Privacy Policy

In light of new topics related to information and its proper handling, WEPLANTINPORTUGAL, owned by Hugo Miguel Oliveira Lains (hereinafter referred to as WEPLANTINPORTUGAL), aims to act responsibly towards the community in which it operates, as well as in its relationships with Clients and Suppliers. Protecting privacy and personal data, and ensuring transparent and lawful processing, are among the essential values upon which the company is founded.

Below are the principles guiding WEPLANTINPORTUGAL in the processing of personal data:

> Personal data is processed lawfully, fairly, and transparently;
> Collection occurs only for specific, explicit, and legitimate purposes, in accordance with applicable legislation;
> Data collected is limited to what is strictly necessary and retained only for as long as needed for the purposes for which it is processed;
> Access to personal data is restricted to employees and collaborators whose duties require it; Personal data is processed confidentially.

1. PERSONAL DATA

2. DATA CONTROLLER

3. CONDITIONS FOR PROCESSING

4. DATA RETENTION PERIOD

5. RIGHTS OF DATA SUBJECTS

6. SECURITY MEASURES

7. ADDITIONAL INFORMATION

In accordance with data protection laws, personal data refers to any information relating to an identified or identifiable natural person (the data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

The data controller responsible for processing personal data is WEPLANTINPORTUGAL, with which the data subjects have a relationship.

Data processing will only occur when one of the conditions established by data protection legislation is met, namely:

> When the data subject has given consent for the processing of their personal data; > When processing is necessary for the performance of a contract to which the data subject is party, or for pre-contractual steps at the request of the data subject; > When processing is necessary to comply with a legal obligation to which WEPLANTINPORTUGAL is subject; > When processing is necessary to safeguard WEPLANTINPORTUGAL’s legitimate interests.

In accordance with the above, personal data processed by WEPLANTINPORTUGAL is retained only for the time strictly necessary to achieve the purposes for which it was collected. Retention periods are established based on defined and appropriate criteria, respecting legal and regulatory obligations.

WEPLANTINPORTUGAL ensures that data subjects may exercise their rights under data protection laws as follows:

> Right of access – to confirm whether their data is processed and obtain related information;
> Right to rectification – to request correction or completion of personal data;
> Right to erasure – to request deletion of personal data under certain conditions;
> Right to restriction of processing – to limit processing in specific circumstances;
> Right to data portability – to receive personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller where technically feasible;
> Right to object – to object to processing based on legitimate interests or for purposes different from those initially collected; > Right not to be subject to automated decisions – to request human intervention in cases of automated decision-making;
> Right to withdraw consent – to withdraw consent for data processing at any time;
> Right to lodge a complaint – with the National Data Protection Commission (CNPD) regarding any issue related to personal data processing.

To exercise these rights or request clarification regarding WEPLANTINPORTUGAL’s privacy and data protection practices, please contact us by letter or email using the contact details provided in the “Contacts” section of our website: https://weplaninportugal.pt.

WEPLANTINPORTUGAL applies technical and organizational security measures to protect personal data from breaches (“personal data breach”: a security breach leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed) and any other unlawful processing.

This commitment to data protection also means that, whenever personal data is shared with other entities, those entities must adopt equivalent technical and organizational measures ensuring the same level of protection.

For detailed information about privacy and data processing, please contact: privacidade@weplantinportugal.pt.

WEPLANTINPORTUGAL’s privacy policy may be updated at any time. Any changes will be duly announced and published on the company’s website.