{"id":6705,"date":"2026-05-07T14:14:20","date_gmt":"2026-05-07T14:14:20","guid":{"rendered":"https:\/\/upportugal.bomontec.net\/?page_id=6705"},"modified":"2026-08-20T14:51:08","modified_gmt":"2026-08-20T14:51:08","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/upportugal.bomontec.net\/en\/politica-de-privacidade\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"6705\" class=\"elementor elementor-6705\" data-elementor-post-type=\"page\">\n\t\t\t\t<div data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-element elementor-element-82f61c7 e-flex e-con-boxed e-con e-parent\" data-id=\"82f61c7\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d3509b8 elementor-widget elementor-widget-heading\" data-id=\"d3509b8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Privacy Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ac742bf elementor-widget elementor-widget-text-editor\" data-id=\"ac742bf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">This policy contains the rules applicable to the collection and processing of personal data by Upcoop Portugal. On its website, in compliance with Regulation (EU) 2016\/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).<\/span><\/p><h2>\u00a0<\/h2><h2><b>General Provisions<\/b><\/h2><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">This policy applies to all personal data processed <\/span><span style=\"font-weight: 400;\">\u200b\u200b<\/span><span style=\"font-weight: 400;\">by Upcoop Portugal;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">This policy applies to all professionals and partners and any third parties who have or may have access to personal data processed by Upcoop Portugal;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">This policy does not replace any clauses that are the subject of a specific agreement with any third party, whether a client, partner, supplier or collaborator. In this case, this policy may supplement such documents, but does not replace them. Data subject or user are terms used interchangeably in this Policy to designate the holder of personal data;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The Data Protection Manager will take responsibility for Upcoop Portugal's ongoing compliance with this policy.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>What are the principles regarding the processing of personal data?<\/b><\/h2><p><span style=\"font-weight: 400;\">Upcoop Portugal is committed to processing personal data in accordance with the requirements of the GDPR.<\/span><\/p><p><span style=\"font-weight: 400;\">Article 5<\/span><span style=\"font-weight: 400;\">\u00ba<\/span><span style=\"font-weight: 400;\"> Article 6 of the GDPR requires that personal data be:<\/span><\/p><ul><li><span style=\"font-weight: 400;\">Object of lawful, fair and transparent processing in relation to the data subject;<\/span><\/li><li><span style=\"font-weight: 400;\">Collected for specified, explicit and legitimate purposes and may not be further processed in a manner incompatible with those purposes; further processing for archiving purposes in the public interest, or for scientific or historical research purposes or for statistical purposes is not considered incompatible with the original purposes;<\/span><\/li><li><span style=\"font-weight: 400;\">Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;\u00a0<\/span><\/li><li><span style=\"font-weight: 400;\">Accurate and up-to-date whenever necessary; all appropriate measures must be taken so that inaccurate data, taking into account the purposes for which it is processed, is erased or rectified without delay;<\/span><\/li><li><span style=\"font-weight: 400;\">kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed; personal data may be kept for longer periods provided that they are processed solely for archiving purposes in the public interest, or for scientific or historical research purposes, or for statistical purposes, subject to the application of appropriate technical and organizational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject; and<\/span><\/li><li><span style=\"font-weight: 400;\">processed in a manner that ensures their security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by taking the measures<\/span> <span style=\"font-weight: 400;\">appropriate technical or organizational.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>How do we guarantee Lawfulness, Fairness and Transparency in the processing of personal data?<\/b><\/h2><ul><li><span style=\"font-weight: 400;\">To ensure that data processing is carried out lawfully, fairly and transparently, Upcoop Portugal maintains a GDPR Management System;<\/span><\/li><li><span style=\"font-weight: 400;\">When necessary, considering the legal basis on which the data is processed, measures will be taken to ensure that the data is kept up to date;<\/span><\/li><li><span style=\"font-weight: 400;\">Data subjects have the right to access, rectify, portability and erasure of their personal data. They also have the right to restrict processing and to lodge a complaint with the supervisory authority, the National Data Protection Commission (CNPD);<\/span><\/li><li><span style=\"font-weight: 400;\">Any requests made to Upcoop Portugal must be dealt with in good time.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>What is the legal basis for processing personal data?\u00a0<\/b><\/h2><ul><li><span style=\"font-weight: 400;\">Data processing must be carried out in accordance with one of the following legal grounds: consent, performance of a contract, compliance with a legal obligation, defense of vital interests, exercise of functions in the public interest or legitimate interests;<\/span><\/li><li><span style=\"font-weight: 400;\">Upcoop Portugal will register the legal basis applicable to each data processing;<\/span><\/li><li><span style=\"font-weight: 400;\">When consent is invoked as a legal ground for data processing, evidence of consent must be kept with the personal data;<\/span><\/li><li><span style=\"font-weight: 400;\">When communications are sent to data subjects based on their consent, the option to revoke consent must be clearly available and the GDPR management system must ensure that such revocation is accurately reflected in Upcoop Portugal's records.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>How do we guarantee data minimization?<\/b><\/h2><p><span style=\"font-weight: 400;\">Upcoop Portugal guarantees that the personal data processed is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.<\/span><\/p><h2>\u00a0<\/h2><h2><b>Who is responsible for processing your personal data?<\/b><\/h2><ul><li><span style=\"font-weight: 400;\">Contact details of the Data Controller:<br \/><\/span>Le Ch\u00e8que D\u00e9jeuner Portugal S.A, with the trading name Upcoop Portugal, with registered office at Avenida Infante D. Henrique, n\u00aa333-H, Edif\u00edcio Lisboa Oriente Office, escrit\u00f3rio 16, 1800-282 Lisboa, with the registration and legal person number 508907608.<\/li><li><span style=\"font-weight: 400;\">Contact details of the Data Protection Officer:<br \/><\/span>Upcoop Portugal has appointed a Data Protection Officer. For any questions related to data protection contact: dpo@Upcoop-portugal.pt.<\/li><\/ul><h2>\u00a0<\/h2><h2><b>For what purpose do we process your personal data?<\/b><\/h2><ul><li><span style=\"font-weight: 400;\">Upcoop Portugal, as an employer, processes, collects and stores the personal data of employees, contractors and consultants.<\/span><\/li><li><span style=\"font-weight: 400;\">As part of its activity, Upcoop Portugal issues service tickets and manages tax and social benefits. To this end, Upcoop Portugal needs to collect personal data for the following purposes:<\/span><ul><li><span style=\"font-weight: 400;\">Managing relationships with clients, partners and suppliers;<\/span><\/li><li><span style=\"font-weight: 400;\">Management of titles and benefits;<\/span><\/li><li><span style=\"font-weight: 400;\">Commercial communications, provided that the user has given their consent and has not refused the use of their contacts for this purpose.<\/span><\/li><\/ul><\/li><\/ul><h2>\u00a0<\/h2><h2><b>What personal data do we process?<\/b><\/h2><p><span style=\"font-weight: 400;\">Personal data is any information that makes it possible to directly or indirectly identify a natural person, the data subject.<\/span><\/p><p><span style=\"font-weight: 400;\">Upcoop Portugal processes the following categories of personal data:<\/span><\/p><ul><li><span style=\"font-weight: 400;\">Identification data (e.g. name, identification document number, tax identification number, photograph);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Contact details (e.g. address, telephone number or email address);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Biographical data: (e.g. date of birth, gender, nationality, place of birth, marital status);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Invoice data (e.g. TIN, amount, date, IBAN);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Products and services (e.g. meal card number);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Family life (e.g. household, number of children);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Professional life (e.g. profession, working hours, remuneration);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Access accounts (e.g. user account, user authentication credentials);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Content: Information (for example: contained in written communications between users and Upcoop Portugal, recorded calls (video and\/or audio));<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transactions (e.g. entries and exits);<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use of websites and applications (for example: pages visited, or information about the equipment used (e.g. IP address, geographical location, browser used)).<br \/><\/span><\/li><\/ul><p><span style=\"font-weight: 400;\">Upcoop Portugal has access to personal data as follows:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">By the data subject by filling in the form available on the website or by email;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Directly from the companies that hire us. For example: When a client is registered, they provide us with their employees' details so that we can manage their titles and benefits;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Indirectly from other external sources. For example, from partners who tell us about the use of titles or the use of benefits;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In the process of acquiring products and services For example: when acquiring a meal card;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In letters or e-mails sent to Upcoop Portugal;\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Participation in Upcoop Portugal promotional activities;<\/span><\/li><li style=\"font-weight: 500;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In response to satisfaction surveys<\/span><span style=\"font-weight: 500;\"><span style=\"font-weight: 500;\">.<\/span><\/span><\/li><\/ul><p><span style=\"font-weight: 400;\">Obligation to provide personal data:<\/span><\/p><p><span style=\"font-weight: 400;\">Within the scope of pre-commercial, commercial and contractual relations, it is mandatory to submit and process some personal data of Employees, Suppliers, Partners, Customers, potential Customers and others, necessary for the fulfillment of pre-contractual and contractual obligations and diligences, or those arising from the regulations in force. As a general rule, without this data Upcoop Portugal will have to refuse to enter into the contract or terminate the contract.<\/span><\/p><h2>\u00a0<\/h2><h2><b>Who do we pass on your personal data to?<\/b><\/h2><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Personal data may be disclosed to third parties when we have a legitimate basis for doing so or when the third party is processing data on our behalf, the contractual relationship being regulated by a contract in which the security measures and organization of the processing are defined and in which it is specified that it only acts on instructions from Upcoop Portugal;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Personal data may also be disclosed if necessary to comply with a legal obligation, statute or court order; for the purpose of obtaining legal advice; in connection with or for the purpose of exercising or defending a right in legal proceedings or when necessary for the defense of a legal claim; or to safeguard national security;<\/span><\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\">Personal data is processed by Upcoop Portugal services and may be transmitted to other Upcoop Group companies that provide complementary services essential to the pursuit of the stated purposes;<\/li><li style=\"font-weight: 400;\" aria-level=\"1\">Personal data may be transmitted to commercial establishments belonging to the network of partners in relation to commercial transactions that take place there at the indication of the data subject;<\/li><li style=\"font-weight: 400;\" aria-level=\"1\">All professionals and partners must avoid any inappropriate disclosure of personal data and comply with the general duties of confidentiality.<\/li><\/ul><h2>\u00a0<\/h2><h2><b>Do we transfer personal data internationally outside the European Union?<\/b><\/h2><p><span style=\"font-weight: 400;\">Upcoop Portugal does not transfer personal data outside the European Union.<\/span><\/p><h2>\u00a0<\/h2><h2><b>How long do we keep your personal data?<\/b><\/h2><p><span style=\"font-weight: 400;\">To ensure that personal data is kept for as long as is strictly necessary for the purpose for which it is processed, Upcoop Portugal has adopted a Data Retention and Disposal Policy for each process for which personal data is processed.<\/span><\/p><p><span style=\"font-weight: 400;\">The Retention and Disposal Policy considers which data should be kept, for how long and why. Beyond this period, some data may be kept for archival or statistical purposes, for which they will first be anonymized.<\/span><\/p><p><span style=\"font-weight: 400;\">Personal data processed by Upcoop Portugal is stored for the period necessary to fulfill the purposes set out in this regulation<\/span><\/p><p><span style=\"font-weight: 400;\">The personal data processed will be kept secure in order to safeguard their confidentiality, integrity and availability. To this end, Upcoop Portugal has adopted technical and organizational measures to prevent unauthorized use or access, modification, unlawful or accidental destruction and accidental loss.<\/span><\/p><h2>\u00a0<\/h2><h2><b>What are the rights of the data subject?<\/b><\/h2><p><span style=\"font-weight: 400;\">Upcoop Portugal guarantees the exercise of the rights of data subjects in relation to their processing.<\/span><\/p><p><span style=\"font-weight: 400;\">The data subject has the following rights in terms of personal data protection:<\/span><\/p><ul><li>Access: Without prejudice to the protection of the rights of third parties, Data Subjects have the right to have access to personal data concerning them, as well as to obtain information on the respective processing conditions;<\/li><li><span style=\"font-weight: 400;\">Rectification: Data Subjects have the right to request the rectification of inaccurate or incomplete personal data (e.g. address, email address, telephone contacts);<\/span><\/li><li><span style=\"font-weight: 400;\">Objection Data Subjects have the right to object to data processing based on Upcoop Portugal's legitimate interest;<\/span><\/li><li><span style=\"font-weight: 400;\">Withdrawal of consent: Data subjects have the right to withdraw the consent they have given for data processing based on it;<\/span><\/li><li><span style=\"font-weight: 400;\">Oblivion: Data Subjects have the right to obtain the erasure of their personal data held by Upcoop Portugal, provided that there are no valid grounds for its retention (e.g. compliance with a legal obligation, defense of Upcoop Portugal or third parties in legal proceedings);<\/span><\/li><li><span style=\"font-weight: 400;\">Limitation: Data Subjects have the right to request the limitation of data processing when:<\/span><ul><li><span style=\"font-weight: 400;\">have contested the accuracy of the personal data and for a period that allows Upcoop Portugal to verify its accuracy;<\/span><\/li><li>the processing is unlawful and they oppose the erasure of their personal data;<\/li><li>Upcoop Portugal no longer needs the personal data, but such data is required by the Data Subjects for the purposes of declaring, exercising or defending a right in legal proceedings;<\/li><li>have objected to the processing and during the period of evaluation of the request by Upcoop Portugal.<\/li><\/ul><\/li><li>Portability: Data Subjects have the right to receive the personal data they have provided to Upcoop Portugal in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller.<\/li><\/ul><h2>\u00a0<\/h2><h2><b>How do I exercise my rights?<\/b><\/h2><p><span style=\"font-weight: 400;\">To exercise your rights, please contact Upcoop Portugal at <span style=\"text-decoration: underline;\">dpo@up-portugal.pt<\/span> or by letter to Le Ch\u00e8que D\u00e9jeuner Portugal S.A., trading as Upcoop Portugal, Avenida Infante D. Henrique, n\u00aa333-H, Edif\u00edcio Lisboa Oriente Office, escrit\u00f3rio 16, 1800-282 Lisboa - Portugal.<\/span><\/p><p><span style=\"font-weight: 400;\">Upcoop Portugal will respond to requests within a maximum of 30 days, except for particularly complex requests. <\/span><span style=\"font-weight: 400;\">In these cases, Upcoop Portugal will inform the owners about:<\/span><\/p><ol type=\"a\"><li><span style=\"font-weight: 400;\">the need to extend the deadline for response by a further maximum of 60 days, <\/span><\/li><li><span style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">of the respective justification.<\/span><\/span><\/li><\/ol><p><span style=\"font-weight: 400;\">Whenever Upcoop Portugal considers that it is not possible to respond to requests, data subjects will be informed of Upcoop Portugal's reasons within the time limits established above.<\/span><\/p><p><span style=\"font-weight: 400;\">The exercise of rights is free of charge, except in situations considered excessive, anomalous and\/or in bad faith. In these situations, Upcoop Portugal will inform the data subjects in advance of the fees to be charged and their justification.<\/span><\/p><p><span style=\"font-weight: 400;\">Upcoop Portugal has appropriate mechanisms for verifying and confirming the identity of data subjects who wish to exercise their rights. Only those whose identity can be confirmed will be attended to, and through a channel that allows evidence of the request and the respective response to be kept.<\/span><\/p><p><span style=\"font-weight: 400;\">If you so wish, you can also lodge a complaint with the National Data Protection Commission (CNPD). <\/span><span style=\"text-decoration: underline;\"><a href=\"http:\/\/www.cnpd.pt\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">www.cnpd.pt<\/span><\/a><\/span><span style=\"font-weight: 400;\">.<\/span><\/p><h2>\u00a0<\/h2><h2><b>What do we do in the event of a data breach?<\/b><\/h2><p><span style=\"font-weight: 400;\">In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to personal data, Upcoop Portugal will assess the risk to the rights and freedoms of data subjects and, if appropriate, report this breach to the CNPD (National Data Protection Commission).<\/span><\/p><h2>\u00a0<\/h2><h2><b>How do we protect your data?<\/b><\/h2><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Upcoop Portugal will maintain data security by protecting the confidentiality, integrity and availability of personal data;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To ensure data security, it has adopted technical and organizational measures to prevent unauthorized use or access, modification, unlawful or accidental destruction and accidental loss;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Access to personal data is controlled and restricted to professionals who need to access it, in accordance with the Information Security Policy, and appropriate security measures have been adopted to prevent unauthorized sharing of information;<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The deletion of the data is done securely, so that the data is unrecoverable.<\/span><\/li><\/ul><h2>\u00a0<\/h2><h2><b>Changes to the Policy<\/b><\/h2><p><span style=\"font-weight: 400;\">Upcoop Portugal may amend this notice from time to time to reflect changes in legislation or changes to the site itself and its contents.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">The latest version will always be available on the Upcoop Portugal website.<\/span><\/p><p>New version approved by Upcoop on April 29, 2026.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Pol\u00edtica de Privacidade A presente pol\u00edtica cont\u00e9m as regras aplic\u00e1veis \u00e0 recolha e tratamento de dados pessoais por parte da Upcoop Portugal. No seu site, em cumprimento com o Regulamento (EU) 2016\/679 do Parlamento europeu e do Conselho de 27 de abril de 2016 relativo \u00e0 prote\u00e7\u00e3o das pessoas singulares no que diz respeito ao [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-6705","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/upportugal.bomontec.net\/en\/wp-json\/wp\/v2\/pages\/6705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/upportugal.bomontec.net\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/upportugal.bomontec.net\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/upportugal.bomontec.net\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/upportugal.bomontec.net\/en\/wp-json\/wp\/v2\/comments?post=6705"}],"version-history":[{"count":16,"href":"https:\/\/upportugal.bomontec.net\/en\/wp-json\/wp\/v2\/pages\/6705\/revisions"}],"predecessor-version":[{"id":15273,"href":"https:\/\/upportugal.bomontec.net\/en\/wp-json\/wp\/v2\/pages\/6705\/revisions\/15273"}],"wp:attachment":[{"href":"https:\/\/upportugal.bomontec.net\/en\/wp-json\/wp\/v2\/media?parent=6705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}