PRIVACY AND PERSONAL DATA PROTECTION POLICY

MAPS guarantees the protection of the data entrusted to it by the users of this website, and the respective processing is carried out under the applicable legislation, namely the General Data Protection Regulation and Law no. 58/2019, of 8 August.

1. Principles
MAPS processes personal data based on the following principles:

The processing of personal data is carried out lawfully, fairly and in a transparent manner;
It is collected only for specified, explicit and legitimate purposes;
The data collected is limited to what is strictly necessary and for the time required for the purposes for which it is processed;
Only employees and partners of the Group whose duties so require have access to the personal data processed;
Personal data is treated confidentially;
All definitions for data protection purposes refer in their exact terms to the GDPR.

2. Use of cookies
The use of cookies is a common practice on most websites in order to save the user time and facilitate navigation. Some pages of this website may use cookies, small information files that are transferred to the user's computer and that allow the website to remember your choices, dates and routes followed on the site. These files are used to prevent the visitor from having to repeatedly enter their personal information, facilitate navigation and personalization of the service.

Most browsers or web browsing applications automatically accept cookies. You can change your browser settings to accept cookies or not. All our cookies store information in encrypted form.

3. Personal data
Personal data is any information relating to an identified or identifiable natural person (the data subject).

4. Conditions for treatment
MAPS will only process personal data when at least one of the conditions laid down in data protection legislation is met, namely:

The data subject has given his or her prior express consent, freely given, informed, specific and unambiguous;
The processing of personal data is necessary for the performance of a contract to which the data subject is party, or for pre-contractual steps at the request of the data subject;
Processing is necessary for compliance with a legal obligation to which MAPS is subject;
The processing is necessary to ensure MAPS' legitimate interests.

5. Period of retention of personal data
MAPS, in line with the above-mentioned principles, retains personal data in accordance with the purposes for which they were collected only for the period of time necessary to fulfill those purposes, in accordance with the law. MAPS has defined procedures to ensure the pseudonymization or deletion of data after the retention period has elapsed.

6. Rights of data subjects and personal data
In accordance with applicable law, MAPS ensures that the data subject can exercise the rights conferred on him by data protection legislation, in particular:

Right of access;
Right to rectification of your data;
Right to erasure (right to be forgotten);
Right to limitation of treatment;
Right to portability;
Right to object to treatment;
Right to withdraw consent.
In addition to these, you have the right not to be subject to exclusively automated individual decisions, to withdraw the consent you have given for the processing of your personal data and to complain to the National Data Protection Commission.

The right to erasure is limited to data, which are not necessary for our legitimate interests and which are not stored or processed due to our legal obligations.

In addition, you have the right to lodge a complaint with the competent data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).

7. Security measures
MAPS has at its disposal technical and organizational security measures to protect against the accidental or unlawful disclosure of personal data, the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed and against all other unlawful forms of processing.

The commitment to the protection of personal data also implies that, whenever personal data are transmitted to other entities, they are obliged to adopt technical and organizational measures that guarantee the same level of protection.

8. Transmission of personal data to other entities
Personal data may be transmitted to subcontractors to be processed in the name and on behalf of MAPS, always ensuring that they present technical and organizational measures that adequately protect personal data.
They may also, where appropriate, be transmitted to public authorities (Tax Authority, Judicial Authorities, Chambers, Police, etc.) in the fulfillment of legal obligations.