Privacy Policy
The Ocean 9 site belongs to Invasão D’Linhas, committed to protecting the privacy and data of our users. We are responsible for the processing of personal data according to the General Data Protection Regulation.
We use cookies and similar technologies to improve the browsing experience on Ocean 9. These help remember preferences and actions, not collecting information that identifies the user. Learn more about cookies in the website’s Terms and Conditions.
Know more in our Terms and Conditions.
The processing of personal data carried out through Ocean 9 complies with Regulation (EU) 2016/679. The data provided through forms on our site are used exclusively to respond to requests and questions. We do not add this data to any database without prior consent.
The Ocean 9 site holds a valid SSL certificate that encrypts communication between the user’s computer and the server where the site is hosted.
We use a subcontractor for hosting services. We assume that all necessary technical and organisational measures are carried out to maintain the integrity and confidentiality of users’ data. The subcontractor may have access to data holders’ data when necessary for maintenance or technical assistance.
The personal data processed by us are not transferred to third parties except for legal requirement requests from competent entities. Unless otherwise indicated or for legal reasons, the data collected will only be kept for the period strictly necessary for the purposes of processing, ensuring their destruction as soon as the purpose ceases. Data subjects are considered to be all natural persons who can be identified or identifiable by any information, regardless of its nature or support. An identifiable person is one whose identity can be obtained by analysing one or more data.
Rights of the personal data subject
The personal data subject has the following rights:
Right to request access to their personal data
The right of access allows the data subject to know whether or not their data is being processed and, if so, to obtain information such as, for example, the purposes of processing, the categories of data that are processed, the recipients to whom they were or will be communicated, the expected period of conservation of personal data or, if not possible, the criteria used to determine this period.
Right to rectification
The personal data subject has the right to obtain from the data controller, without undue delay, the rectification of inaccurate or incomplete data concerning them.
Right to limitation of their processing
The right to limitation of processing allows you to request the restriction of the processing of your personal data. This right can only be exercised in certain situations, exhaustively listed in the General Data Protection Regulation, namely:
– When you have contested the accuracy of your personal data, during the period that allows the data controller to verify its accuracy;
– When you consider that the processing is unlawful and the data subject has opposed the deletion of personal data and requests, instead, the limitation of processing;
– When the data controller no longer needs the personal data for the purposes of processing, but they are necessary for the data subject to exercise or defend claims and/or exercise other rights;
– When the data subject has exercised their right to opposition, until it is verified that the legitimate interests of the data controller prevail over those of the data subject.
Right to data portability
The right to data portability allows you to request the data controller to transfer your personal data to you or to another data controller.
This right can only be exercised when the data controller processes your data based on specific consent or based on a contract and when the processing is carried out through automated means. The data controller must provide the data in a structured, commonly used, and machine-readable format.
Right to erasure and/or to be forgotten
The right to erasure, or the right to be forgotten, allows you to demand that your data be deleted in certain situations. This right can only be exercised when it fits into one of the following situations:
– When the data is no longer necessary for the purpose for which it was collected;
– When consent is withdrawn and processing is not based on another lawful basis;
– When the data subject exercises the right to oppose and there are no prevailing legitimate interests of the data controller that justify the processing;
– When the processing of data is unlawful;
– When the data has to be deleted to comply with a legal obligation arising from European Union Law or Portuguese Law.
Right to oppose processing
The right to opposition allows the data subject to oppose the processing of data carried out by the data controller when such processing is based on the legitimate interests pursued by the data controller or when data processing is carried out for direct marketing purposes.
Right to withdraw consent
Whenever data processing is based on consent, the data subject has the right to withdraw it at any time. The lawfulness of the processing carried out until the withdrawal of consent remains based on the consent previously given. Consent can be withdrawn through the same means by which it was transmitted. All the rights mentioned can be exercised free of charge to the email geral@invasaodlinhas.pt.
The data subject has the right to complain to the control authority:
[CNPD – National Data Protection Commission
Av. D. Carlos I, 134 – 1st 1200-651 Lisbon
Tel.: +351 213928400 – Fax: +351 213976832 – email: geral@cnpd.pt]
We reserve the right to change this policy. Any changes will be published on Ocean 9 and, if relevant, communicated to users.
Contact
For questions about this privacy policy, please contact us through geral@invasaodlinhas.pt.
