Privacy Policy

Nevsta, as the owner and manager of the contents of this website, informs users that it complies with the data protection regulations in force, and in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and by which Directive 95/46/EC (General Data Protection Regulation) is derogated and with Law 58/2019 of 8 August which ensures the implementation, in the national legal order, of the General Data Protection Regulation.

The purpose of this Policy is to inform you about the methods of processing personal data concerning you.

Type of data processed

The website offers informative and sometimes interactive content. While browsing the site, Nevsta may acquire information about the visitor in the following ways:

Browsing data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser and the parameters of the device used to connect to the site, the operating system, the domain name and addresses of the site from which access was made, information on the pages visited by users within the site, the date and time of access, the time spent on each page and, possibly, the number of clicks, the analysis of the internal path and other parameters related to navigation, the user’s computer environment and the web page from which the visitor originates (reference) and exits. The above information is processed automatically and collected exclusively in aggregate form in order to verify the correct functioning of the site and for security reasons. This information will be processed in accordance with the legitimate interests of the data controller.

Additional categories of data

This is all personal data provided by the visitor via the website or by third parties via email, for example:

• filling in a form to request a quote and/or information on the services offered and/or a contact request and/or to download exclusive content;
• write to the email addresses indicated on our website to request information;
• access a reserved area and/or a service;
• fill in a form to send your curriculum vitae;
• fill in a form to receive our newsletter and marketing communications.

Purpose of processing

The data provided is processed for the following purposes:

• Providing the good and/or service requested by the user, managing the contracts submitted by the user, completing the related administrative, accounting, tax and legal requirements, as well as fulfilling the requests submitted by the user.
• To understand the experience of using our platforms, the products and services we offer and to ensure the correct functioning of the web pages and their contents. The processing carried out for these purposes is based on a legitimate interest of the Data Controller.
• To send commercial communications regarding promotions and/or offers, in the interest of the Data Controller; the processing implemented for these purposes is carried out with the specific consent provided by the user.

Sharing and transfer of personal data

The data collected by Nevsta will only be shared for the purposes mentioned above; we will not share or transfer your personal data to third parties other than those indicated in this Privacy Policy. In the course of our business and exclusively for the same purposes as those listed in this Privacy Policy, your personal data may be transferred to the following categories of recipients:

• Employees of Nevsta and other group companies;
• Service providers (e.g. IT system providers, cloud service providers, database providers and other consultants);
• Any public and/or private entity that requests the communication of your personal data for the aforementioned purposes.

If necessary, the personal data we obtain from you may be transferred, accessed and stored at a destination outside the European Economic Area (“EEA”). It may also be processed by employees operating outside the EEA who work for us or for one of our service providers. These transfers to third countries may include all of the above processing activities.

Nevsta only transfers personal data outside the EEA securely and lawfully. As it is possible that some countries do not have legislation regarding the use and transfer of personal data, we take steps to ensure that third countries comply with the commitments set out in this Policy. These steps include reviewing third-party privacy standards and entering into contracts in accordance with the requirements of the European regulation.

Protection of personal data

Nevsta has implemented appropriate technical and organizational measures to provide an adequate level of security and confidentiality for personal data. These measures take into account:

• the state of the art of technology;
• the costs of implementing them;
• the nature of the data;
• the risk of processing.

The aim is to protect them against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and other forms of unlawful processing. In addition, when managing your personal data, Nevsta collects and processes personal data that is adequate, relevant and not excessive, as necessary to fulfill the aforementioned purposes and ensures that this personal data remains up-to-date and accurate.

Data retention periods

Without prejudice to your right to object to the processing of personal data and/or request their deletion, your personal data will be kept for the duration of the contractual relationship between you and Nevsta or for the time necessary to achieve the purpose for which they were collected, and Nevsta may also keep these data for a period established by legal imposition, as well as that established for the prescription of certain legal actions, unless for logical and evident reasons they have lost their usefulness or the purpose for which they were collected. When this period expires, your personal data will be removed from Nevsta’s active systems.

Your rights

Users/data subjects may, in relation to their personal data collected in the manner described in this Privacy Policy, exercise the rights recognized in the General Data Protection Regulation, in particular: the rights of access, rectification, erasure, data portability, limitation and opposition to processing.

The rights referred to in the previous paragraph may be exercised by each user through a written and signed request, addressed to the following address: Nevsta- Paper & Technology Lda, Parque Industrial de Ponte, Fase 1, Pavilhão D7, 4801-911 Ponte GMR. You can also send this information by e-mail to the following address: privacidade@joseneves.pt. In addition, users are informed that they can withdraw their consent to the processing of their data at any time, and that the withdrawal of consent does not compromise the lawfulness of the processing carried out on the basis of the consent previously given. Data subjects can also lodge a complaint with the National Data Protection Commission whenever they consider it appropriate.