{"id":6705,"date":"2026-05-07T14:14:20","date_gmt":"2026-05-07T14:14:20","guid":{"rendered":"https:\/\/upportugal.bomontec.net\/?page_id=6705"},"modified":"2026-08-25T16:22:21","modified_gmt":"2026-08-25T16:22:21","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/up-portugal.pt\/en\/politica-de-privacidade\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"6705\" class=\"elementor elementor-6705\" data-elementor-post-type=\"page\">\n\t\t\t\t<div data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-element elementor-element-82f61c7 e-flex e-con-boxed e-con e-parent\" data-id=\"82f61c7\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d3509b8 elementor-widget elementor-widget-heading\" data-id=\"d3509b8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Privacy Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ac742bf elementor-widget elementor-widget-text-editor\" data-id=\"ac742bf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>This Privacy Policy describes how Upcoop Portugal collects, uses, retains, shares, protects, and, in general, processes the personal data of data subjects in the course of its activities, including those carried out through its website, in accordance with Regulation (EU) 2016\/679 of April 27, 2016 (General Data Protection Regulation or GDPR), and other applicable legislation regarding the protection of personal data.<\/p><h2><b><br \/>General Provisions<\/b><\/h2><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">This policy applies to all personal data processed <\/span><span style=\"font-weight: 400;\">\u200b\u200b<\/span><span style=\"font-weight: 400;\">by Upcoop Portugal;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">This policy applies to all employees, service providers, partners, suppliers, and any third parties who have or may have access to personal data processed by Upcoop Portugal;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">This policy does not supersede any provisions that are the subject of a specific agreement with any third party, whether a customer, partner, supplier, or employee. In such cases, this policy may supplement those documents, but does not replace them.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">For the purposes of this Policy, the terms \u201cuser\u201d and \u201cdata subject\u201d may be used interchangeably to refer to the individual who accesses the website or whose personal data is processed by Upcoop Portugal.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><strong>What are the principles regarding the processing of personal data?<\/strong><\/h2><p>Upcoop Portugal is committed to processing personal data in accordance with the requirements of the GDPR.<\/p><p>Article 5 of the GDPR requires that personal data be:<\/p><ul><li><span style=\"font-weight: 400;\">Object of lawful, fair and transparent processing in relation to the data subject;<\/span><\/li><li><span style=\"font-weight: 400;\">Collected for specified, explicit and legitimate purposes and may not be further processed in a manner incompatible with those purposes; further processing for archiving purposes in the public interest, or for scientific or historical research purposes or for statistical purposes is not considered incompatible with the original purposes;<\/span><\/li><li><span style=\"font-weight: 400;\">Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;\u00a0<\/span><\/li><li><span style=\"font-weight: 400;\">Accurate and up-to-date whenever necessary; all appropriate measures must be taken so that inaccurate data, taking into account the purposes for which it is processed, is erased or rectified without delay;<\/span><\/li><li><span style=\"font-weight: 400;\">kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed; personal data may be kept for longer periods provided that they are processed solely for archiving purposes in the public interest, or for scientific or historical research purposes, or for statistical purposes, subject to the application of appropriate technical and organizational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject; and<\/span><\/li><li><span style=\"font-weight: 400;\">processed in a manner that ensures their security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by taking the measures<\/span> <span style=\"font-weight: 400;\">appropriate technical or organizational.<\/span><\/li><li style=\"list-style-type: none;\">\u00a0<\/li><\/ul><h2>\u00a0<\/h2><h2><b>How do we guarantee Lawfulness, Fairness and Transparency in the processing of personal data?<\/b><\/h2><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To ensure that data processing is carried out lawfully, fairly and transparently, Upcoop Portugal maintains a GDPR Management System;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">When necessary, considering the legal basis on which the data is processed, measures will be taken to ensure that the data is kept up to date;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data subjects have the right to access, rectify, portability and erasure of their personal data. They also have the right to restrict processing and to lodge a complaint with the supervisory authority, the National Data Protection Commission (CNPD);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Any requests made to Upcoop Portugal must be dealt with in good time.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>What is the legal basis for processing personal data?\u00a0<\/b><\/h2><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data processing must be carried out in accordance with one of the following legal grounds: consent, performance of a contract, compliance with a legal obligation, defense of vital interests, exercise of functions in the public interest or legitimate interests;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Upcoop Portugal will register the legal basis applicable to each data processing;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">When consent is invoked as a legal ground for data processing, evidence of consent must be kept with the personal data;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">When communications are sent to data subjects based on their consent, the option to revoke consent must be clearly available and the GDPR management system must ensure that such revocation is accurately reflected in Upcoop Portugal's records.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>How do we guarantee data minimization?<\/b><\/h2><p>Upcoop Portugal guarantees that the personal data processed is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.<\/p><h2>\u00a0<\/h2><h2><b>Who is responsible for processing your personal data?<\/b><\/h2><ul><li><span style=\"font-weight: 400;\">Contact details of the Data Controller:<br \/><\/span>Le Ch\u00e8que D\u00e9jeuner Portugal S.A, with the trading name Upcoop Portugal, with registered office at Avenida Infante D. Henrique, n\u00aa333-H, Edif\u00edcio Lisboa Oriente Office, escrit\u00f3rio 16, 1800-282 Lisboa, with the registration and legal person number 508907608.<\/li><li><span style=\"font-weight: 400;\">Contact details of the Data Protection Officer:<br \/><\/span>Upcoop Portugal has appointed a Data Protection Officer. For any questions regarding data protection, please contact: <a href=\"mailto:dpo@up-portugal.pt\">dpo@up-portugal.pt<\/a>.<\/li><\/ul><h2>\u00a0<\/h2><h2><b>For what purpose do we process your personal data?<\/b><\/h2><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Managing relationships with customers, users, partners, suppliers, and other entities with which the company interacts;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Issuance, provision, administration, and management of tax and social benefit certificates;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Provision of the requested services and management of the corresponding contractual relationship;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Handling inquiries, clarifications, suggestions, complaints, and other requests submitted through the website or other communication channels;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Administrative, financial, accounting, and operational management of Upcoop Portugal\u2019s activities;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Compliance with the legal, regulatory, tax, and administrative obligations to which Upcoop Portugal is subject;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Sending institutional, informational, and commercial communications related to Upcoop Portugal\u2019s products, services, campaigns, and initiatives, when there is a legal basis for doing so;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensuring the security of information systems, the network, and the services provided, including the prevention and detection of fraud, misuse, or unauthorized access;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Management of recruitment and selection processes, unsolicited applications, and evaluation of professional profiles, when applicable;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Analyzing website usage, monitoring its performance, and improving the user browsing experience, including through the use of cookies and similar technologies, in accordance with the Cookie Policy;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Continuous development, improvement, and optimization of the products, services, content, and features provided by Upcoop Portugal.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>What is the legal basis for the processing of your personal data?<\/b><\/h2><p><span style=\"font-weight: 400;\">Upcoop Portugal processes personal data only when there is a valid legal basis, in accordance with Article 6.<\/span><span style=\"font-weight: 400;\">\u00ba<\/span><span style=\"font-weight: 400;\"> of the General Data Protection Regulation (GDPR).<\/span><\/p><p><span style=\"font-weight: 400;\">The processing of personal data by Upcoop Portugal is based, in particular, on the following grounds:<\/span><\/p><p><style>\n.gigantic-table-wrapper {<br \/>    width: 100%;<br \/>    overflow-x: auto;<br \/>    -webkit-overflow-scrolling: touch;<br \/>    margin: 20px 0;<br \/>}<\/p>\n<p>.gigantic-privacy-table {<br \/>    width: 100%;<br \/>    min-width: 850px;<br \/>    border-collapse: collapse;<br \/>    table-layout: fixed;<br \/>    font-family: inherit;<br \/>    color: #222;<br \/>    background: #fff;<br \/>}<\/p>\n<p>.gigantic-privacy-table th,<br \/>.gigantic-privacy-table td {<br \/>    border: 1px solid #222;<br \/>    padding: 14px 16px;<br \/>    text-align: left;<br \/>    vertical-align: top;<br \/>    line-height: 1.45;<br \/>    font-size: 16px;<br \/>}<\/p>\n<p>.gigantic-privacy-table th {<br \/>    font-weight: 700;<br \/>    font-size: 17px;<br \/>}<\/p>\n<p>.gigantic-privacy-table th:first-child,<br \/>.gigantic-privacy-table td:first-child {<br \/>    width: 55%;<br \/>}<\/p>\n<p>.gigantic-privacy-table th:last-child,<br \/>.gigantic-privacy-table td:last-child {<br \/>    width: 45%;<br \/>}<\/p>\n<p>@media (max-width: 767px) {<br \/>    .gigantic-table-wrapper {<br \/>        padding-bottom: 8px;<br \/>    }<\/p>\n<p>    .gigantic-privacy-table th,<br \/>    .gigantic-privacy-table td {<br \/>        padding: 12px 14px;<br \/>        font-size: 14px;<br \/>    }<\/p>\n<p>    .gigantic-privacy-table th {<br \/>        font-size: 15px;<br \/>    }<br \/>}<br \/><\/style><\/p><div class=\"gigantic-table-wrapper\"><table class=\"gigantic-privacy-table\"><thead><tr><th>Purpose of the Processing<\/th><th>Legal Basis<\/th><\/tr><\/thead><tbody><tr><td>Managing relationships with customers, partners, and suppliers<\/td><td>Performance of a contract or pre-contractual steps<\/td><\/tr><tr><td>Issuance, management, and provision of certificates for social and tax services and benefits<\/td><td>Contract performance and compliance with legal obligations<\/td><\/tr><tr><td>Provision of the requested services and management of the contractual relationship<\/td><td>Contract Performance<\/td><\/tr><tr><td>Management of contact requests, inquiries, complaints, and requests<\/td><td>Pre-contractual measures, performance of a contract, or legitimate interest<\/td><\/tr><tr><td>Administrative, financial, accounting, and operational management<\/td><td>Compliance with legal obligations and legitimate interests<\/td><\/tr><tr><td>Compliance with legal, regulatory, and tax obligations<\/td><td>Compliance with a Legal Obligation<\/td><\/tr><tr><td>Sending commercial communications and direct marketing<\/td><td>Consent of the data subject or legitimate interest, where legally permissible<\/td><\/tr><tr><td>Sending institutional and informational communications related to the contracted services<\/td><td>Performance of a contract or legitimate interest<\/td><\/tr><tr><td>Information security, fraud prevention, and system protection<\/td><td>Legitimate interest<\/td><\/tr><tr><td>Recruitment and Selection Process Management<\/td><td>Pre-contractual procedures and consent, where applicable<\/td><\/tr><tr><td>Analysis of website usage through non-essential cookies<\/td><td>Consent<\/td><\/tr><tr><td>Development and improvement of products, services, and features<\/td><td>Legitimate interest<\/td><\/tr><\/tbody><\/table><\/div><h2><b><br \/>What personal data do we process?<\/b><\/h2><p><span style=\"font-weight: 400;\">Personal data is any information that makes it possible to directly or indirectly identify a natural person, the data subject.<\/span><\/p><p><span style=\"font-weight: 400;\">Upcoop Portugal processes the following categories of personal data:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Identification data (e.g. name, identification document number, tax identification number, photograph);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Contact details (e.g. address, telephone number or email address);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Biographical Information: (for example: date of birth, gender, nationality, place of birth, marital status);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Invoice data (e.g. TIN, amount, date, IBAN);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Products and Services (for example: meal card number);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Family life (e.g. household, number of children);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Professional life (e.g. profession, working hours, remuneration);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Access Accounts (for example: user account, user authentication credentials);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Content: Information (for example: contained in written communications between users and Upcoop Portugal, recorded calls (video and\/or audio));<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transactions (e.g. entries and exits);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use of websites and applications (for example: pages visited, or information about the devices used (for example: IP address, geographic location, browser used)).<\/span><\/li><\/ul><p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Upcoop Portugal has access to personal data as follows:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">By the data subject by filling in the form available on the website or by email;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Directly from the companies that hire us. For example: When a client is registered, they provide us with their employees' details so that we can manage their titles and benefits;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Indirectly from other external sources. For example, from partners who tell us about the use of titles or the use of benefits;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In the process of acquiring products and services For example: when acquiring a meal card;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In letters or e-mails sent to Upcoop Portugal;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Participation in Upcoop Portugal promotional activities;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In response to satisfaction surveys<\/span><span style=\"font-weight: 500;\">.<\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">Obligation to provide personal data:<\/span><\/p><p><span style=\"font-weight: 400;\">In the context of pre-commercial, commercial, and contractual relationships, it is mandatory to collect and process certain personal data from Employees, Suppliers, Partners, Customers, potential Customers, and others\u2014which is necessary to fulfill pre-contractual and contractual obligations and procedures, or those arising from applicable regulations. As a general rule, without this data, Upcoop Portugal may be unable to establish or maintain the intended contractual relationship.<\/span><\/p><h2>\u00a0<\/h2><h2><b>Who do we pass on your personal data to?<\/b><\/h2><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data may be disclosed to third parties when we have a legitimate basis for doing so or when the third party is processing data on our behalf, the contractual relationship being regulated by a contract in which the security measures and organization of the processing are defined and in which it is specified that it only acts on instructions from Upcoop Portugal;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data may also be disclosed if necessary to comply with a legal obligation, statute, or court order; for the purpose of obtaining legal assistance; in connection with or for the purpose of exercising or defending a right in legal proceedings, or when necessary to defend a legal right; or to safeguard national security;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data is processed by Upcoop Portugal and may be transferred to other entities within the Upcoop Group that provide complementary services or support necessary to achieve the purposes described in this Policy. These entities will process personal data exclusively for the authorized purposes and in accordance with the applicable contractual instruments and data protection safeguards, acting, as the case may be, as data processors, independent data controllers, or joint data controllers;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data may be transmitted to commercial establishments belonging to the network of partners in relation to commercial transactions that take place there at the indication of the data subject;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">All professionals and partners must avoid any inappropriate disclosure of personal data and comply with the general duties of confidentiality.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>Do we transfer personal data internationally outside the European Union?<\/b><\/h2><p><span style=\"font-weight: 400;\">Upcoop Portugal does not transfer personal data to third countries located outside the European Union or the European Economic Area.<\/span><\/p><p><span style=\"font-weight: 400;\">Should it become necessary in the future to transfer personal data internationally, Upcoop Portugal will ensure that the appropriate safeguards set forth in the General Data Protection Regulation (GDPR) are implemented, in order to guarantee a level of protection equivalent to that required in the European Union.<\/span><\/p><p>\u00a0<\/p><h2><strong>How long do we keep your personal data?<\/strong><\/h2><p><span style=\"font-weight: 400;\">Upcoop Portugal retains personal data only for as long as is strictly necessary to fulfill the purposes for which it was collected and processed, in accordance with the principle of data retention limitation set forth in the General Data Protection Regulation (GDPR).<\/span><\/p><p><span style=\"font-weight: 400;\">To that end, Upcoop Portugal adopts a<\/span><span style=\"font-weight: 400;\">\u00a0<\/span><span style=\"font-weight: 400;\">Data Retention and Disposal Policy, which defines, for each data category and processing activity:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The personal data to be retained;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The purposes of the processing;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The respective retention periods;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The reasons for its conservation.<\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">Data collected through the website\u2014including through contact forms, requests for information, or other online interactions\u2014will be retained for a period of 12 months, starting from the date of the data subject\u2019s last interaction, unless there is a legitimate basis or legal obligation that requires a different retention period, as provided for in the Data Retention and Disposal Policy.<\/span><\/p><p><span style=\"font-weight: 400;\">Once the respective retention periods have expired, personal data will be securely deleted or irreversibly anonymized; in the latter case, it may be retained for statistical, historical, archival, or service improvement purposes.<\/span><\/p><h2>\u00a0<\/h2><h2><b>What are the rights of the data subject?<\/b><\/h2><p><span style=\"font-weight: 400;\">Upcoop Portugal guarantees the exercise of the rights of data subjects in relation to their processing.<\/span><\/p><p><span style=\"font-weight: 400;\">The data subject has the following rights in terms of personal data protection:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Access: Without prejudice to the protection of the rights of third parties, Data Subjects have the right to have access to personal data concerning them, as well as to obtain information on the respective processing conditions;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Rectification: Data Subjects have the right to request the rectification of inaccurate or incomplete personal data (e.g. address, email address, telephone contacts);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Objection Data Subjects have the right to object to data processing based on Upcoop Portugal's legitimate interest;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Withdrawal of consent: Data subjects have the right to withdraw the consent they have given for data processing based on it;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Right to be Forgotten: Data Subjects have the right to have their personal data held by Upcoop Portugal erased, provided there are no valid grounds for retaining it (e.g., compliance with a legal obligation, or the defense of Upcoop Portugal or third parties in legal proceedings).<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Limitation: Data Subjects have the right to request the limitation of data processing when:\u00a0<\/span><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">have contested the accuracy of the personal data and for a period that allows Upcoop Portugal to verify its accuracy;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">the processing is unlawful and they oppose the erasure of their personal data;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Upcoop Portugal no longer needs the personal data, but such data is required by the Data Subjects for the purposes of declaring, exercising or defending a right in legal proceedings;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">have objected to the processing and during the period of evaluation of the request by Upcoop Portugal.<\/span><\/li><\/ul><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Portability: Data Subjects have the right to receive the personal data they have provided to Upcoop Portugal in a structured, commonly used, and machine-readable format, and the right to transmit that data to another data controller;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Upcoop Portugal does not use fully automated decision-making processes\u2014including profiling\u2014that are likely to produce legal effects on data subjects.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>How do I exercise my rights?<\/b><\/h2><p><span style=\"font-weight: 400;\">To exercise your rights, please contact Upcoop Portugal at <span style=\"text-decoration: underline;\">dpo@up-portugal.pt<\/span> or by letter to Le Ch\u00e8que D\u00e9jeuner Portugal S.A., trading as Upcoop Portugal, Avenida Infante D. Henrique, n\u00aa333-H, Edif\u00edcio Lisboa Oriente Office, escrit\u00f3rio 16, 1800-282 Lisboa - Portugal.<\/span><\/p><p><span style=\"font-weight: 400;\">Upcoop Portugal will respond to requests within a maximum of 30 days, except for particularly complex requests. <\/span><span style=\"font-weight: 400;\">In these cases, Upcoop Portugal will inform the owners about:<\/span><\/p><ol type=\"a\"><li><span style=\"font-weight: 400;\">the need to extend the deadline for response by a further maximum of 60 days, <\/span><\/li><li><span style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">of the respective justification.<\/span><\/span><\/li><\/ol><p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Whenever Upcoop Portugal considers that it is not possible to respond to requests, data subjects will be informed of Upcoop Portugal's reasons within the time limits established above.<\/span><\/p><p><span style=\"font-weight: 400;\">The exercise of rights is free of charge, except in situations considered excessive, anomalous and\/or in bad faith. In these situations, Upcoop Portugal will inform the data subjects in advance of the fees to be charged and their justification.<\/span><\/p><p>Upcoop Portugal has appropriate mechanisms for verifying and confirming the identity of data subjects who wish to exercise their rights. Only those whose identity can be confirmed will be attended to, and through a channel that allows evidence of the request and the respective response to be kept.<\/p><p><span style=\"font-weight: 400;\">If you so wish, you can also lodge a complaint with the National Data Protection Commission (CNPD). <\/span><span style=\"text-decoration: underline;\"><a href=\"http:\/\/www.cnpd.pt\"><span style=\"font-weight: 400;\">www.cnpd.pt<\/span><\/a><\/span><span style=\"font-weight: 400;\">.<\/span><\/p><h2>\u00a0<\/h2><h2><b>What do we do in the event of a data breach?<\/b><\/h2><p><span style=\"font-weight: 400;\">Upcoop Portugal has internal procedures in place to identify, record, assess, and manage security incidents that could result in a personal data breach.<\/span><\/p><p><span style=\"font-weight: 400;\">In the event of a personal data breach\u2014defined as a security breach that results, accidentally or unlawfully, in the destruction, loss, alteration, unauthorized disclosure, or unauthorized access to personal data that has been transmitted, stored, or otherwise processed\u2014 Upcoop Portugal will assess the incident and its impact on the rights and freedoms of the data subjects.<\/span><\/p><p><span style=\"font-weight: 400;\">Whenever a data breach is likely to pose a risk to the rights and freedoms of individuals, Upcoop Portugal will notify the National Data Protection Commission (CNPD) in accordance with legal requirements.<\/span><\/p><p><span style=\"font-weight: 400;\">When a breach is likely to pose a high risk to the rights and freedoms of data subjects, they shall also be informed of the breach and the measures taken to mitigate its effects, unless applicable law exempts such notification.<\/span><\/p><h2>\u00a0<\/h2><h2><b>How do we protect your data?<\/b><\/h2><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Upcoop Portugal implements appropriate technical and organizational measures to ensure a level of security commensurate with the risk, safeguarding the confidentiality, integrity, availability, and resilience of its personal data processing systems and services;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To protect personal data against destruction, loss, alteration, unauthorized disclosure, or improper access, Upcoop Portugal implements physical, logical, technical, and organizational security measures appropriate to the nature of the processing of personal data and the risks associated with such processing;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Access to personal data is limited to employees, service providers, and other professionals who need to know such information in order to perform their duties; they are subject to confidentiality obligations and the rules set forth in Upcoop Portugal\u2019s Information Security Policy.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>Changes to the Policy<\/b><\/h2><p>Upcoop Portugal may periodically update this policy to reflect changes in the law or changes to the website itself and its content.<\/p><p>The latest version will always be available on the Upcoop Portugal website.<\/p><p>New version approved by Upcoop on August 20, 2026.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Pol\u00edtica de Privacidade A presente Pol\u00edtica de Privacidade descreve a forma como a Upcoop Portugal recolhe, utiliza, conserva, partilha, protege e, de um modo geral, trata os dados pessoais dos titulares dos dados no \u00e2mbito das suas atividades, incluindo as realizadas atrav\u00e9s do seu website, em conformidade com o Regulamento (UE) 2016\/679, de 27 de [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-6705","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/up-portugal.pt\/en\/wp-json\/wp\/v2\/pages\/6705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/up-portugal.pt\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/up-portugal.pt\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/up-portugal.pt\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/up-portugal.pt\/en\/wp-json\/wp\/v2\/comments?post=6705"}],"version-history":[{"count":22,"href":"https:\/\/up-portugal.pt\/en\/wp-json\/wp\/v2\/pages\/6705\/revisions"}],"predecessor-version":[{"id":15302,"href":"https:\/\/up-portugal.pt\/en\/wp-json\/wp\/v2\/pages\/6705\/revisions\/15302"}],"wp:attachment":[{"href":"https:\/\/up-portugal.pt\/en\/wp-json\/wp\/v2\/media?parent=6705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}