Personal Data Protection and Privacy Policy

Galp Foundation ensures compliance with all legal obligations arising from Regulation (EU) 2016/679 of the European Parliament and Council (GDPR) as well as with all other legislation in force, connected to personal data protection matters, pertaining to any and all personal data that comes to be processed.


I. Who is the «Controller» of processing my personal data?

Galp Foundation, with headquarters on Rua Tomás da Fonseca, Torre C, 1600-209 Lisbon (hereinafter referred to as «Foundation»), is the «Controller» of personal data processing collected within the scope of this portal.


II. For what purpose my personal data will be processed, what is the legal basis and what is the retention period of my data?
Processing purpose(s) Legal Basis Retention Period(s)
Portal management, namely, enabling the registration and the access of the users. Pre-contractual endeavours or performance of a contract between users and the Foundation, whose terms are governed by the Terms and Conditions made available on the portal One year period from the last visit to the portal
Companies’ social support management, mainly, for allocation of electronic devices for support services at gas stations that are members of the Galp network Pre-contractual endeavours or implementation of a contract between users and the Foundation, whose terms are governed by the Terms and Conditions made available on the portal One year after termination of the contract, without prejudice to storage of personal data for a longer period for the purpose of complying with legal obligations
III. What personal data will be processed?

Within the context of the purposes described, the Foundation may process the following categories of users' personal data: identification data and contact data, data of the vehicle associated with the support service, payment data and/ or any source of information required by the client, requests or complaints of the user.

IV. How will my personal data be processed?

All users' personal data will be processed by the Foundation, within the context of the purposes listed above, according to private policies and standards norms of the Galp Group and in compliance with adequate technical and organizational measures to foster the respective security and confidentiality, namely with regard to unauthorised or illegal processing of your personal data and the respective loss, destruction or accidental damage.

V. Who are the recipients of my personal data?

i. i. «Processors»

The user's personal data may be provided to companies in charge of providing services for the Foundation.

These enterprises are linked to the Foundation by a written contract, may only process user's personal data for the purposes specifically listed above and they are not authorised to directly or indirectly process users' personal data for any other purpose, for their own purposes or for that of third parties.

ii. «Third parties»

The user's personal data may be communicated by the Foundation to enterprises of the Galp Group, through an intra-group data sharing agreement, which will comply with the data protection rules applicable to the related purposes.

In compliance with the legal and/ or contractual obligations, personal data may also be transmitted to third parties with whom the Foundation establishes partnerships, legal, administrative, supervisory or regulatory authorities and also to entities that legally carry out data collection actions, actions aimed at preventing and fighting fraud, and market or statistical studies.

VI. What rights do I have over my personal data?

Users of the portal have the right to: i) request and receive relevant information related to the personal data processing carried out by the Foundation; (ii) request access to their personal data, namely, obtain confirmation that their personal data is subject to processing; (iii) rectify, delete or restrict personal data processing on the part of the Foundation.

Users have the right to submit a complaint to the competent control authority, the National Data Protection Committee - CNPD, if they believe the processing of their personal data violates their rights and/ or the applicable data protection laws.

VII. Cookies

The Foundation uses cookies to collect information concerning the use of the portal. Users are advised to read and analyse the Cookie Policy for more information in this regard.

Users are advised to regularly check the Cookie Policy to verify the most up-to-date version.

VIII. Whom can I contact to receive answers to my questions?

Users may, at any time, do the following procedures, in writing:

i. Exercise the rights set forth in the Personal Data Protection Law and other applicable laws through the email ; and

ii. Contact the Galp Group data protection officer for any questions related to protection and privacy of their personal data through the email