Basílio Malhas, Lda. respects the privacy of its partners, therefore, the personal data that you, as a data subject, provide to us is protected in accordance with data protection legislation, namely the General Data Protection Regulation (EU 2016/679) and national legislation No. 58/2019.

The website, which can be accessed at https://www.basiliomalhas.pt/, was developed and is operated by or on behalf of Basílio Malhas, Lda.

We strive to ensure that our website is secure and user-friendly for its users.
If you require any further clarification, please refer to our contact details, which can be found at the end of this policy.

Data controller
Basílio Malhas, Lda. is responsible for processing the personal data of its customers, prospective customers, employees and job applicants.

What is Personal Data?
For the purposes of this Policy, we follow the definition adopted by the General Data Protection Regulation (GDPR) EU 2016/679, namely, any information relating to an identified or identifiable natural person, where an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity.
We are committed to ensuring the confidentiality and integrity of your personal data.
This Privacy Policy sets out how Basílio Malhas, Lda. uses the personal data of its customers, employees and job applicants:

Data controller

What is Personal Data?
For the purposes of this Policy, we follow the definition adopted by the General Data Protection Regulation (GDPR), namely, any information relating to an identified or identifiable natural person, where an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity.

How we collect your personal data
As part of our business activities, we collect and process your personal data via our website, newsletter or in writing/by email in the context of a contractual or pre-contractual relationship.
The data we collect is limited to what is strictly necessary for the provision of our services. We collect and process your personal data with your consent only where such consent constitutes a freely given, specific, informed and explicit expression of will.
You may withdraw this consent at any time, at your sole discretion, in a straightforward manner. If you wish to do so, please send an email requesting that your consent be withdrawn to
email address: geral@basiliomalhas.pt
What personal data do we collect?
The categories of data we collect, for the purpose of providing our services, are as follows: Identification data (data from the national identity card or identity document) Contact details (address, telephone number, email address); Professional details (role within the organisation, address of the head office or company); Academic and professional details (qualifications, certifications, CV); Billing and expenditure data (tax identification number, credit card details); Image and sound recording data (photographs and video).
The personal data we collect is processed electronically and stored in databases, in strict compliance with current data protection legislation and information security standards.
We will process personal data in accordance with a specific and legitimate purpose or purposes, determined at the time of collection, and such data will not be further processed in a manner incompatible with those purposes, except for the purposes of archiving in the public interest or for research; in such cases, under the terms of the GDPR, such incompatibility does not apply.

For what purposes do we process personal data?
We will process your personal data for the following purposes:
So that we can verify your identity as our customer; to provide the services or information you have requested; for the purposes of invoicing the services provided and for accounting purposes; to notify you of changes to the terms and conditions governing the provision of the contracted services; to comply with legal obligations to which we are subject; to optimise your visit to and navigation of our website; to manage the contractual relationship and its performance; and to tailor the services we provide to the needs and interests of our customers.
I) Depending on the circumstances, the processing of your personal data may be carried out on the following legal grounds: the necessity of the processing for the purposes of pre-contractual measures or the performance of a contract; compliance with legal obligations; the legitimate interests of Basílio Malhas, Lda.  or the consent given by the data subject.

II) Where consent to processing is the legal basis for the processing of personal data, the data subject has the right to withdraw that consent at any time and in a straightforward manner, without this right affecting the lawfulness of processing carried out on the basis of the consent previously given, nor the subsequent processing of the same data on another legal basis. If you wish to withdraw your consent, you can contact us via email at: geral@basiliomalhas.pt
If you ask us to withdraw your consent, you will no longer receive our communications and your data will no longer be used.

Data relating to minors
We do not collect, nor do we intend to collect, data from minors.

Retention period for your personal data
The period for which data is retained depends on the purpose for which the data is processed, in accordance with the legal requirements that oblige us to retain the data for the stipulated period.
Where there is no statutory retention period, the data will be retained only for as long as is necessary for the purposes for which it was processed, after which it will be dealt with appropriately.

The Rights of Data Subjects
In accordance with the provisions of the GDPR, we guarantee that you may exercise your rights as a data subject, namely:
a) Right of Access – you have the right to request from us, amongst other things, information as to whether or not your data is being processed, what data we process and for what purposes. If you wish, you may request a copy of the personal data currently being processed; however, the provision of further copies may be subject to a reasonable fee, taking into account administrative costs. If the request is made in electronic format, and unless you specify otherwise, we will provide the information in a commonly used electronic format.
b) Right to Rectification – you have the right to have us rectify, without undue delay, any inaccurate personal data concerning you and to have any incomplete data completed.
c) Right to erasure/right to be forgotten – you may, in certain circumstances, request that your personal data be erased from our records without undue delay, where any of the grounds set out in the GDPR apply.
d) Right to object – you have the right to object, on grounds relating to your particular situation, to certain types of data processing provided for in the GDPR, such as processing for the purposes of direct marketing, in which case we will cease processing for that purpose.

The Security of Personal Data
Adopting a risk-based approach, we have implemented appropriate technical and organisational measures to ensure an appropriate level of security, designed to guarantee security, authenticity, integrity and confidentiality.

Disclosure of data to third parties
As part of our business activities, we may use subcontractors to process your data on our behalf. Where this occurs, we take the appropriate measures, as set out in the contract, to ensure that these third parties, subcontractors or partners provide sufficient and appropriate guarantees regarding the implementation of technical and organisational measures and that they will act solely in accordance with our instructions.

Use of “cookies”
To find out more about cookies and how we use them on our website, please see our Cookies Policy.

Contacts
For further information, please contact us via:
Address: Rua da Pedreira No. 1, Azurém, 4800-057 Guimarães, PO Box 46
Email: geral@basiliomalhas.pt