Galp Foundation ensures compliance with all legal obligations arising from Regulation (EU) 2016/679 of the European Parliament and Council (GDPR) as well as with all other legislation in force, connected to personal data protection matters, pertaining to any and all personal data that comes to be processed.
I. Who is the «Controller» of processing my personal data?
Galp Foundation, with headquarters on Rua Tomás da Fonseca, Torre C, 1600-209 Lisbon (hereinafter referred to as «Foundation»), is the «Controller» of personal data processing collected within the scope of this portal.
II. For what purpose my personal data will be processed, what is the legal basis and what is the retention period of my data?
III. What personal data will be processed?
Within the context of the purposes described, the Foundation may process the following categories of users' personal data: identification data and contact data, data of the vehicle associated with the support service, payment data and/ or any source of information required by the client, requests or complaints of the user.
IV. How will my personal data be processed?
All users' personal data will be processed by the Foundation, within the context of the purposes listed above, according to private policies and standards norms of the Galp Group and in compliance with adequate technical and organizational measures to foster the respective security and confidentiality, namely with regard to unauthorised or illegal processing of your personal data and the respective loss, destruction or accidental damage.
V. Who are the recipients of my personal data?
i. i. «Processors»
The user's personal data may be provided to companies in charge of providing services for the Foundation.
These enterprises are linked to the Foundation by a written contract, may only process user's personal data for the purposes specifically listed above and they are not authorised to directly or indirectly process users' personal data for any other purpose, for their own purposes or for that of third parties.
ii. «Third parties»
The user's personal data may be communicated by the Foundation to enterprises of the Galp Group, through an intra-group data sharing agreement, which will comply with the data protection rules applicable to the related purposes.
In compliance with the legal and/ or contractual obligations, personal data may also be transmitted to third parties with whom the Foundation establishes partnerships, legal, administrative, supervisory or regulatory authorities and also to entities that legally carry out data collection actions, actions aimed at preventing and fighting fraud, and market or statistical studies.
VI. What rights do I have over my personal data?
Users of the portal have the right to: i) request and receive relevant information related to the personal data processing carried out by the Foundation; (ii) request access to their personal data, namely, obtain confirmation that their personal data is subject to processing; (iii) rectify, delete or restrict personal data processing on the part of the Foundation.
Users have the right to submit a complaint to the competent control authority, the National Data Protection Committee - CNPD, if they believe the processing of their personal data violates their rights and/ or the applicable data protection laws.
VIII. Whom can I contact to receive answers to my questions?
Users may, at any time, do the following procedures, in writing:
i. Exercise the rights set forth in the Personal Data Protection Law and other applicable laws through the email email@example.com ; and
ii. Contact the Galp Group data protection officer for any questions related to protection and privacy of their personal data through the email firstname.lastname@example.org.