Privacy Policy

Personal Data Protection Policy

The right to personal data protection is a priority for LNEG. Ensuring that citizens, who entrust personal information to LNEG, are aware of the purpose of the information provided, as well as of the rights that they are entitled to within the GDPR.

Accordingly, the holders of personal data, under the legal terms, can request, access, rectification or deletion of personal data, by contacting the Data Protection Officer (DPO).

LNEG promotes mechanisms to limit the processing of personal data, to what is strictly necessary and corresponding to the offer of the various products and services, resulting from contracts or other, as well as the treatment of data from partners within the scope of partnerships in national, European or other projects.

LNEG promotes the appropriate technical and organizational measures to comply with the principles of data protection, in accordance with the provisions of the GDPR, in the context of the purposes of processing information.

In line with the provisions of the GDPR, LNEG has appointed a Person in Charge for the Protection of Personal Data, who can be contacted through the email address epd@lneg.pt or by registered letter to Estrada da Portela, Bairro do Zambujal, Apartado 7586, Alfragide 2610-999, Amadora, Portugal.

With this policy, LNEG discloses to all its employees and other interested parties the general rules of privacy and treatment of personal data that it collects and treats in a lawful, loyal and transparent manner, in strict respect and compliance with the General Regulation of Data Protection and other legislation in force in the Portuguese legal system.

Scope

This Personal Data Protection Policy applies exclusively to the processing of personal data carried out by LNEG within the scope of its activity, with the collection and processing of personal data necessary exclusively for the pursuit of its mission and duties.

Personal Data

LNEG understands “Personal data” (paragraph 1 of article 4 of the GDPR), as all information related to an identified or identifiable natural person (“data provider”), ie a natural person who can be directly or indirectly identified, by reference to an identifying element such as a name, identification number, location data, electronic identifier – or to one or more elements specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity.

Responsible for data processing

The entity responsible for the collection and processing of personal data is LNEG, which in its context, decides which data is collected, the means of processing, the period of conservation and the purposes for which they are used.

Collection of personal data

LNEG collects personal data in person, by telephone, in writing or through computer systems. The personal data collected are processed either by non-automated means or by automated means and in strict compliance with the GDPR. In no case will the collected data be used for any purpose other than that for which consent was given by the data provider.

Processing of personal data

At LNEG, the processing of personal data may arise from the law, from the pursuit of the public interest, from the pursuit of legitimate interests, or if the data provider has unequivocally given his consent. It should also occur as long as it is necessary for the execution of a contract or for pre-contractual steps at the request of the data provider or for the fulfillment of any legal obligation. Information on the processing of personal data is provided to the data provider at the time of collection.

Whenever LNEG needs to process personal data for any purpose other than that for which they were collected, it will provide the data holder with information on that purpose in advance with all necessary clarifications.

Retention period of personal data

The period during which data is stored and preserved varies according to the purpose of the respective treatment.

LNEG may retain personal data for as long as it may be required by some type of responsibility derived from a legal relationship, the performance of a contract or the application of pre-contractual measures.

Whenever there is no specific legal requirement, data will be stored and preserved only for the period necessary to fulfill the purposes that motivated its collection and treatment, after which it will be deleted.

Rights of data subjects

LNEG provides personal data holders, under legal terms, the appropriate means to exercise their respective information rights, to access, rectify, limit or delete their personal data upon a written request to the DPO.

Data security

LNEG seeks to protect users’ personal data through various technical and organizational measures in order to guarantee the security, confidentiality and integrity of personal data.

Changes to the personal data protection policy

LNEG may make changes to this Privacy Policy, which will be duly disclosed.