Privacy Policy

Toogas ensures the protection of all personal data provided to it through this website, continuously optimizing the set of procedures and techniques designed to ensure compliance with the General Data Protection Regulation – GDPR – approved by Regulation (EU) 2016/679 of April 26, 2016.

This Policy aims to inform Users about how their personal data is processed when browsing this website. Each time you use this website, your personal data will be processed in accordance with the Privacy Policy in force at that time, so we suggest you regularly consult this Privacy Policy.

For more information on how your data is processed while browsing one of the websites of the companies that make up the 1SA Group, please consult the Privacy Policy available on the respective websites.

1. Data Controller

The Data Controller for your data is Toogas, Lda, with NIPC 508525799.

2. Data Collected

During the use of the website, Toogas collects personal and non-personal information. Personal data refers to any information related to an identified or identifiable natural person. Thus, personal data such as:

Name
Email address
Telephone contact
Date of Birth
Nationality
Location
Experience
Curriculum

Before sending the first promotional message or newsletter, the data subject’s express consent will be requested for sending this type of message. This consent will be requested via email, and the data subject will only receive messages if they respond positively.

n addition to the personal data listed above, other data is also collected to ensure the technical functionality of the website and guarantee the stability and security of navigation, such as:

User’s IP address
Date and time of request or registration
Content of the request (specific page)
Data volume and page transmitted
Origin of the request
Browser type
User’s operating system
Language and version of browser software
Referral URLs
Websites visited by the user’s system through our website

3. Purposes and Lawfulness of Processing

During the use of this website, Toogas will collect your personal data for the following purposes based on the following legal bases:

Registration and management of recruitment and selection processes
Pre-contractual steps and execution of contracts (Article 6(1)(b) GDPR)
Management of contact requests, information, and complaints
Pre-contractual steps at the request of the data subject, legitimate interest of Toogas (Article 6(1)(a) and (f) GDPR)
Sending direct marketing communications
Consent of the data subject (Article 6(1)(a) GDPR)

Before sending you the first marketing communication, your express consent will be requested for sending communications from Toogas. In each communication, you will be given the opportunity to withdraw your consent.

Your personal data may also be processed whenever there is another legal basis that legitimizes such processing, including:

Toogas’ legal obligation (Article 6(1)(c) GDPR)
Legitimate interest of Toogas, as long as this interest does not override your fundamental rights and freedoms (Article 6(1)(f) GDPR)
Defense of your vital interests or those of a third party (Article 6(1)(d) GDPR)

4. Data Retention Period

Toogas will store your personal data for the strictly necessary time to achieve the purpose for which they were collected and may also retain some of your personal data to the extent necessary to comply with its legal obligations, as well as to manage or enforce its rights.

Once the retention periods mentioned above have elapsed, the personal data will be permanently deleted from our databases.

5. Data Sharing

Toogas may share your personal data with third parties, namely, with service providers or other public entities, to the extent necessary for the pursuit of its activity. Whenever this happens, Toogas will ensure that such entities are in a position to comply with their obligations regarding privacy and personal data protection.

Toogas does not transfer or store your personal data to geographical regions that do not provide the same level of data protection as provided by entities located in the European Economic Area (EEA). All data transfers are carried out in compliance with applicable legislation, using legally established mechanisms for this purpose.

6. Data Subject Rights

Under the current legislation on personal data protection, Toogas ensures you the following rights as a data subject:

Right to be informed:

At the time of personal data collection
Of the contact details of the data controller
Of the processing purposes
Of the retention period
Of your rights as personal data subjects
Of the possibility of recourse to the supervisory authority for the submission of complaints (and respective contacts)
Of the (possible) existence of automated decisions and/or profiling
To know where your data is stored and how it is processed
To be informed of how the Data Controller complies with its data protection obligations

Right of access:

– The data subject can access their personal data; confirm the existence or non-existence of processing of their data, and request a copy of the data

Right to object to processing:

– The data subject has the right to object to processing for reasons related to their particular situation

Right to rectification:

– The data subject has the right to rectify their personal data if it is incorrect, outdated, or incomplete

Right to erasure:

– The data subject can request the deletion of their data provided that, in the specific case, all requirements are met

Right to data portability:

– The data subject has the right to receive the personal data concerning them and that they have provided, in a structured, commonly used, and machine-readable format; and the right to transmit this data to another data controller whenever:

– The processing is based on consent or a contract

– The processing is carried out by automated means

Right to restriction of processing:

– In certain situations, which must be assessed on a case-by-case basis, the data subject has the right to request the restriction of the processing of their data

The exercise of rights by data subjects can be done through the email address [email protected], or in writing to Toogas’ postal address, where they identify themselves and indicate the situation that is the subject of their request, with:

A/C: Privacy Toogas, Lda

Address: Rua Antero de Quental, 351 – 4455-586 Perafita

You may also file a complaint with the National Data Protection Commission (CNPD) and/or obtain redress and/or compensation if you believe that the processing carried out violates your rights and/or the applicable legislation on personal data protection and privacy.

7. Data Security

Toogas uses a set of appropriate security technologies and procedures to protect your personal data from unauthorized access, use, or disclosure, such as access control, user activity logging, and penetration testing.

Your personal data is stored for hosting and backup on servers located in Portugal, in a secure environment, protected from unauthorized access.

As a user, you should protect your devices against viruses or other threats that may compromise your security, using specific programs for this purpose.

8. Data Protection Officer

Toogas has appointed a Personal Data Protection Officer, whose functions are:

– Monitoring compliance of personal data processing operations with the applicable legislation in force

– Providing advice on privacy and personal data protection

– Cooperate with the CNPD (National Data Protection Commission)

– Act as a point of contact with the CNPD, with the Supervisory Authorities of other European Union Member States, and with personal data subjects

For clarification on any matters related to your privacy and the protection of your personal data, you may contact the Data Protection Officer at the following email address: [email protected]