Under the General Data Protection Regulation, you may request access, correction, deletion, restriction, objection or portability of your personal data.
To exercise any GDPR right, please send your request to:
1. Right of access
You may request confirmation as to whether we process your personal data and ask for information about the data processed, purposes, categories, recipients and retention period.
2. Right to rectification
You may request the correction of incorrect, incomplete or outdated personal data.
3. Right to erasure
You may request deletion of your personal data when it is no longer necessary for the purpose for which it was collected, when you withdraw consent or when another applicable legal basis applies.
4. Right to restriction of processing
You may request that processing of your data be restricted in certain situations, for example when you contest the accuracy of the data or object to processing.
5. Right to object
You may object to the processing of your personal data when processing is based on legitimate interest or when related to promotional communications.
6. Right to data portability
You may request that the personal data you provided to us be delivered in a structured, commonly used and machine-readable format, where legally applicable.
7. Right to withdraw consent
When processing is based on your consent, you may withdraw it at any time. Withdrawal of consent does not affect processing carried out before withdrawal.
8. Automated decisions
We do not use your data for exclusively automated decisions that produce legal effects or similarly significant impacts.
9. Response period
Requests will be reviewed and answered in accordance with applicable law. In complex cases, we may request additional information to confirm the identity of the data subject.
10. Complaint to the competent authority
If you believe your personal data is not being processed correctly, you may lodge a complaint with the Portuguese Data Protection Authority — CNPD.