Privacy Policy

This Privacy Policy was developed to clarify how personal data is processed, taking into account the principles and standards arising from European and national legislation on the protection of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. This Policy was reviewed and updated on 16/03/2021.

a) What is meant by personal data and its processing?

«‘Personal data’» means any information relating to an identified or identifiable natural person (‘data subject’); a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

«‘Processing’» means any operation or set of operations which is performed on personal data or on sets of personal data, whether by automated means or not, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

b) Which organisation is responsible for collecting and processing your personal data?

The responsibility for the collection and processing of your personal data lies with Efiki Partners, Lda., legal entity no. 505025817, with its registered office at Oceanus Building
Av. da Boavista, 3265 – Sala 2.09
4100-137 4100-137 Porto – Portugal.
Contact: rui.padrao@efikipartners.com

c) What are the principles governing data processing?

Data processing is carried out in accordance with the principles set out in the General Data Protection Regulation and other applicable national and European legislation, namely:
Principle of lawfulness, fairness and transparency: the processing of personal data is lawful only where there is a legal basis justifying it, namely:
a) Compliance with a legal obligation;
b) Pre-contractual arrangements or the performance of a contract;
c) Where the Data Subject has given their consent, that is to say, by means of a freely given, specific, informed and unambiguous indication of their wishes, by which they accept, through a statement (in writing or orally) or an unequivocal affirmative action (such as ticking a box), that their Personal Data may be processed;
d) Protection of the data subject’s vital interests;
e) Legitimate Interests.

A Efiki Partners, Lda., as the data controller, takes appropriate measures to provide the data subject with information regarding the entire processing procedure in a concise, transparent, intelligible and easily accessible manner, using clear and simple language.
Principle of Purpose Limitation: Personal Data is collected only for specific, explicit and legitimate purposes, and may not subsequently be processed in a manner incompatible with those initial purposes.
Principle of Data Minimisation: Personal data being processed must be adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
Principle of Accuracy: Personal Data must be accurate and kept up to date whenever necessary. Where data is inaccurate, all reasonable steps must be taken to ensure that, having regard to the purposes for which it is processed, it is erased or rectified without delay.
Principle of Data Retention: Personal data must not be retained for longer than is necessary for the purposes for which it is processed. However, personal data may be retained for longer periods provided that it is processed solely for archiving purposes in the public interest, or for scientific or historical research purposes, or for statistical purposes.
Principle of Integrity and Confidentiality: Through the adoption of technical or organisational measures, Personal Data must be processed in a manner that ensures its security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

d) How is your personal data collected, and what type of data is collected?

When you visit the Efiki Partners website, your IP address is analysed to determine the country you are in for the purposes of language preference. Once this check has been carried out, neither the IP address nor the language preference is stored in the Efiki Partners database. You can browse the website without any restrictions and are not required to provide Efiki Partnerswith any personal data. If you wish, you may fill in a form with the following details:
– Name
– Email
– Company
– Contact
– Message
From this point onwards, the processing of Personal Data provided by the user will be carried out in accordance with the provisions of the General Data Protection Regulation and other applicable national and European legislation, and in accordance with the principles set out in point (c).

e) The security of your Personal Data:

A Efiki Partners makes every effort to protect Personal Data from any unwanted and unauthorised interference.
To this end, security systems, rules and other procedures are in place to ensure the protection of personal data and to prevent unauthorised access to, misuse, disclosure, alteration, loss or destruction of such data.
Access to your personal data is only permitted in accordance with the terms set out above and always with your consent and knowledge.

f) How long your personal data will be retained

A Efiki Partners retains personal data only for as long as is strictly necessary to fulfil the purpose for which it was collected.

g) What are your rights as a data subject?

As a data subject, you are entitled to a number of rights in relation to your personal data, namely:

Right to Information – The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and the period for which the data will be stored.

Right of Access – The data subject has the right to access their personal data at any time.

Right to Object – You have the right to object, at any time, to the processing of your personal data, in accordance with the GDPR.

Right to Rectification – The data subject has the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right of Limitation – Under certain circumstances, the data subject has the right to restrict the processing of their personal data.

Right to be Forgotten – The data subject has the right to obtain from the controller the erasure of their personal data without undue delay.

Right to Personal Data Portability – The data subject has the right to receive the personal data concerning them which they have provided, in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance from the controller to whom the personal data were provided.

The right not to be subject to decisions based solely on automated processing that produce legal effects or other significant effects.

h) Sharing of Personal Data

A Efiki Partners does not disclose any personal data relating to its customers and users to third parties without their consent, except:

a. where the companies concerned are part of the Group;

b. where necessary to enable employees, suppliers or business partners to provide a product or service, or to perform a function on behalf of Efiki Partners;

c. in compliance with legal and/or contractual obligations. In such cases Personal Data may be disclosed to judicial, administrative, supervisory or regulatory authorities, as well as to entities lawfully engaged in data collection, fraud prevention and detection, market research or statistical studies.

i) Transfer of Personal Data to Third Countries or International Organisations

A Efiki Partners may transfer personal data collected to a third country outside the European Union (“EU”) that is not included on the list of countries which the EU has already deemed to provide an adequate level of protection for personal data. In such cases, it will ensure that such transfers of personal data are carried out in strict compliance with the applicable legal provisions on the protection of personal data, in particular those arising from Regulamento Geral sobre a Proteção de Dados Pessoais (“RGPD”).

j) Changes to the Privacy Policy

This Privacy Policy has been drawn up to explain how personal data is processed, in accordance with the principles and standards set out in European and national legislation on the protection of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.