At START PME, a GVK brand, we handle the personal data of our customers and employees in the strictest respect for the rights and freedoms enshrined by the principles of personal data protection laid down in the General Data Protection Regulation (RGPD) and Act 58/2019.

The protection of data and privacy is assumed by us as a fundamental right that it is important to care for and preserve.

Through this Privacy and Data Protection Policy (hereinafter PPPD), we intend to present in a clear and objective manner, the principles, purposes and means of processing personal data followed by our brand.

1. Main Definitions

Personal data – information relating to a natural person (data subject), which identifies him/her or makes him/her identifiable. Examples: name, an identification number, location data, etc.

Controller – a natural or legal person who determines the purposes of processing and the means by which personal data are processed.

Processing – an operation or set of operations carried out on personal data by automated or non-automated means.

2. Who is the Controller?

GVK, collective entity 516181726 with registered office at Rua Carvalho Freirinha, Nº 43, R/C Dto. 2800-677 Cacilhas is responsible for the processing of personal data collected in the course of interaction with our websites and digital platforms.

3. Processed personal data / Purposes / Periods of Conservation and Grounds of Lawfulness

In Start PME, personal data strictly necessary for the provision of the brand’s services are collected, namely in the contacts that need to be made to meet the needs in the following areas: Raising Community Funds, Banking Intermediation, Raising Investment, Starting a Business, Accounting and Management Support, Feasibility Studies, Internationalization, Marketing, Legal Support, ISO 9001 Certification, ISO 14001 2015 Certification, Process Reengineering, which for the purposes of this PPPD we will consider together as – Customer Management.

Most of the data processed are company data and not personal data, so this PPPD will apply when referring to the processing of personal data. Data may be collected directly, in person or through the use of platforms.

We may also receive personal data indirectly through our service providers who provide services to you on our behalf or our partners.

The following table summarises the purposes and lawfulness grounds on which we process your personal data.

4. How do we collect the data?

Start PME only collects data that is necessary, pertinent and adequate for the purposes defined at the time of data collection.

Data is provided by the data subject by filling in the designated fields on our website or through our digital platforms.

5. Data Security

Start PME is committed to ensuring the confidentiality, protection and security of its Customers’ and Employees’ personal data by implementing appropriate technical and organizational measures to protect their data against any form of improper or illegitimate processing and against any accidental loss or destruction of such data. To this end, we have systems and teams in place to ensure the security of personal data processed, creating and updating procedures to prevent unauthorized access, accidental loss and/or destruction of personal data, and we undertake to respect the legislation on the protection of Customers’ personal data and to process this data only for the purposes for which it was collected, as well as to ensure that such data is treated with adequate levels of security and confidentiality.

6. What are the rights of the data subjects, and how can they exercise them?

Data subjects have the right to access the data processed concerning them, and may in certain circumstances object to the processing of their personal information.

Under certain conditions laid down by law, they may also request the erasure of their personal data and rectify or limit the processing thereof.

To exercise these rights, data subjects can make their request to the following email address: info@start-pme.pt

If you consider that your data has been unlawfully processed, you may lodge a complaint with the supervisory authority – https://www.cnpd.pt

This PPPD may be revised, changing its scope and conditions, so it is recommended to read it paying attention to its latest version.

Updated on: 30/12/2021