UCHIYAMA PORTUGAL PRIVACY POLICY
The UPV makes you aware of its Privacy Policy, through which it informs you of your rights and establishes how it collects and uses your personal data.
At UPV we are committed to using your data only for the purposes defined and clearly, adopting various security measures of a technical and organizational nature, in order to protect the personal data made available to us against its disclosure, loss, use undue, alteration, treatment, unauthorized access, as well as against any other form of illicit treatment.
1. Person responsible for processing personal data
UPV, headquartered at Rua D, nº1123, Zona Industrial - II Fase, 4935-232 Neiva, is the entity responsible for processing personal data, as it defines which data is collected, the means of processing and the purposes for which the data is used.
2. What is personal data?
Is all information relating to an identified or identifiable natural person - the data subject - and is considered identifiable a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, a number identification data, location data, electronic identifiers or one or more elements specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
3. How and when are your personal data collected?
Your personal data may be collected under the following circumstances:
1) For the purposes of signing and executing a contract, namely when you buy, acquire a product and/or service or provide us with a service, or join our team;
2) When you visit our physical facilities and provide us with your personal data;
3) When you participate in events, conferences, workshops or training, organized by UPV or by the brands represented by us, and with express consent, you provide us with your personal data.
4. What personal data do we collect?
Within the scope of UPV's activity, the data collected is strictly necessary.
a. In this context, the data we collect, for the purpose of providing our services, may include the following:
1) Identification data such as name, address, date of birth, contact details, taxpayer number, citizen card details, nationality;
2) Academic data and professional experience: qualifications, certifications, education, languages, CV;
3) Professional data: function, company, company address, contacts and business activities carried out;
4) Billing and expense data: name, address, contact details, tax identification, payment details, fees and expenses;
5) Image and sound recording data: photographic images and/or video.
b. Your personal data will only be processed by us, in accordance with a specific and legitimate purpose or purposes (indicated in 5.), and which are determined at the time of collection. Therefore, this data will not be further processed in a way that is incompatible with those purposes. The exception may be for the purpose of archiving in the public interest, scientific or historical research or even for statistical purposes, cases in which, under the terms of the RGPD, this incompatibility does not occur.
c. If there is a need imposed by the service provided for us to collect and process special categories of personal data (“sensitive data”), this processing will only be carried out in accordance with the exceptions provided for in article 9, paragraph 2 of the RGPD.
d. This data will be collected from the holder and the processing of special categories of data ("sensitive data") will be carried out based on his consent. In this condition, the holder will be informed of the right to withdraw consent, however, this will not compromise the lawfulness of the treatment previously carried out, based on the consent given.
5. Grounds, Purposes and Duration of Processing of Personal Data
The grounds that legitimize the processing of your personal data by UPV are the following:
Consent: your personal data may be processed through a free, specific, informed and explicit expression of will, under which you accept, by means of an unequivocal positive declaration or act, that your personal data are subject to treatment.
Pre-contractual steps and/or contract execution: your personal data may be necessary to clarify doubts, for us to present you with a proposal, for the conclusion, execution and management of the contract signed with UPV .
Fulfillment of a legal obligation: your data may be necessary for the fulfillment of a judicial or legal obligation, to which the controller, UPV is or will be subject.
Legitimate interest: your data may be necessary for carrying out certain operations related to UPV's business activity, except in cases where your privacy and data protection rights must prevail.
UPV , if the client is a legal person, in order to fulfill its contractual obligations, may need to collect some personal data (name, email and telephone number) from the representative or employee of that company, for the sole purpose of allowing the good execution of that contract, and in this case, the client, a legal entity, must ensure that the data collected from its representatives/employees are collected and transmitted to the UPV in a lawful manner (under one of the lawful causes provided for in the applicable legislation), and must grant holders of personal data, their representatives or collaborators, the right to information about the processing of this data.
5.1. Period of retention of personal data
The UPV retains the personal data of the holders only for the period strictly necessary to pursue the purpose for which they were collected, except for those that the law obliges the State body and always in accordance with the legislation in force.
The conservation of your data will be maintained during the period in which you maintain a contractual relationship with UPV, except in cases where you have given us your consent so that we can keep your personal data for periods longer than the duration of the contract, ensuring in this way the rights and duties related to the contract or in situations where there is a legitimate interest of the UPV.
6. Transmission of your personal data
UPV will never transmit your personal data to third parties, except when state, judicial or police authorities require so and always in accordance with the law in force, or if you have given us your consent.
UPV 's suppliers, service providers or subcontractors are contractually subject to the same terms and conditions for processing personal data as UPV, and are prohibited from using, transferring, disclosing or recording the data subject's personal data for any other purpose. other than that for which they were specifically hired (or without their consent, as applicable).
7. Data transfers outside the EEA
7.1 UPV is continually focused on processing your personal data within the European Economic Area (EEA). However, for the fulfillment of one of the aforementioned purposes, your personal data may need to be transferred to a country outside the EEA.
7.2 UPV will only transfer your data to a third country located outside the EEA after careful verification and/or the conclusion of a contract with a specific guarantee, that said third party:
- Prevents adequate safeguards regarding the level of protection of your personal data and its processing;
- Duly inform the data subject;
- Ensures that the exercise of your rights as a data subject is guaranteed;
- Provides effective legal recourse formats to be made available to the data subject.
8. Rights of holders of personal data and response to requests from holders
UPV guarantees the applicability and fulfillment of all the rights of the holder of personal data provided for in the General Data Protection Regulation and national legislation in force, namely:
• Right of Access (Article 15)
You have the right to obtain confirmation from the UPV that the personal data concerning you are being processed or not and, if that is the case, the right to access your personal data and information relating to this same processing.
• Right to Rectification (article 16)
You also have the right to obtain, without undue delay, from the UPV, the rectification of inaccurate personal data concerning you, namely the right to correct or complete them.
• Right to erasure of data / right to be forgotten (article 17)
You may exercise the right to have your personal data erased by UPV without undue delay, provided that: the data is no longer necessary for the purpose that motivated your processing, as well as withdrawing your consent, if no other valid grounds for its conservation are justified and also whenever you object to this processing if there are no legitimate interests at stake on the part of the UPV in addition to other legally provided cases.
• Right to Limitation of Treatment (article 18)
You have the right to obtain from UPV the limitation of treatment, if one of the following situations applies:
a) You contest the accuracy of the personal data, for a period that allows the person responsible for the treatment verify its accuracy;
b) The processing is unlawful and the data subject opposes the deletion of personal data and requests, on the other hand, the limitation of its use;
c) The controller no longer needs the personal data for the purposes of processing, but such data are required by the holder for the purposes of declaring, exercising or defending a right in a judicial proceeding;
d) If you have objected to the processing under article 21, no. 1, until it is verified that the legitimate reasons of the controller prevail over those of the data subject.
• Right to Data Portability (Article 20)
You have the right to have your personal data provided to UPV in a structured, commonly used and machine-readable format, as well as the right to transmit this data to another person in charge processing (if technically possible), and if the processing is based on consent or a contract, and if the processing is carried out by automated means.
• Right to change consent
You can, at any time, change your consent, limit it to certain types of treatment or withdraw it, however, the withdrawal of consent does not compromise the lawfulness of the treatment carried out based on the previously given consent.
• Right of Opposition (Article 21)
You may also oppose, at any time, the processing of personal data concerning you, when there are no compelling and legitimate reasons for processing that prevail over your interests, rights and freedoms, or for the purposes of declaring, exercising or defending a right in a judicial proceeding.
It is also important to add that you have the right to object, at any time, to the processing of your data for the purposes of direct marketing. In this case, UPV undertakes to stop processing the data for this purpose.
• Right not to be subject to any automated decision (Article 22)
You have the right not to be subject to any decision taken exclusively based on automated processing, including the definition of profiles that produce effects in your legal sphere or that affect you significantly similarly.
• Right to file a complaint with the Control Authority
You have the right to file a complaint with the Control Authority, ie the National Data Protection Commission (CNPD), if you consider that the rules set out in the RGPD have been violated.
9. Exercise of your rights
You will be able to exercise your rights free of charge, unless it is a manifestly unfounded or excessive request, in which case a reasonable fee may be charged taking into account the costs.
We will respond to your requests within a maximum period of 30 days, except in cases of more complex requests.
In fact, you can exercise your rights in person or through the following addresses:
Letter: Rua D, nº 1123, Zona Industrial- II Fase, 4935-232 Neiva, Viana do Castelo
E-mail: protecaodedados@umc-upv.com
10. Procedural and Technical Security Measures
UPV has implemented appropriate physical, technological and organizational security measures for the protection of your personal data in order to protect the personal data made available to us against disclosure, loss, misuse, alteration, treatment or unauthorized access, as well as against any other form of unlawful treatment.
The UPV has equipped its computer system with levels of data security and a high level of confidence against accidental events or malicious or illegal actions that compromise the availability, integrity and confidentiality of the Personal Data stored or transmitted.
11. Privacy Policy Update
UPV reserves the right to update this policy at any time, according to legal requirements and/or needs of commercial activity.
12. Contacts for the protection of personal data
Email: protecaodedados@umc-upv.com