Skip to content

Privacy Policy

GENERAL DATA PROTECTION REGULATION (GDPR)

The Municipality of Lourinhã is implementing technical and organizational measures to comply with the applicable legal norms and those applicable in the scope of data protection, privacy and information security, particularly as contained in the General Regulation on Protection, (EU) 2016/279. These measures imply the strengthening of the legal protection of the data subjects' rights and the compliance regulations, as well as a demonstration or evidence of institutional responsibility in terms of data protection and information security. For clarification or additional information or to exercise rights in this area, contact the Municipality by post (Praça José Máximo da Costa, 2534-500 Lourinhã) or by email (protecao.dados@cm-lourinha.pt).

 

Responsibility for the processing of personal data

The Municipality of Lourinhã is the entity responsible for the processing of all personal data provided for the provision of services requested by the data subject or his legal representative.

 

Collecting and Processing of Personal Data

The Municipality of Lourinhã processes personal data strictly to make information available, to administrative procedures in the field of its attributions and competences and to the dissemination of its activities, according to the interactions of the citizens / users through the different channel services and communication.

 

Legal Principles

All data processing operations are guided in accordance with the fundamental legal principles applicable in the scope of data protection and privacy, namely regarding their circulation, lawfulness, loyalty, transparency, end, minimization, conservation, accuracy, integrity and confidentiality, the Municipality of Lourinhã is available to show its responsibility towards the data subject or any other third party that has a legitimate interest in this matter.

 

Treatment law and training

The data processing operations carried out by the Municipality of Lourinhã fit into one or more specific purposes, constituting the legitimacy of the consent of the data subject and the processing considered necessary for:

  • The execution of a contract to which the data subject is a party or for pre-contractual steps at the request of the data subject;
  • Compliance with a legal obligation to which the controller is subject;
  • The exercise of functions of public interest or public authority of which the Municipality of Lourinhã is invested;
  • Effect of legitimate rights pursued by the Municipality of Lourinhã or by third parties;
  • Defense of the vital interests of the data subject or another natural person. The personal data collected, even and eventually, will be processed for statistical purposes, for information dissemination or promotional actions and for communication actions, through direct communication, either by correspondence, by email, messages or any other service. However, with prior information and authorization of express authorization for the latter purposes always ensured, citizens and users can, at any time, exercise their right to use personal data for other purposes that go beyond managing the relationship with the autarchy or municipality.

 

Data Retention Deadlines

Personal data will be kept for as long as necessary for the purposes that motivated your request or further processing, to ensure compliance with all applicable legal rules regarding archiving.

 

Communication of Data to Other Entities

The provision of information, the exercise of municipal powers and the provision of services by the Municipality of Lourinhã to citizens and users through the various service and communication channels, may eventually imply the use of (sub) contracted services from third parties, which may imply access by these entities to personal data of the citizens and users of the public service. In these cases and whenever necessary, the Municipality of Lourinhã will only resort to the contracting of entities that present sufficient guaranties in executing the technical and organizational measures necessary to satisfy the applicable rules, such guarantees being formalized in a contract signed between the Municipality of Lourinhã and each of these third parties.

 

Data Recipients

Except as part of the fulfillment of legal obligations, in no case will there be communication of personal data of citizens and users to third parties that are not legitimate (sub) contracted entities or recipients, and no communication is made for purposes other than those mentioned above.

 

Security measures

Taking into account the most advanced techniques, the application costs and the nature, the scope, the context and the purposes of the treatment, as well as the risks of probability and seriousness for the citizens and users, the Municipality of Lourinhã and all entities that are its (sub) contractors implement the necessary technical and organizational measures to ensure a risk appropriate security level. For this purpose, several security measures may be adopted in order to protect personal data against dissemination, loss, misuse, alteration, treatment or unauthorized access, as well as against any other form of illegal treatment.

It is the exclusive responsibility of citizens and users to keep access codes secret (if applicable), not sharing them with third parties, and in the particular case of the computer applications used to access the service channels, maintain and conserve access devices in safe conditions and follow the security practices recommended by manufacturers and / or operators, namely regarding the installation and updating of the necessary security applications, among others, antivirus applications. If there is a need to (sub) contract services to third parties that may have access to the personal data of users or citizens, the (sub) contractors of the Municipality of Lourinhã will be obliged to adopt the measures and protocols of security, as well as other measures of a technical nature adjusted to protect the confidentiality and security of personal data, to prevent unauthorized access, loss or destruction of personal data.

 

Exercise of the Rights of Personal Data Holders

Citizens and users of the Municipality of Lourinhã may, as holders of personal data, at any time, exercise their data protection and privacy rights, namely the rights of access, rectification, deletion, portability, limitation or opposition to the treatment, under the terms and with the limitations provided in the applicable rules. Any request to exercise data protection and privacy rights must be addressed to the Municipality, in writing, by the respective data holder or legal representative, according to the procedure and contact described below.

 

Complaints and Suggestions

Citizens and users of the Municipality of Lourinhã have the right to file a complaint, either by registering in the Complaints Book, or by filing a complaint with the regulatory authorities. They can also make suggestions through email sent to the following address: protecao.dados@cm-lourinha.pt .

 

Incident Reports

The Municipality of Lourinhã has appointed a Data Protection Officer and has implemented an incident management system within the scope of data protection, privacy and information security. In the event that citizens or users wish to report the occurrence of any situation of violation of personal data that causes, accidentally or unlawfully, the destruction, loss, alteration, disclosure or unauthorized access to personal data transmitted, preserved or subjected to any other type of treatment, they may contact the Data Protection Officer in accordance with the instruction and contact described above.