This policy describes the processing of personal data collected by Jerónimo Martins, SGPS, a public company with its head office at Rua Actor António Silva, No. 7, in Lisbon, registered on C.R.C. Lisbon with tax number 500 100 144 , hereinafter Jerónimo Martins, as data Controller, within the scope of the services provided by the Ethics Committee.
Data collected and purposes
When you contact the Ethics Committee through the website, the personal data you share, such as email and name (if shared), will be collected, with your consent, to manage and answer your request. Personal data may be shared with the Jerónimo Martins Group’s companies, regarding the situation communicated, to ensure an efficient process management.
Whenever you contact the service by letter or email your data will be managed, based on the Jerónimo Martins’ legitimate interest, for the analysis and resolution of your report.
Such data will be maintained for the period appropriate to the request, being eliminated according to its typology, up to a maximum period of 5 years after the resolution or conclusion of the request.
Within the scope of Jerónimo Martins’ legitimate interest and always safeguarding the rights and liberties of its website users, Jerónimo Martins may also process users’ personal data for the following purposes: i) prevention and detection of fraud, ii) network and information security, iii) development and maintenance of the website, iv) providing technical assistance.
Rights of the Data Subjects and Means of Exercising Rights
Under the legislation in force, data subjects are guaranteed the right to access, rectify and erase their personal data, to restrict and oppose their processing, as well as the right to data portability and processing restriction. Whenever the sole legal condition for the processing is the data subject’s consent, the latter may also withdraw previously given consent, at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Exercise of rights may be performed, with the limitations provided for in the applicable legislation, via email@example.com.
The data subject also have the right to lodge a complaint with the Supervisory Authority in Portugal (CNPD).
In its commitment to ensuring the security of the subjects’ personal data, Jerónimo Martins has implemented technical, organized security measures deemed necessary for the processing activities.
Communication of Personal Data
Your personal data may be shared with the other companies of the Jerónimo Martins Group, owned directly or indirectly by Jerónimo Martins, and which may be dedicated, as the case may be, to food distribution, food and specialized retailing, restaurant services, livestock, dairy and aquaculture production, being located in Portugal, Poland and Colombia.
Notwithstanding the situations expressly mentioned in this Policy, the data collected is not transferred to third parties without your consent.
Jerónimo Martins uses external partners, to develop, maintain and host information systems. In these cases, Jerónimo Martins ensures that its partners comply with the appropriate technical and organizational measures for the processing. In this regard, the data collected may be transferred to entities located in third countries (outside the European Union), with the assurance that the appropriate measures are taken in accordance with the legislation in force.
Personal data may also be shared with other entities in accordance with: a) applicable legislation, b) compliance with legal obligations, c) or in response to requests from public or governmental authorities.
This site uses the Google Analytics service, a web analytics service provided by Google, to better understand site usage and services. Google Analytics collects information such as the frequency with which users visit the site as well as other visited web pages. Google uses collected data to track and examine your use of sites, prepare reports on your activities, and share them with other Google services. Google may use the data collected on the sites to contextualise and customise the ads in its own ad network. IP anonymity has been activated on our website so that the IP address of Google users in the Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area is abbreviated in advance. Only in exceptional cases will the full IP address be sent to and shortened, by Google servers in the United States of America.
Data Protection Officer
Jerónimo Martins has a Data Protection Officer, whom you may contact for any issues related to the processing of your personal data, by sending an email to firstname.lastname@example.org.
Amendments to the Data Protection Policy
Jerónimo Martins SGPS reserves the right to amend this data protection policy, at any time, the amendments being duly publicised.
Date of last update: 18 January 2020