Galp Group guarantees compliance with the legal obligations arising out of Regulation (EU) 2016/679 of the European Parliament and the Council (GDPR) and other applicable and connected legislation regarding the protection of personal data, in any processing of personal data that it may carry out.
I. Who is the “Controller” of my personal data?
II. For what purpose will my personal data be processed, what is the lawful basis and storage period?
III. What personal data will be processed?
IV. How will my personal data be processed?
V. Who are the recipients of my personal data?
VI. What rights do I have over my personal data?
VII. Cookies
VIII. Who do I contact to get a response to all my questions?
I. Who is the “Controller” of my personal data?
Galp Energia, S.A., based at Avenida da Índia 8, 1349-065 Lisbon (henceforth known as “GALP”), is the “Controller” of the personal data collected within the framework of this website.
II. For what purpose will my personal data be processed, what is the lawful basis and storage period?
The primary purpose, lawful bases and storage periods of your personal data are:
Finalidade(s) do Tratamento
Website management
Fundamento(s) de Licitude
Pre-contract Diligence or Execution of the Agreement whose terms are governed by the Terms and Conditions of use made available on the website
Prazos de conservação
For a period of 6 month after the last visit to the website
III. What personal data will be processed?
Within the context of the stated purposes, GALP will process the following categories of personal data: identification and contact data and data on IT use or other authentication and access and/or security credentials.
IV. How will my personal data will be processed?
Os seus dados pessoais serão tratados pela GALP e/ou pelas empresas do Grupo Galp, no contexto das finalidades antes indicadas, de acordo com a política e as normas internas do Grupo Galp e com recurso a medidas técnicas e organizativas adequadas para promover a respetiva segurança e confidencialidade, nomeadamente em relação ao tratamento não autorizado ou ilícito dos seus dados pessoais e à respetiva perda, destruição ou danificação acidental.
V. Who are the recipients of my personal data?
i. “Processors”
Your personal data may be provided to companies who are commissioned to provide GALP services and products. These companies are linked to GALP by written contract, can only process your personal data for the purposes specifically established above and are not authorised to process them, directly or indirectly, for any other purpose, for their own benefit or that of third parties.
ii. “Third Parties”
Your personal data may be communicated by GALP to Galp Group companies, via an intra-group data-sharing agreement, which will comply with applicable data protection rules depending on the purposes of the processing.
In compliance with legal and/or contractual obligations, your personal data may also be transmitted judicial, administrative, supervisory or regulatory authorities and also to entities that lawfully carry out data-gathering activities, activities to prevent and combat fraud, market or statistical studies.
VI. What rights do I have over my personal data?
You have the right to: I) request and receive relevant information regarding the processing of personal data by GALP and/or by Galp Group companies; II) request access to your personal data, namely, to obtain confirmation that your personal data are the object of processing; III) rectify, delete, restrict the processing of personal data or request its portability by GALP and/or the Galp Group companies.
You also have the right to submit a complaint to the competent control authority, the National Data Protection Commission (CNPD, Comissão Nacional de Proteção de Dados), if you believe that the processing of your personal data violates your rights and/or applicable laws concerning data protection and privacy.
VII. Cookies
GALP uses cookies to collect information about the use of the website. We advise you to read and review the Cookies Policy to find out more information regarding this, as well as checking it regularly to find the most up-to-date versions.
VIII. Who do I contact to get a response to all my questions?
You can at any time, in writing:
I. Exercise the rights set forth in the Personal Data Protection Law and other applicable legislation via the email data.privacy@galp.com; and
II. Contact the Data Protection Officer of the Galp Group regarding any questions related to the protection and privacy of your personal data via the e-mail dpo@galp.com.