Privacy Policy

STCP, E.I.M., S.A. is responsible for the processing of your personal data, insofar as it determines the purposes and means of processing.

It is up to the data controller to apply the technical and organizational measures that are appropriate to ensure that the processing of personal data is carried out in compliance with the rules resulting from the General Regulation on Data Protection and the respective implementing law.

STCP, E.I.M., S.A. appointed a Data Protection Officer who can be contacted via the email address epd@stcp.pt or by letter sent to Avenida Fernão de Magalhães, 1862, 13.º Piso, 4350-158 Porto.

STCP, E.I.M., S.A. collects and processes personal data to carry out its duties, namely for the purposes of identification, contact, billing, recruitment, management of administrative offenses and

complaints, as well as those that may prove to be strictly necessary for the fulfillment of its legal and contractual obligations.

The data collected may be the following:

   a) Identification data, such as name, civil identification number, NIF, date of birth;

   b) Contacts, such as address, email address, telephone or mobile phone number;

   c) Professional data, academic qualifications, certifications, curriculum;

   d) Payment data, in the case of requesting a service or within the scope of the execution of a contract, data will be collected to proceed with the respective processing;

   e) Video, in the case of visiting the facilities of STCP, E.I.M., S.A or traveling in one of its buses.

STCP, E.I.M., S.A. collects and processes personal data for the purposes of fulfilling its obligations.

Within the scope of its activity, STCP, E.I.M., S.A. may resort to subcontractors who process personal data on its behalf, which will imply access, by these entities, to such data. If this happens, STCP, E.I.M., S.A. will take appropriate measures, contractually provided for, so that third parties present sufficient and adequate guarantees for the execution of technical and organizational measures and that they will only act in accordance with the instructions of STCP, E.I.M., S.A..

Personal data will be kept for the periods established by law or for the period that proves to be strictly necessary for the pursuit of the purposes that motivated their collection and processing, after which they will be deleted or anonymised.

Under the terms of the General Data Protection Regulation, the data subject has rights, namely:

   a) Right of access: the right to obtain from the controller confirmation that the personal data concerning you are or are not being processed and, if that is the case, the right to access your personal data and the way how they are treated;

   b) Right of rectification: the right to obtain, without undue delay, from the controller, the rectification of incorrect and/or incomplete personal data concerning you;

   c) Right to erasure of data ("right to be forgotten"): the right to obtain from the person responsible for the treatment, the erasure of your personal data, without undue delay, when:

      • The data is no longer necessary for the purpose for which it was collected or processed;

      • The holder has withdrawn his consent, unless there is another legal basis for the respective treatment;

      • The holder opposes the treatment, except when there are prevailing legitimate interests that justify it;

      • Personal data was processed unlawfully;

      • By legal obligation, arising from Union law or from a Member State to which the controller is subject.

   d) Right to limitation of treatment: the right to obtain from the person responsible for the treatment a limitation of treatment, if one of the following situations occurs:

      • Challenge the accuracy of the personal data, for a period that allows the controller to verify its accuracy;

      • The processing is unlawful and the data subject opposes the erasure of personal data and requests, on the other hand, the limitation of its use;

      • The controller no longer needs the personal data for processing purposes, but these data are required by the holder for the purposes of declaring, exercising or defending a right in legal proceedings;

      • If you have objected to the processing of the data, until it is verified that the legitimate reasons of the controller prevail over those of the data subject.

   e) Right to data portability: the right to receive personal data concerning you and that you have provided to the controller, in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller for the processing without the person responsible to whom the personal data were provided being able to prevent it, when:

      • The treatment is based on consent or the performance of a contract; It is

      • Processing is carried out by automated means.

    f) Right of opposition: the right to object, at any time, to the processing of personal data concerning you, including profiling, except when compelling and legitimate reasons for such processing prevail over the interests, rights and freedoms of the data holder.

    g) Automated individual decisions, including profiling: the right not to be subject to any decision taken exclusively on the basis of automated processing, including profiling, unless the decision:

      • It is necessary for the conclusion or performance of a contract between the data subject and a controller;

      • Is based on the consent of the data subject;

      • Is authorized by Union or Member State law to which the controller is subject, and which also provides for adequate measures to safeguard the rights and freedoms and legitimate interests of the data subject;

    h) Revocation of consent: the right to withdraw your consent at any time. The withdrawal of consent does not compromise the lawfulness of the processing carried out based on the previously given consent or on any other basis of lawfulness.

STCP, E.I.M., S.A. uses cookies or connection testimonials – a small text file stored by the website on the user's device when he/she visits it – to improve the performance of the website and the user's experience.

To find out more about cookies and how STCP, E.I.M., S.A. uses them, see the Cookie Policy.

STCP, E.I.M., S.A. uses a set of security technologies, tools and procedures to protect your personal data from unauthorized access, use or disclosure.

This privacy policy will be permanently updated, with the update date being changed accordingly.