Privacy Policy
At the Commercial Arbitration Centre of the Portuguese Chamber of Commerce and Industry (CAC) we respect your privacy and thank you for the trust you place in us. In this Privacy Policy we explain for what purposes we may use your data and how we treat it.
Who is responsible for the processing of your personal data
The Commercial Arbitration Centre is responsible for the data processing of its Clients and potential Clients, who browse this website and/or fill in the forms herein.
For questions regarding the processing of your personal data you may contact the Data Protection Officer by the following means:
PORTUGUESE CHAMBER OF COMMERCE AND INDUSTRY
Rua das Portas de Santo Antão, 89 1169-022 Lisbon
Email: protecaodados@ccip.pt
Tel.: +351 213 224 050 (national landline call)
How we collect your personal data
Your personal data will be collected and processed in the following situations:
1. If you fill in your personal details and submit forms on this website;
2. Through indirect collection - carried out by Google Analytics.
The CAC also uses cookies on the site to improve performance and user experience.
"Cookies" are small text files that are stored on your computer or mobile device, via your browser, retaining only generic information related to user preferences; they allow access to specific areas of the site and faster and more efficient browsing, eliminating the need to repeatedly enter the same information.
By clicking on the cookies banner, with the statement I ACCEPT, and continuing with navigation on the CAC website, users of the site accept, including for future access, the introduction of cookies under the terms indicated above. At any time, the user may, via the browser, decide to be notified of the receipt of cookies, as well as block entry onto their system. The removal or blocking of cookies on the website may limit access to some areas of the website.
For what purposes and on what basis your personal data may be used
Use of the website
As a visitor to the site, you do not need to provide any personal data to use the CAC site, however, we do access statistical information regarding site usage in aggregated and anonymised form via Google Analytics.
Users' personal data is collected only when one of the available functionalities is subscribed to, which are necessary for the CAC to be able to provide information, or when some kind of available form is filled in, such as: participation in events/congresses; participation in training actions.
Marketing / Communication
Your data will be collected and used for Marketing purposes (newsletter communication, events, and other information that is considered relevant).
On what basis may we process your personal data?
We process your personal data in the following cases:
Consent
When you have given your express consent - in writing, orally or by validating an option - and if that consent is free, informed, specific and unambiguous.
or
Contract performance and pre-contractual steps
When the processing of personal data is necessary for the execution, performance and management of the contract entered into or to be entered into with the CAC.
or
Compliance with legal obligation
Where the processing of personal data is necessary to comply with a legal obligation to which the CAC is subject.
or
Legitimate interest
When the processing of personal data, restricted to minimum data (need to know principle), corresponds to a legitimate interest of the CAC, such as the processing of data necessary for the improvement of service quality.
What are the deadlines for processing and storing personal data?
The CAC processes and retains your personal data in accordance with the purposes for which it is processed.
There are cases in which the law requires the processing and storing of data for a minimum period of time, in particular for 10 (ten) years for data necessary to inform the Tax Authority for accounting or fiscal purposes.
Whenever there is no specific legal obligation, data will be processed only for the period necessary to fulfil the purposes for which it was collected and stored.
Transfer of personal data
Your personal data is processed exclusively by the CAC, which may use subcontracted platforms for its own management, as is the case with email marketing platforms. In such cases, the CAC is responsible for taking the necessary contractual measures to ensure that the subcontractors respect and protect the personal data of the data subject, which is in their custody and under their responsibility.
Which Rights are guaranteed to Personal Data subjects?
At any time, they can:
- Request access to the information we hold concerning them: as the personal data subject, they have the right to obtain confirmation as to whether or not data concerning them is being processed and, where appropriate, to access their personal data and to access the information provided for by law in this regard.
- Request rectification of information if it is inaccurate or incomplete: as the holder of personal data, they have the right to require the CAC, without undue delay, to rectify inaccurate or incomplete data concerning them.
- Request the erasure of their personal data: as the personal data subject, they have the right to require the CAC to erase their data, and the CAC is obliged to erase the personal data, without undue delay, where in particular one of the following grounds applies: (a) the personal data is no longer necessary for the purpose for which it was collected or processed; (b) they have withdrawn their consent to the data processing (in cases where the processing is based on consent) and there is no other ground for such processing; (c) they object to the processing and there are no overriding legitimate interests justifying the processing.
- Request limitation of the processing of their personal data: as a data subject they have the right to request the CAC to limit the processing of their data if in particular one of the following applies: (a) they contest the accuracy of the personal data, for a period enabling the CAC to verify its accuracy; (b) the data processing is lawful and the data subject objects to the erasure of the personal data and requests, in return, the limitation of its use; (c) the CAC no longer needs the personal data for the purposes of processing but it is required by the data subject for the establishment, exercise or defence of legal claims; (d) they have objected to the processing until it is established that the legitimate grounds of the controller override those of the data subject.
- To oppose the processing of their personal data: where the data processing is carried out for the purposes of the legitimate interests pursued by the CAC; where the data processing is carried out for direct marketing purposes.
- If the processing is dependent on their consent, they have the right to withdraw it: if consent is legally necessary for the processing of personal data, the data subject has the right to withdraw consent at any time, although this right shall not affect the lawfulness of the processing carried out on the basis of the consent previously given, nor the further processing of the same data based on another lawful ground, such as compliance with a contract or legal obligation to which the CAC is subject.
- Complain to the supervisory authority - Comissão Nacional de Protecção de Dados (National Data Protection Commission);
- Know the existence of a data breach/security incident as below.
If you wish to exercise any of your rights, you must contact us in writing by email to protecaodados@ccip.pt or by letter to Rua das Portas de Santo Antão, 89, 1169-022 Lisbon.
Security of Personal Data
The Portuguese Chamber of Commerce and Industry and the Commercial Arbitration Centre use technical and organisational measures to protect the security and confidentiality of Personal Data in accordance with the General Data Protection Regulations.
These measures will be reviewed whenever there are new legal requirements and there is a need for technological developments.
In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, CCIP shall notify the competent authority of the event within the legal time limit, as well as the data subject themself.
Complaint to the Supervisory Authority
If you are not satisfied with the way we handle your personal data, you have the right to lodge a complaint with the National Data Protection Commission (CNPD); Rua de São Bento, nº. 148 - 3º; 1200- 821 Lisbon; or by email: geral@cnpd.pt
Please note that the CAC will update this Privacy Policy from time to time.
We ask you to periodically review this document to remain up-to-date.