Data Protection and Privacy Policy

The General Data Protection Regulation, hereinafter “RGPD”, in force since May 25, 2018, establishes the rules applicable to the processing of personal data by companies and public entities with a view to guaranteeing the defense of the fundamental rights and freedoms of individuals and, in particular, the protection of their personal data, and as such information relating to an identified or identifiable natural person - the data subjects -, considering an identifiable person who can to be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, electronic identifiers, or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Knowing this, Sirolis respects the privacy of its employees, customers, suppliers and users of its website.

Thus, Sirolis is qualified as responsible for the processing of personal data whenever it determines the purposes and means of treatment, ensuring compliance with all provisions of the RGPD and other applicable legislation on data protection and privacy.

In accordance with the commitment to comply with all legislation relating to the protection of privacy data, this Data Protection and Privacy Policy is established, and Sirolis undertakes to always act in accordance with and in accordance with this Policy.

What data is collected?

Sirolis may collect and process the following categories of personal data:

• Identification data;

• Contact details;

• Bank details;

• Among others.

How is the data collected?

Sirolis may collect your personal data through various means:

• When you contact us, for any reason, through our website, our telephone line or by e-mail;

• When you fill out the existing application forms on our website;

• When you physically submit your application for a job;

• When you use or view our website, through the cookies in your browser;

• When an employment bond is created;

• Among others.

Why do we need personal data and what are the legal grounds and purposes of processing them?

• Processing is the operation or set of operations carried out on personal data or on sets of personal data, by automated or non-automated means, such as collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of provision, the comparison or interconnection, the limitation, the deletion, or the destruction.

• For the exercise of its activity, Sirolis processes personal data, in accordance with the provisions of the RGPD, and there are several reasons why this treatment is necessary. Since there are several reasons, it means that the respective grounds for the lawfulness of the treatment also vary, so these may be:

• Consent - The data subject may consent to the respective processing through a free, specific, informed and explicit expression of will, by which they accept through a declaration (written or oral) or unambiguous positive act (filling/marking an option) that their personal data are subject to treatment

• Pre-contractual or contract execution - Personal Data may be processed if they are necessary for the execution of a contract to which the Data Subject is a party as a Collaborator, Customer and/or Supplier, or to carry out pre-contractual matters at your request.

• Compliance with a legal obligation - Personal Data may be processed to ensure and guarantee compliance with legal obligations to which it is subject under national and/or European Union legislation.

• Defense of the vital interests of the data subject - Personal Data may be processed to ensure the defense of your vital interests, namely when the same treatment is essential to your life.

• Legitimate Interests - Sirolis may process Personal Data provided that the same processing does not prevail over your interests or fundamental rights and freedoms.

How is personal data treated?

The processing of personal data by Sirolis complies with the principles defined in the legislation. Personal data is collected for specific purposes, which will be determined, explicit and legitimate, communicated to its owner, and cannot be used for purposes incompatible with those for which its collection was authorized.

Only personal data that, depending on the purposes of the treatment, are adequate and relevant will be requested.

Personal data is accurate and updated whenever necessary.

Personal data is kept for the time necessary to fulfill the purpose for which they are intended and Sirolis will adopt all measures aimed at ensuring the security of personal data and preventing loss, destruction or damage, as well as illegal or unauthorized processing.

Can I revoke my Consent?

Whenever the collection and processing of personal data is based on the consent of the holder, the holder may, at any time, revoke his consent.

To do this, simply inform Sirolis of the withdrawal of consent, by means of a communication addressed to the Data Protection Officer, by e-mail to the address protecaodedados@grupolusiaves.pt or letter sent by simple post to Zona Industrial da Zicofa, Lote 4, 2415-314 Leiria.

What rights can I exercise?

• According to the RGPD, Data Subjects have several rights, namely:

• Right to access your data;

• Right to rectification of your data;

• Right to limit the processing of your data;

• Right to erasure/erasure of data;

• Right to data portability (when this is technically possible);

• Right to object to treatment.

To exercise these rights, the data subject must only request it by means of a communication addressed to the Data Protection Officer, by e-mail to the address protecaodedados@grupolusiaves.pt or a letter sent by simple post to Zona Industrial da Zicofa, Lote 4, 2415-314 Leiria.

You also have the right to file a complaint with the National Data Protection Commission.

By making your personal data available to Sirolis, the owner acknowledges and accepts that their processing is carried out in accordance with the provisions of this document “Data Protection and Privacy Policy”.

How is the security of my personal data guaranteed?

To ensure the security and confidentiality of Personal Data, protected databases are used, among others, appropriate firewalls and passwords, in accordance with the provisions of the Data Protection Legislation.

Access to Personal Data is only allowed to authorized employees who have an effective need to use them, in accordance with the principles of security and confidentiality.

‍