— Your rights —

Data protection: what you can ask of us.

Under Regulation (EU) 2016/679 (“GDPR”), you have specific rights over your personal data. This page summarises them and explains how to exercise them.

— Translation —

This is an English translation provided for convenience. The Portuguese version (/rgpd) is the authoritative text; if the two differ, the Portuguese version prevails.

For the full context — categories of data, purposes, retention periods, processors — see the Privacy Policy.

If the data concerned relates to an inspection in which you took part, the controller is the inspection firm or insurer that carried it out. You can make your request to them directly, or write to us and we will forward it.

The eight rights.

Right of access.

Ask us to confirm whether we process your data and obtain a copy of that data, together with information about how we use it.

Right to rectification.

Have your data corrected where it is inaccurate or incomplete.

Right to erasure.

Ask us to delete your data when it is no longer necessary, when you withdraw consent or when you object to the processing.

Right to restriction.

Ask us to temporarily freeze the processing — for example, while we assess a rectification or objection.

Right to portability.

Receive your data in a structured, commonly used format (JSON or CSV), or ask us to transmit it to another controller.

Right to object.

Object, on grounds relating to your particular situation, to processing based on legitimate interest or on tasks carried out in the public interest.

Right to withdraw consent.

Withdraw, at any time, a consent previously given. Withdrawal does not affect the lawfulness of the processing up to that date.

Right not to be subject to automated decisions.

Not to be subject to decisions based solely on automated means that produce legal or similarly significant effects. We do not currently make decisions of this kind.

How to exercise them.

  1. Use the data protection request form and state which right you wish to exercise. We will send you an email to confirm that the address is yours; the time limit runs from that confirmation. Alternatively, send an email to ola@teleperitagens.pt with the subject “GDPR request”.
  2. Briefly describe your request. If possible, include the email address of your account or the one you signed up with — it helps us locate the record.
  3. Proof of identity. We may ask you for an additional means of verification if there is reasonable doubt about the identity of the person making the request. We collect only what is strictly necessary.
  4. Reply within 30 days. We reply within one month at most of receiving the request. In complex cases, we may extend this by a further two months, informing you and giving reasons.
  5. Free of charge. Exercising these rights is, as a rule, free of charge. For manifestly unfounded or excessive requests, we may charge a reasonable fee or refuse the request, in accordance with Article 12(5) of the GDPR.
— Want to be deleted right now? —

Write to us from the email address used in the form with “Delete data” as the subject. We will remove your record and the associated data that we are required to delete within 72 business hours, and confirm by email once it is done. Data that the law requires us to keep, such as invoices, is kept for the legal period.

Supervisory authority.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the supervisory authority:

Comissão Nacional de Protecção de Dados (CNPD) (National Data Protection Commission)
Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa
Telephone: (+351) 213 928 400
Email: geral@cnpd.pt
www.cnpd.pt

Data Protection Officer.

José Matos · ola@teleperitagens.pt