Privacy Policy

Pinto & Cruz is responsible for processing the personal data of its customers (or potential customers), partners, suppliers and other contacts, following the terms of the data protection legislation in force in the European Union (the General Data Protection Regulation – GDPR).

Pinto & Cruz can be contacted at Rua Eng.º Ferreira Dias, 469, 4103-801 Porto, Portugal and through the following email address office@pintocruz.pt.

The personal data we collect depends on the context of your interactions with us. Pinto & Cruz, within the scope of its business activity and in compliance with the obligations to which it is legally bound.  

Pinto & Cruz collects and processes the personal data provided by the Data Subjects through the various contacts established between the parties, both in person and by telephone, by post or email.

Pinto & Cruz ensures that the processing of your personal data is carried out within the scope of the purpose for which they were collected, or for purposes compatible with the initial purpose for which they were collected. In addition, we process your personal data for legally foreseen purposes.

Customer and prospect management

The processing of your data is necessary for the execution of the contract to be concluded between you and Pinto & Cruz, or for carrying out pre-contractual steps at your request. If you do not provide your data, we will not be able to provide you with the services requested or contracted.

Customer data may be communicated to third parties, namely public authorities, for the purposes of fulfilling legal or contractual obligations.

Supplier management

The processing of your data is necessary for the execution of the contract to be concluded between you and A Pinto & Cruz, or for carrying out pre-contractual steps at your request. If you do not provide your data, we will not be able to fulfill the contractual obligations assumed.

Management of complaints and contacts received by Pinto & Cruz

You can send us suggestions or complaints regarding the services provided by Pinto & Cruz, in the “Contact Us” field. Your personal data will be collected to analyze and resolve the situation underlying your suggestion or complaint and will be processed based on Pinto & Cruz’s legitimate interests.

Whistleblower Channel Management

The Pinto & Cruz Whistleblower Channel is a safe space where you can report irregular practices in accordance with the defined scope. If the complaint is submitted in a “Confidential” manner, the whistleblower may enter personal data. However, this information will be displayed in accordance with the terms set out in this document. The aforementioned whistleblower channel is hosted at: https://whistleblowersoftware.com/secure/pintocruz.

Application Management

On the “People” portal and through the page https://jobpage.cvwarehouse.com/ the candidate enters his/her personal data in the form of a response to a “Job Opportunity” or via a “Spontaneous Application” form.

Social media

Pinto & Cruz uses and has a presence on various social media platforms (i.e. YouTube, LinkedIn, Twitter and Facebook), for example for recruitment or marketing purposes. We use social media to provide you with easy access to relevant information about job opportunities at Pinto & Cruz, events we organise and to promote our services and our brand.

In this regard, Pinto & Cruz is responsible for the content it publishes using social media platforms, however, it is not responsible for the management of social media platforms (such as the creation of user statistics or the placement of cookies).

Pinto & Cruz has no influence on how your data is processed on these websites or the guarantee of their legal compliance with regard to the protection of personal data. We do not manage cookies and the information collected by these entities. Always check all specifications regarding data protection and how these entities collect personal data. Pinto & Cruz assumes no responsibility for the processing of personal data by these third parties.

If you need to access this data or want to invoke one of your other rights (such as the right to object to the processing of your data), you should contact the provider of the social media platform.

The personal data collected and processed are kept, according to their purpose, in compliance with the applicable legal deadlines.

In cases where there is no legal term applicable to the conservation and storage of personal data, such data will only be stored and retained for the appropriate period and to the extent necessary, in accordance with the purposes for which they were collected, unless, at any time, the holder of the personal data, within the legal limits, exercises his/her rights of opposition or erasure, or withdraws his/her consent.

Pinto & Cruz may share your personal data with third parties, who will have access to it. Such third parties include public authorities, service providers, among others.

As part of its activity, Pinto & Cruz may use subcontractors, who will access and process your personal data in accordance with Pinto & Cruz's instructions.

To this end, we ensure that such subcontractors offer sufficient guarantees for the implementation of appropriate technical and organizational measures, so that the processing meets the requirements of the GDPR and other applicable legislation, as well as ensuring the defense of the rights of the holders of personal data.

Therefore, Pinto & Cruz may also share your personal data when such sharing is necessary or appropriate in light of applicable legislation, to comply with legal obligations to which it is bound, to respond to requests from public authorities, in the event that the vital interests of the holder of the personal data or third parties are at stake, to protect the rights and property of Pinto & Cruz, or when you have given us your prior consent.

Data Subjects are entitled to the rights provided for in the General Data Protection Regulation (GDPR), namely:

• Right of Access: obtain confirmation as to whether or not your personal data is being processed and, if so, access it.
• Right of Rectification: obtain the rectification of inaccurate personal data concerning you and request that your incomplete personal data be completed;
• Right to Erasure: obtain the erasure of your personal data, except in cases where there are grounds that validate its conservation;
• Right to Limitation of Processing: obtain the limitation of the processing of your personal data when they relate to certain categories of data or processing purposes;
• Right to Portability: receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, as well as request the transmission of your personal data to another data controller;
• Right of Objection: object, at any time, to certain processing of your personal data, such as in the case of the processing of personal data for direct marketing purposes;
• Right not to be subject to automated individual decisions, including profiling: not to be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

In order to exercise your rights, you must contact us via email: data_protection@pintocruz.pt

Furthermore, you are guaranteed the right to withdraw your consent whenever you have given it, through the means indicated above. The withdrawal of consent does not, however, invalidate the processing carried out up until the date of withdrawal.

The holder of personal data also has the right to lodge a complaint with the CNPD, or another competent supervisory authority, as well as to resort to any other judicial remedy, if he/she considers that his/her personal data is not being lawfully processed by Pinto & Cruz, under the terms of the legislation in force and this notice.

THE Pinto & Cruz uses several security measures, including authentication tools, encryption and digital certificates to help protect and maintain the security, integrity and availability of your personal data.

Although the transmission of data via the internet or website cannot guarantee total security against intrusions, Pinto & Cruz and its service providers and business partners employ the best efforts to implement and maintain physical, electronic and procedural security measures designed to protect the personal data of Data Subjects in accordance with applicable data protection requirements. 

The activity carried out by Pinto & Cruz may involve the transfer of your personal data to third countries – located outside the European Union or that do not belong to the European Economic Area – even if this occurs occasionally and always in the relationship established with other services used by Pinto & Cruz.

In such situations, all necessary and appropriate measures will be adopted to ensure the protection of your personal data.

One such situation is the presence of Pinto & Cruz on social media, where we have limited influence over the data processing carried out by the operators of these networks (e.g. member management and general information management). In situations where we have no influence, we try to ensure, as far as possible, that the operators of the social networks act in accordance with the privacy and data protection requirements of the GDPR. However, in many cases, we have no influence over this data processing carried out by the operators and we do not have clear knowledge of the data that is being processed on certain occasions.

The operators of the social networks manage the entire IT infrastructure of the service, applying their own privacy and data protection rules and, in addition, maintain their own relationships with users (insofar as these are registered users on the social network). Furthermore, the operators are fully responsible for all matters relating to user profile data to which Pinto & Cruz does not have access.

The Pinto & Cruz Website may use cookies (a group of data exchanged between the browser and the server, placed in a text file created on the User's computer).

Cookies will not be used in any way to invade the User's privacy; they are only used to identify the User and create their profile in order to, for example, send marketing and/or promotional actions and market studies.

Cookies are stored on the User's computer hard drive to save their preferences, such as login/password, if the User chooses the option to log in automatically on the next visit.

If desired, the User may disable cookies in their web browser, but some of the functionality will be lost. The User may configure their browser to be notified on the computer screen about the receipt of cookies and to prevent them from being installed on the hard drive. Information on this configuration is available in the browser’s own instructions and manuals.

To learn more about cookies and how Pinto & Cruz uses them on its website, see our Cookie Notice.

This Privacy Policy may be updated or changed at any time and without prior notice.