from the Chancexpression database, this right can be exercised by contacting us at admin@chancexpression.pt or through the following postal address:

 

CHANCEXPRESSION, LDA.

Rua das Oliveiras, Lote 66

Bairro Alto das Arroteias

1685-026 Caneças

Portugal