Privacy Policy

The protection of personal data is a fundamental commitment of Lopes & Caldas Engenharia, Lda., hereinafter referred to as LC ENGENHARIA, to all those with whom it relates.

In this document, LC ENGENHARIA declares that it remains strongly committed to protecting the privacy of the personal data it processes. In this context, it seeks to explain what personal data it collects, for what purposes it may use it, how it treats it, for how long it keeps it, as well as the ways to contact us and exercise your rights.

1. General Provisions

In accordance with the applicable legislation on the protection of personal data, you should consider the following concepts:

• Personal data: information relating to an identified or identifiable natural person («data subject»); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• Controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
• Processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
• Consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
• Personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

2. Scope of Application

This Policy applies exclusively to the processing of personal data carried out by Lopes & Caldas Engenharia, Lda., NIPC 514 485 701, with headquarters at Rua das Lavadeiras, 51, 4900 - 400 Viana do Castelo.

3. Categories of Data Subjects and Types of Personal Data

The categories of personal data subjects are:

• Collaborators: members of the corporate bodies of LC ENGENHARIA, its workers, interns, service providers, and agents, on a permanent or occasional basis.
• Job Applicants: all those who apply for employment or a position at LC ENGENHARIA.
• Workers at the service of Clients: representatives of the covered company, their spouses, and their respective household, as well as other data subjects, namely service providers (the Client being the entity responsible for the processing).

The processed data may relate to identification data, family status, academic qualifications, professional activity, monthly income/expenses, and other personal data strictly necessary for the execution of contracts, the realization of partnership agreements, the development of the employment relationship, and compliance with legal obligations.

4. Legitimacy of the Processing of Personal Data

LC ENGENHARIA will always process personal data based on the principles of lawfulness, fairness, and transparency, in compliance with specific, explicit, and legitimate needs.

In the scope of the relationship with workers, the processing of personal data bases its legitimacy on the execution of the employment contract and the respective legal framework.

With regard to contracts with other collaborators, the processing of data is done on the basis of the execution of that same contract and when necessary for the purpose of the legitimate interests pursued by LC ENGENHARIA.

Regarding situations in which it acts as a processor, LC ENGENHARIA processes data on behalf of the Controllers, which is necessary for the execution of the contracts concluded.

The processing of personal data may also result from a legal obligation, when it is necessary to comply with a legal obligation to which LC ENGENHARIA is subject. For other situations not previously provided for, the informed and explicit consent of the data subject must always be collected.

5. Purpose of the Processing of Personal Data

LC ENGENHARIA, in the scope of its activity, may process the personal data necessary for the pursuit of its mission and attributions, the processing of personal data having the following purposes:

• Administrative and operational management of the contractual relationship;
• Pre-contractual and contractual execution;
• Employment relationship processing;
• Management of job applications (recruitment and selection);
• Development of information actions (technical information);
• Promotion of marketing and commercial prospection;
• Execution of legal obligations.

6. Retention Periods of Personal Data

LC ENGENHARIA processes your personal data according to the purposes for which they are collected and only for the period of time necessary to fulfill the purposes that motivated their collection and retention, and always in accordance with the law.

The duration will be equivalent to the validity of the contractual relationship, unless legal provisions determine the obligatoriness of processing these same data for longer periods. The processed data will be kept for the periods strictly necessary to comply with underlying legal obligations.

7. Recipients of Personal Data

For the purpose of achieving the previously defined purposes, personal data may be transmitted to:

• Public bodies or authorities due to a legal obligation;
• Entities to whom the data must be communicated by force of legal provision or at the request of the data subject;
• Financial institutions that manage the accounts of LC ENGENHARIA, destined for the payment of the remuneration/fees of collaborators;
• Entities managing pension funds or the social security regime;
• Insurance companies with whom the insurance contract for work accidents or personal accidents is celebrated, or another if applicable;
• Training entities for issuing training certificates and organizing pedagogical files;
• Consulting and auditing entities in the scope of contracted services;
• Entities that, in the scope of occupational medicine and safety, ensure at any time the compliance with these obligations at LC ENGENHARIA;
• Entities ensuring computer management;
• Other recipients whose intervention proves necessary for the execution of the designated purposes.

External entities to whom personal data are provided, due to the need arising from the service they provide, are subject to compliance with legal obligations regarding data protection, in their capacity as processors.

8. Transfer of Personal Data

LC ENGENHARIA does not transfer personal data to any other country.

In situations where LC ENGENHARIA assumes the role of processor, and in the event of being obliged to transfer data to a third country or to an international organization (by virtue of Union law or the law of the Member State), it informs the controller of this legal obligation before processing, unless the law in question prohibits such information for reasons of public interest.

9. Job Applicants – Recruitment and Selection

Open job opportunities:

With regard to applications for vacancies, LC ENGENHARIA may process the personal data of the data subjects who here assume the quality of candidates, to develop the respective recruitment and selection processes. Thus, the processing of data is necessary for the realization of pre-contractual steps at the request of the data subject who explicitly and freely presents his or her application.

In the very support for disseminating the open opportunity, a reference to this policy is included so that candidates are aware, in advance, of all relevant information.

Personal data will be kept for this purpose for 12 months after the end of the recruitment and selection process. If admission occurs, personal data will be kept for the defined legal periods, namely that provided for in labor law.

Spontaneous applications:

Any spontaneous application must be sent to the email info@lcengenharia.pt with the subject line "Candidatura espontânea".

Upon receipt of it, the candidate will receive an informative email about the processing of personal data relating to the application submitted. The personal data collected through a spontaneous application may be considered for the purposes of recruitment and selection processes applicable to the identified position or others related to the candidate's skill profile. These same data will be kept for a period of 12 months from the date of receipt of the application.

10. Security of the Processing of Personal Data

LC ENGENHARIA implements appropriate technical and organizational measures to protect the personal data in its possession. Based on the principle of data minimization and necessity, LC ENGENHARIA keeps personal data securely, only for the minimum period strictly necessary to comply with its contractual and legal obligations.

At the level of the implemented security systems, we highlight:

• Servers located in Portugal;
• Installation of antivirus and firewall;
• Resource to backups on a regular basis;
• Mandatory use of password for access to workstations;
• Creation of an Internal Code of Conduct of mandatory use by the entire team of collaborators;
• Promotion of awareness actions for the theme.

11. Rights of the Personal Data Subjects

The personal data subject has the right to information, access, rectification, restriction of or objection to processing, portability, and erasure of their personal data.

The subject may withdraw at any time the consent they have given for the processing of their personal data. The withdrawal of consent shall not affect the lawfulness of the processing of personal data carried out up to that point based on the consent previously given.

The exercise of rights by the subject must always be done in writing, by sending an email to info@lcengenharia.pt or sending the request to the address of the company's headquarters.

This exercise is free of charge, unless it is a request that is manifestly unfounded, excessive, or unjustifiably repeated, in which case a reasonable fee may be charged taking into account operational costs.

The response to requests must be provided, without undue delay, within one month from receipt of the request, unless it is an especially complex request or occurs in exceptional circumstances, in which case it may be extended up to two months.

Within the scope of the request, you may be asked to prove your identity in order to ensure that the sharing of personal data is only done with the respective subject.

12. Personal Data Breaches

In case of a data breach, and to the extent that such breach is likely to imply a high risk to the rights and freedoms of the data subject, LC ENGENHARIA, as Controller, will directly communicate to the Control Authority (CNPD) the personal data breach, within 72 hours after having become aware of the incident. If it assumes itself as a processor, it undertakes to communicate the incident to the respective Controller within the established period.

13. Suggestions and Complaints

To find out more information or to submit any complaint, please contact us via the email address info@lcengenharia.pt.

If you wish, you can submit a complaint directly to the National Data Protection Commission (CNPD), through the contacts available at https://www.cnpd.pt/.

14. Update of the Privacy Policy

To ensure that the data we hold is kept up to date, we would be grateful if, in case of modification, you would also contact us at info@lcengenharia.pt so that we can proceed with the proper rectification.

LC ENGENHARIA reserves the right, at any time, to make adjustments or changes to this Privacy Policy, and these changes will be properly made available on our website.