Who are we
Our website address is: https://yellowmetric.pt
Personal Data Protection Policy
Yellow Metric respects the privacy of its customers / users and suppliers. This Privacy Policy describes who we are, for what purposes we can use your data, how we treat it, with whom we share it, for how long we keep it, as well as how to contact us and exercise your rights. The rules provided for in this Data Protection Policy complement the provisions, in terms of protection and treatment of personal data, provided for in the contracts that Customers / Users enter into with Yellow Metric, as well as the rules provided for in the terms and conditions that regulate the offer of the various products and services and which are duly advertised on the respective websites. Your data is collected by Yellow Metric, based in Lisbon, hereinafter referred to as Yellow Metric. Yellow Metric processes and stores personal data within the European Union (EU) and respects best practices in the field of security and protection of personal data, having for this purpose taken the necessary technical and organizational measures in order to comply with the General Regulation of Data Protection, (Regulation (EU) 2016/679), which is a legislative act directly binding on natural and legal persons who, whether resident or not in the EU, process data from EU citizens and ensure that the processing of personal data it is lawful, loyal, transparent and limited to authorized purposes. The privacy statement is under the responsibility of Yellow Metric, which is considered responsible for data processing, for the purposes of the GDPR, and will determine the purpose and means of processing personal data submitted and collected online. The Data Protection Officer (DPO) ensures compliance with the regulation and is involved in all matters related to the protection of personal data. Their identification and method of contact are indicated at the end of this document.
What is personal data?
Personal data is any information, of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person. An identifiable person is a person who can be identified, directly or indirectly, namely by reference to a name, identification number, location data, identifiers electronically or to one or more elements specific to his physical, physiological, genetic identity, mental, economic, cultural or social.
What is the processing of personal data?
The processing of personal data consists of an operation or set of operations carried out on personal data or sets of personal data, using automated means, whether or not, namely the collection, registration, organization, structuring, conservation, adaptation, recovery, consultation, use, disclosure, dissemination, comparison, interconnection, limitation, erasure or destruction.
Our data protection policy ensures that the data is: Subject to lawful, fair and transparent treatment in relation to the data subject (“lawfulness, loyalty and transparency”); Collected for specific, explicit and legitimate purposes and cannot be further processed in a way incompatible with those purposes; Adequate, relevant and limited to what is necessary in relation to the purposes for which they are treated; Accurate and updated whenever necessary; all appropriate measures being taken so that inaccurate data, taking into account the purposes for which they are processed, are erased or rectified without delay; Kept in a way that allows data subjects to be identified only for as long as necessary for the purposes for which they are processed; Treated in a way that guarantees their safety, including protection against their unauthorized or illicit treatment and against their accidental loss, destruction or damage, adopting the appropriate technical or organizational measures;
Purposes of Processing of Personal Data.
Ensuring, whenever necessary, the prior consent of the holder of personal data, we will collect, among others, the following information: Name and Surname, Civil Identification Number; Tax Identification Number; Date of Birth, Email and Telephone. In general, the personal data collected is based on and is intended for the management of the contractual relationship, the provision of contracted services, the adaptation of services to the needs and interests of the Client / User, namely for the purpose of accessing specific features of the services, suggestions for content, information services in the vicinity as well as information and marketing actions. In addition, personal data may also be processed for the purpose of complying with legal obligations and for the purpose of investigating, detecting and prosecuting serious crimes.
Cookies
Our website uses cookies or similar technologies to ensure the best user experience and to analyze trends, track the movement of users within the website and collect demographic information about our user base as a whole. Our Cookies record information such as Internet Protocol (IP) address, browser type, Internet Service Provider (ISP), reference / exit pages, files accessed on our website (for example HTML pages), operating systems, date and time, to analyze trends on the site.
Shelf life:
The period of time during which personal data is stored and preserved varies according to the purpose for which the information is processed. Effectively, there are legal requirements that require data to be kept for a minimum period of time. Thus, and whenever there is no specific legal requirement, the data will be stored and preserved only for the minimum period necessary for the pursuit of the purposes that motivated its collection or its further treatment, under the terms defined by law.
Age of majority
By accepting this privacy policy, you guarantee that you are 18 years of age or older.
Use of personal data
Yellow Metric will contact you to show you the goods and / or services it sells. The processing of such data is based on the consent given by the data subject. Access to personal data is strictly limited to the personnel of those responsible for processing personal data and subcontractors. Sharing of personal data Yellow Metric guarantees that it does not intend to transfer data to third countries under the General Data Protection Regulation and, if so, will ask you for consent. Yellow Metric has entered into an Agreement with its subcontractors, under which they are obliged not to transfer data to third countries. In certain situations, both Yellow Metric and its Subcontractors may be notified to disclose personal information in response to requests by supervisory authorities to fulfill the requirements of the GDPR.
Processing security
Yellow Metric is committed to guaranteeing the protection of the security of the personal data made available to it, having approved and implemented strict rules in this matter. Compliance with these rules constitutes an obligation for all those who legally access them. Bearing in mind the concern and commitment shown by Yellow Metric in the defense of personal data, several security measures, of a technical and organizational nature, were adopted in order to protect the personal data made available to it against its dissemination, loss, misuse , unauthorized alteration, treatment or access, as well as against any other form of unlawful treatment. In addition, third parties that, in the scope of services rendered, process the personal data of the Client / User in the name and on behalf of Yellow Metric, are obliged, in writing, to carry out appropriate technical and security measures that, in every moment, satisfy the requirements foreseen in the legislation in force and ensure the defense of the rights of the data owner (namely, the protection of privacy and personal data of Customers / Users).
Access and rectification or deletion of personal data
As the data owner, the Customer / User has the right to request access to the data concerning him, to request to rectify them and to delete them. You can also limit the treatment given to data, as well as oppose it and still require data portability. You can do this, directly or upon written request, addressed to the respective Data Controller, through the contacts provided for this purpose in this document. You can also ask for clarification from the Data Protection Officer or file a complaint with the CNPD whenever you believe that your rights are being violated.
Right of access
The holder of the personal data has the right to obtain from Yellow Metric the confirmation that the data concerning him are or are not subject to treatment and, if applicable, to access his personal data and access the information provided for by law.
Right of rectification
The holder of personal data has the right to obtain from the Yellow Metric company without undue delay, the rectification of inaccurate or incomplete data concerning him.
Right to erase data (“right to be forgotten”)
The holder of personal data has the right to have Yellow Metric erase his data without undue delay, and Yellow Metric has the obligation to erase personal data without undue delay, when one of the following reasons apply, namely: ) Personal data are no longer necessary for the purpose for which they were collected or processed; b) The data subject has withdrawn his consent for the processing of data (in cases where the processing is based on consent) and there is no other reason for such processing; c) The holder is opposed to the treatment and there are no prevailing legitimate interests that justify the treatment;
Right to limitation of treatment
The data subject has the right to obtain the limitation of processing from Yellow Metric, if, in particular, one of the following situations applies: a) To challenge the accuracy of personal data, for a period that allows Yellow Metric to verify its accuracy; b) The processing of data is lawful and the data subject opposes the deletion of personal data and requests, in return, to limit its use; c) Yellow Metric no longer needs personal data for processing purposes, but such data is required by the holder for the purpose of declaring, exercising or defending a right in a judicial process; d) If you have opposed the processing, until it is found that the legitimate reasons of the controller are to prevail over those of the data subject.
Right to data portability
If the processing depends on the consent of the data subject and that consent has been provided by automated means, the data subject has the right to receive the personal data concerning him and which he has provided to Yellow Metric in a structured format, in current use and automatic reading.
Right of opposition
In cases where data processing is carried out for 1) the purpose of the legitimate interests pursued by Yellow Metric; or 2) the processing of data is carried out for the purposes of direct marketing or 3) definition of profiles, you can also, at any time, object to the processing of your personal data.
Marketing emails
Data controllers are permitted, after explicit consent, to send marketing emails to users of the site. At any time the user can cancel the consent through the link, existing for that purpose, in each email sent.
Changes to this policy
This policy may be updated from time to time, for example due to changes in the relevant legislation. If any material changes are made, customers will be notified by email or by notification on the website.