With the General Data Protection Regulation (“GDPR”) coming into force, the British-Portuguese Chamber of Commerce (‘BPCC’), as responsible for the treatment of personal details, reaffirms its commitment to their members’ privacy.
For this purpose, we again bring to your attention the way in which we treat your personal details and how you may exercise your legal rights in this matter.
Which details do we treat, why do we do it and on what grounds?
Personal details are any information relating to an identified or identifiable individual. They are considered to be an identifiable individual if they are able to be identified, directly or indirectly, in particular through an identifying reference, such as a name, an identification number, location details, electronic identifiers or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of an individual.
The BPCC will only save your personal details during the necessary period to carry out the purposes defined in this Policy, or during the existing period for legal rules or applicable regulations.
Therefore, we will treat your personal details in the following ways:
|Treatment purposes||Categories of personal details||Legal grounds||Conservation deadline|
|Registration and management of members||Name, address, telephone contact, email, tax number, profession, role||Contractual execution||For the duration of membership status|
|The sending of mailings containing news and information about events organised in full or in part by the BPCC||Name, address, telephone contact, email, tax number, profession, role||Legitimate interest of the BPCC in promoting events to its members and other interested parties.||Until the exercising of the right of opposition.|
To whom do we transfer your personal details?
The transfer of details to third parties is carried out in accordance with applicable legislation in matters of data protection and within the limits of the purposes and legal grounds defined in this Policy.
We communicate your personal details to service suppliers which we hire to treat your details in the above-mentioned terms, being suppliers of IT, post and digital communications services, packaging services, translation services or digital and physical archive services.
How do we protect your personal details?
The BPCC has implemented the necessary technical and organisational measures to protect the personal details of our members against destruction, loss, alteration, publishing or non-authorised access and against any other form of illicit or abusive treatment.
If you have any more questions regarding this subject, if you wish for more details about our data security, or if you suspect any breach of data, please contact us through any of the channels indicated below.
What rights do you have as the data holder?
As data holder, you may enjoy the following rights:
- Access rights: when requested, you can obtain confirmation as to whether your personal details are being processed by the BPCC or not.
- Correction rights: if you believe that your personal details are incomplete or inaccurate, you may request their correction or that they are completed.
- Deletion rights: you can request your personal details to be deleted.
- Treatment limitation rights: you can request the limitation of treatment of your personal details in the following cases: (i) if you dispute the accuracy of your personal details for a period of time which allows the BPCC to verify its accuracy; (ii) if you believe that the treatment is illegal; (iii) if you think that the BPCC no longer needs your personal details.
- Portability rights: you may request the BPCC to deliver, in a structured format, the current use and automatic reading, and personal details provided by yourself. You also have the right to ask that the BPCC transmits these details to another controller, provided that this is technically possible.
- The right to withdraw your consent: you may withdraw your consent at any time, without compromising the lawfulness of the treatment of your details up to that moment.
- Opposition rights: when the treatment of details is based on the legitimate interest of the BPCC, for marketing purposes in particular, you have the right to oppose the processing of your personal details. The BPCC will, in such cases, cease processing your personal details, under the terms legally provided for.
- The right to submit complaints to the controlling authority: if you wish to make a complaint by virtue of the processing of your personal details, this may be done with the National Data Protection Commission. For more information, please visit cnpd.pt.
How can you exercise your rights?
You may exercise your rights for free through any of the following channels:
If you have any questions or need any more information relating to the treatment of personal data or the rights which you may enjoy as data holder, contact us through the following channels: