Privacy Policy

We are committed to protecting the privacy and personal data of website users, so we have crafted this policy and the practices described herein. In this policy, we explain how your personal data is collected and processed, and we advise you to read it.

1. Identification of the entity responsible for data processing.

Entity: AMBIGROUP, SGPS, S.A. (hereinafter referred to as "Ambigroup")
Tax Identification Number (NIF): 506751180
Address: Edifício Ambigroup, Rua Quinta das Lamas,1679-013 Pontinha (Portugal)
Phone Contact: +351 219 687 430
Email: geral@ambigroup.com

2. What does this policy cover?

This Privacy Policy explains how we collect and process the personal data that is necessary for the provision of services available through the website, describing the practices adopted for this purpose.

3. What are personal data?

3.1. Personal data refers to all information relating to a person that identifies them or makes them identifiable, regardless of the nature and medium of the information, including the person's sound and image.

3.2. By identifiable, it should be understood as a person who can be identified, directly or indirectly, notably by reference to an identification number or other specific elements of their physical, physiological, psychic, economic, cultural, or social identity.

4. How will we use your personal data?

4.1. The processing operations of personal data we carry out are an essential tool for your satisfaction and for the activity of Ambigroup and are carried out in accordance with applicable law and best practices.

4.2. Your personal data will not be reused for purposes other than those previously identified or that have no relation to the purposes for which they were originally collected.

5. What are the purposes, grounds, and retention periods of the collected data?

5.1. The personal data we process have specific grounds, depending on the purposes for which they are intended, and will be retained for the time necessary for the respective purposes, as outlined in this Privacy Policy.

5.2. The personal data collected are only those necessary and appropriate for the stated purposes.

5.3. In the following table, you can see the processing purposes and the data collected for them, the respective grounds, and the retention periods or criteria for data retention:

PURPOSE BOSIS COLLECTED DATA RETENTION PERIOD
To analyze and respond to your messages and information requests. Consent for this specific purpose. Name, phone number, email, tax identification number (NIF), and message content. For the period deemed necessary to pursue this purpose.
To analyze and follow up on your job application process with Ambigroup. Pre-contractual Nome, email, contacto telefónico, CV, documentos que sejam anexados e que contenham dados pessoais e conteúdo da mensagem. 1 year.
To be able to send newsletters or other promotional and/or marketing communications that you have requested and/or that may be of interest to you(email). Consent for this specific purpose or legitimate interests (when the customer has already made purchases / acquired products or services similar to those advertised) Name and Email. Your data will be retained until you withdraw your consent or opt out (unsubscribe) from this type of communication.
For website management operations Consent for this specific purpose (cookies)
Legitimate interests pursued by Ambigroup, namely, to analyze user interaction with the website and manage it.
Cookies Date, IP Address. See information in the Cookie Policy.
For fraud prevention and information system security. Consent for this specific purpose (cookies). Legitimate interests pursued by Ambigroup. Cookie data;
IP address.
See information in the Cookie Policy.

5.4. If any specific or mandatory period is stipulated by law, the data retention period will be that period. In all other cases, personal data will be retained for a maximum of the times indicated above, periods that Ambigroup considers sufficient to fulfill the purposes.

5.5. At the end of the retention period, all collected personal data will be deleted.

6. Newsletters and other commercial and/or promotional communications.

6.1. We may send newsletters, commercial and/or promotional communications regarding Ambigroup whenever the user provides their prior and informed consent for this purpose, by checking the checkboxes provided on the website for this purpose.

6.2. O The user may withdraw consent at any time by using the option provided for this purpose in the footer of communications sent via email (unsubscribe) or by written communication addressed to Ambigroup, using the contacts indicated in the section related to the exercise of rights. Withdrawal of consent does not affect processing carried out prior to such withdrawal.

6.3. The above does not prevent Ambigroup, whenever it has obtained the respective email address from its customers, in accordance with Personal Data Protection legislation, in the context of the sale of a product or service, from using it for the purpose of direct marketing of its own products or services similar to those transacted, provided that it clearly and explicitly guarantees to the customers concerned the possibility to object, free of charge and easily, on each occasion of sending such communications, for example, through the unsubscribe option, located in the footer of emails.

7. How do we collect your personal data?

7.1. We will collect your personal data through the forms present on the website, as well as through the website itself and the communication it establishes with your device, and email messages you send us.

7.2. Your personal data is collected through your device in the following ways:

  • When you fill out the contact and recruitment forms on the website;
  • Through your web browser;
  • Through cookies;
  • IP address.

7.3. Ambigroup is committed to treating your data in accordance with the law and in a legitimate manner.

7.4. Ambigroup will not sell, rent, or share your personal data with third parties, except in cases clearly identified in this Privacy Policy (see Point 12 to understand how).

8. What are cookies?

8.1. Cookies are small information files that help identify your browser and can store information such as user settings and preferences.

8.2. With your consent, Ambigroup will store cookies on your device to personalize and facilitate navigation to the maximum extent possible, but also for troubleshooting, statistics, quality assurance, and to monitor system security.

8.3. To learn more about the cookies we use, please consult our Cookies Policy.

9. How we protect your personal data?

9.1. Your personal data is kept secure through the adoption of various technical and organizational security measures, ensuring that only employees who need access to the data have access, in accordance with the need for access and rules created for this purpose.

9.2. To protect your personal data, we only rely on data center providers that offer us adequate and documented security measures, including guarantees that your personal data is stored on servers maintained in controlled environments with limited access.

9.3. Personal data is stored on secure servers near Softway - Desenvolvimento e Comercialização de Software Lda (hereinafter, "Softway") with Tax Identification Number (NIPC) 505003333 and headquartered at Edifício CascaisOffice, 1-B, 2645-449 Alcabideche - Cascais - Portugal, which provides us with the necessary security guarantees to protect personal data against dissemination, loss, misuse, alteration, processing, or unauthorized access, as well as against any other form of unlawful processing.

9.4. Similarly, when browsing the website, we protect your data with encryption through the use of a security certificate - SSL.

9.5. Although we take the care and precautions we deem appropriate to protect the personal data you provide and we collect, it is important to be aware that no security system is impenetrable.

10. What are your rights?

10.1. Before explaining how you can exercise your rights, we inform you of what they are:

  • Access: the right to obtain confirmation as to whether personal data concerning you is being processed and, if so, the right to access your personal data;
  • Rectification: the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed;
  • Erasure: the right to obtain the erasure of your personal data when one of the reasons listed in the legislation applies, namely when:
    i. The personal data is no longer necessary for the purposes for which it was collected or processed;
    ii. You withdraw the consent on which the processing is based, and there is no other legal ground for the processing;
    iii. You withdraw the consent on which the processing is based, and there is no other legal ground for the processing;
    iv. The personal data has been unlawfully processed;
    v. The personal data has to be erased for compliance with a legal obligation;
    vi. The personal data has been collected in the context of the provision of information society services.
    In your reserved area, you have the option to delete your account. When you select this option, your billing data and any other data necessary to comply with our legal obligations will be retained for the required periods.
  • Restriction of processing: the right to obtain restriction of processing if one of the situations listed in the legislation applies, namely when:
    vii. You contest the accuracy of the personal data;
    viii. O The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead;
    ix. The controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims;
    x. You have objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
  • Objection: the right to object, at any time, to the processing of personal data concerning you;
  • Portability: the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from the controller to which the personal data were provided, where the processing is based on consent or a contract, and the processing is carried out by automated means. In your reserved area, you have the option to download a file in JSON format containing all your information.

10.2. Tem You also have the right to lodge a complaint with the competent supervisory authority (in Portugal, the National Data Protection Commission at www.cnpd.pt).

10.3. In addition to the rights described above, whenever the legal basis for processing data is consent, the User has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

11. How can you exercise your rights?

11.1. By written contact to the following addresses:

  • By email: comunicacao@ambigroup.com
  • By postal mail: Edifício Ambigroup, Rua Quinta das Lamas,1679-013 Pontinha (Portugal)

11.2 If you request the deletion of some or all of your personal data, some of the requested services may not be provided to you, and Ambigroup will retain only the personal data necessary to fulfill its legal obligations

12. When do we disclose data to third parties?

12.1. Ambigroup may use third parties to provide certain services, such as maintenance, technical support, human resources, and marketing, and these third parties may have access to some personal data, including data necessary for the contracted purposes.

12.2. Ambigroup ensures that the entities accessing the data are trustworthy and provide high levels of protection, only transmitting data necessary for the provision of the contracted service. However, Ambigroup remains responsible for the personal data provided.

12.3. Ambigroup may also disclose data to third parties in the context of investigations, inquiries, judicial and/or administrative proceedings, or similar proceedings, provided that such disclosure is duly ordered by a court order.

13. Third-party.

13.1. The website may contain links to other websites that may collect and process your personal data, and such processing is the sole responsibility of the owners of those websites. Ambigroup bears no responsibility for their policies and/or practices.

13.2. Examples of such third parties include Instagram, Facebook, or LinkedIn through the buttons present on the website.

14. Data transfers outside the European Union.

14.1. Your data will be processed by us within the European Economic Area.

14.2. If data transfers to third countries outside the European Economic Area may occur, Ambigroup will make efforts to adopt adequate safeguards to ensure that these transfers are carried out in accordance with applicable legislation.

15. Minors.

15.1. The website is not directed at individuals under the age of 18, so we request that minors do not provide us with personal data through the website, social networks, social media, or emails.

16. Sensitive personal data.

16.1. Ambigroup appreciates that you do not send us or disclose any sensitive personal data, i.e., information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, or data concerning a person's sex life or sexual orientation.

16.2. If you still send us or disclose such categories of personal data, they will be immediately deleted.

17. Changes to the Privacy Policy.

17.1. Ambigroup reserves the right to adjust or change this Privacy Policy at any time, with such changes being advertised.

17.2. Ambigroup recommends that users who interact with the website visit this Privacy Policy regularly to stay informed about any changes made.

18. Our contacts details:

If you have any doubts or questions related to this Privacy Policy, please contact us in writing via email at comunicacao@ambigroup.com.

19. Latest version.

19.1. 16.04.2024. Odivelas (Portugal).