Privacy Policy and Protection of Personal Data

Reflecting its vision and aligned with the objective of acting responsibly in the community in which it operates and in relations with its clients, the protection of privacy and personal data and their transparent and complete treatment are essential values for REMAIA – Rehabilitation Engineering. For this reason, we treat personal data based on the following principles

– The processing of personal data shall be lawful, fair and transparent;
– It shall be collected only for duly determined, explicit and legitimate purposes, in accordance with applicable law;
– The data collected shall be limited to what is strictly necessary and for as long as necessary for the purposes for which they are processed;
– Only workers, employees and partners of REMAIA – Engenharia da Reabilitação whose functions so require have access to the personal data processed;
– Personal data are treated confidentially.

Personal Information

In accordance with the provisions of data protection law, personal data is any information relating to an identified or identifiable natural person (the data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, electronic identifiers or one or more elements specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. The person responsible for processing the personal data shall be the company REMAIA – Engenharia da Reabilitação. Conditions for processing
REMAIA – Rehabilitation Engineering shall only process personal data if one of the following conditions is met
in data protection legislation, in particular:

– where the data subject has given his or her consent to the processing of his or her personal data;
– where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, or for pre-contractual steps at the request of the data subject;
– When the processing is necessary for the fulfillment of a legal obligation to which REMAIA – Rehabilitation Engineering is subject;
– If the processing is necessary to ensure the legitimate interests of REMAIA – Rehabilitation Engineering.

Storage period for personal data

In line with the above-mentioned principles, the personal data processed by REMAIA – Rehabilitation Engineering are kept for as long as is strictly necessary for the purposes for which they were collected. These periods are determined on the basis of information retention criteria defined and appropriate for each treatment and in compliance with the legal and regulatory obligations imposed on the Company. Rights of the holders of personal data.

REMAIA – Engineering for Rehabilitation ensures that the data subject can exercise the rights conferred on him/her by the legislation on data protection, namely:                     

– Right of access to personal data (the holder of personal data can obtain confirmation as to whether their personal data are processed and access to information about them);

– Right of rectification (the personal data subject may request rectification or completion of rectification);

– Right to erasure (the data subject may request that his or her personal data be erased in certain situations: (i) if the personal data are no longer necessary for the purpose for which they were collected or processed, (ii) if the data subject withdraws the consent on which the processing is based and there is no other legal basis for the processing, (iii) if the data subject opposes the processing and there are no overriding legitimate interests, (iv) if the personal data have been unlawfully processed, (v) if the personal data have to be deleted pursuant to a legal obligation or (vi) if the personal data have been collected in the context of offering information society services);

– Right to restriction of processing (the data subject has the right to request restriction of processing where (i) he or she contests the accuracy of the processing and for a period of time which allows verification of its accuracy, (ii) he or she considers the processing to be unlawful, (iii) the data are no longer necessary for the purpose of processing but are necessary for the purpose of establishing, exercising or defending a right in legal proceedings or (iv) the data subject has objected to the processing and there is no prevailing legitimate interest);

– Right to data portability (where processing is based on consent or performance of a contract and is carried out by automated means, the personal data subject may request the delivery, in a structured, commonly used and machine-readable format, of personal data relating to him or her which he or she has provided and may request that the personal data be transmitted to another controller, provided that this is technically possible);

– Right to object (the personal data subject has the right to object to the processing at any time where (i) the processing is based on the legitimate interest of the data subject or (ii) the processing is carried out for purposes other than those for which the data were collected);

– Right not to be subject to exclusively automated individual decisions (in certain situations, the personal data subject has the right to request human intervention when decisions are taken on the basis of purely automated processing);

– Right to withdraw their consent (the data subject has the right to withdraw their consent to the processing of their personal data);

– Right of complaint before the National Data Protection Commission (on any matters related to the processing of your personal data);

Security Measures

REMAIA – Rehabilitation Engineering has at its disposal security, technical and organizational measures that guarantee the protection of personal data against personal data violations (“personal data violation”: security violation that causes, accidentally or illicitly, the destruction, loss, alteration, disclosure or unauthorized access to personal data transmitted, stored or subject to any other type of treatment) and against any other form of illicit treatment.

The commitment to the protection of personal data also implies that, where personal data are transmitted to other entities, they are obliged to adopt technical and organisational measures to ensure the same level of protection.

Communication of personal data to other entities

In the exercise of its activity, REMAIA – Rehabilitation Engineering may have to communicate or give access to your personal data to other entities, always ensuring that they present technical and organizational measures that adequately protect personal data.

Personal data will only be accessed or shared with the following entities:
– Entities providing services to the Group, e.g. on IT support, document management, legal support, human resources;
– REMAIA clients – Rehabilitation Engineering
– Public authorities (e.g. the Tax and Customs Authority).

Additional Information

If you wish, you can access detailed information on privacy and the processing of personal data at the email address geral@remaia.pt