Privacy Policy

Legal Disclaimer

ROCHA & ROCHA, LDA. values the relationship it maintains with its Clients and Suppliers and has made every effort to implement organizational measures to ensure privacy and respect for rights and freedoms regarding the processing of personal data.

This Privacy Policy aims to explain how ROCHA & ROCHA, LDA. processes Personal Data and ensures its privacy, security, and integrity during the development and execution of its activities.

1. Data Controller

ROCHA & ROCHA, LDA., as the data controller, ensures that personal data processing is carried out only for the purposes for which the data was collected or for compatible purposes.

It collects, uses, and retains only the minimum necessary personal data required for the purpose in question.

ROCHA & ROCHA, LDA. does not transfer personal data for commercial or advertising purposes.

It processes personal data exclusively for legally defined purposes.

2. Principles Applicable to Personal Data Processing

Personal Data Processing is carried out according to the general principles outlined in the General Data Protection Regulation (GDPR) and other relevant data protection legislation, including:

Lawfulness, fairness, and transparency principle
ROCHA & ROCHA, LDA. ensures that personal data will be processed lawfully, fairly, and transparently.
Purpose limitation principle
ROCHA & ROCHA, LDA. collects personal data for specific, legitimate purposes and does not process it further in a way that is incompatible with those purposes.
Data minimization principle
ROCHA & ROCHA, LDA. ensures that only personal data adequate, relevant, and limited to what is necessary for the purposes for which it is processed is collected.
Accuracy principle
ROCHA & ROCHA, LDA. takes appropriate measures to ensure that inaccurate personal data is erased or corrected without delay.
Storage limitation principle
ROCHA & ROCHA, LDA. keeps personal data only for as long as necessary for the purposes for which it was collected.
Integrity and confidentiality principle
ROCHA & ROCHA, LDA. ensures that personal data is processed in a way that guarantees its security, including protection against unauthorized or unlawful processing, as well as against accidental loss, destruction, or damage, by adopting appropriate technical and organizational measures.

3. Personal Data, Data Processing, and Data Subject

Personal Data
Personal data refers to all information or elements that, regardless of their form, allow the identification or rendering identifiable of the Data Subject directly or indirectly, such as a name, identification number, location data, or online identifiers.
Data Processing
Data processing refers to any operation or set of operations carried out on personal data, whether by automated or non-automated means, from collection to destruction. This includes, but is not limited to, recording, organizing, storing, adapting, retrieving, using, disclosing, comparing, limiting, or erasing.
Data Subject
The Data Subject refers to individuals whose personal data is processed by ROCHA & ROCHA, LDA., including employees, partners, job candidates, former employees, employees of partners, suppliers, service providers and their employees, applicants, claimants, visitors, and any individual with a relationship to ROCHA & ROCHA, LDA.

4. Categories of Personal Data Processed by ROCHA & ROCHA, LDA.

In its activities, ROCHA & ROCHA, LDA. processes personal data from various categories of Data Subjects. The personal data collected depends on the nature of the interaction, but may include the following:

Contact data
Commercial data for providing services/products
Payment data
Account data
Security credentials data
IT usage data

Note that you are not required to share personal data with ROCHA & ROCHA, LDA. However, if you decide not to share personal information, in some cases, ROCHA & ROCHA, LDA. may not be able to provide the services or products you desire, offer certain specialized features, or respond effectively to your queries.

5. Purposes for Processing Personal Data

ROCHA & ROCHA, LDA. has specific, explicit, and legitimate purposes for processing personal data in the course of its activities, such as:

Accounting, tax, and administrative management
Commercial and marketing activities
Profile definition and analysis
Access control management
Human resources management
Electronic communications management
Compliance with legal obligations

6. Lawfulness of Processing

In line with the “Lawfulness” principle defined in the applicable data protection laws, ROCHA & ROCHA, LDA. processes personal data only when there is a lawful basis that justifies the processing, such as:

Consent
ROCHA & ROCHA, LDA. will process personal data only if the Data Subject gives explicit consent.
Pre-contractual steps or contract execution
Personal data may be processed if necessary for executing an employment contract, service provision, or product supply, or for pre-contractual steps requested by the Data Subject.
Compliance with legal obligations
ROCHA & ROCHA, LDA. may process personal data to comply with legal obligations under national or EU laws.
Protection of vital interests
ROCHA & ROCHA, LDA. may process personal data to protect the vital interests of the Data Subject, particularly if necessary for life-preserving actions.
Legitimate interests
ROCHA & ROCHA, LDA. or third parties may process personal data based on legitimate interests unless those interests are overridden by the Data Subject's rights and freedoms.

7. Data Retention Period

ROCHA & ROCHA, LDA. retains personal data only for the period necessary to fulfill the specific purposes for which it was collected. However, personal data may be retained for longer periods due to legal obligations, statute of limitations, potential disputes, or regulatory guidance.

Once personal data is no longer necessary or its retention is not required by law, ROCHA & ROCHA, LDA. will safely delete it.

8. Sharing Personal Data

ROCHA & ROCHA, LDA. may share personal data with third-party entities, but only as outlined in this Privacy Policy:

Subcontractors: Personal data may be shared with service providers contracted by ROCHA & ROCHA, LDA. These providers are bound by written agreements and can process data solely for the specific purposes defined.
Other Controllers and Third Parties: Personal data may be shared internally with other ROCHA & ROCHA, LDA. entities, which will comply with applicable data protection rules.
Legal Obligations: Personal data may also be disclosed to legal, regulatory, or supervisory authorities in compliance with applicable laws.

9. Rights and Exercising Rights

The Data Subject has several rights concerning their personal data, which can be exercised in accordance with the Privacy Policy:

Right to Information
The Data Subject has the right to obtain clear, transparent information about how their personal data is used.
Right of Access
The Data Subject has the right to access personal data processed by ROCHA & ROCHA, LDA.
Right to Rectification
The Data Subject can request corrections for inaccurate or incomplete personal data.
Right to Erasure
Known as the "right to be forgotten," this allows the Data Subject to request the deletion of their personal data.
Right to Restriction of Processing
The Data Subject can request the restriction of processing while the accuracy of their data is verified.
Right to Data Portability
The Data Subject can request to receive and reuse certain personal data.
Right to Object
The Data Subject can object to the processing of their data for specific reasons.
Right to Lodge a Complaint
The Data Subject can file a complaint with the relevant supervisory authority if they believe their rights have been violated.

10. Security and Integrity

ROCHA & ROCHA, LDA. ensures that personal data is processed in accordance with security measures designed to protect it from unauthorized access, loss, or damage. However, it cannot guarantee the absolute security of personal data transmitted over open networks, like the internet.

11. Confidentiality

ROCHA & ROCHA, LDA. acknowledges the confidential nature of the information provided by Data Subjects. It does not sell, rent, or disclose personal data to third parties except when necessary for the services outlined in the Privacy Policy or to comply with legal obligations.

12. Changes to this Privacy and Data Protection Policy

ROCHA & ROCHA, LDA. will periodically update this Privacy Policy. Any updates will be posted on the website and will take effect immediately. Regular consultation of this policy is recommended.