Introduction

Browsing the website of Business Config, Lda implies the understanding and acceptance of this Privacy and Data Protection Policy.

Business Config maintains a constant commitment to the protection of personal data privacy and to preventive actions regarding data security across its website, applications and platforms it owns, as well as the protection of its visitors’ data.

To reinforce the confidentiality of personal data, new data protection measures have been implemented, both to verify the legitimacy of the use of processed personal data and to ensure compliance with the rights granted to data subjects. In this context, and through specialised support channels, the company aims to promote clearer and more objective communication regarding the purposes underlying the processing of personal data and the transparency of data processing operations.

Accordingly, the information contained in this text seeks to convey, in a clear and unequivocal manner, the content of the privacy and personal data protection policy that will be processed under the provisions of the General Data Protection Regulation currently in force (hereinafter GDPR), and as defined by the relationship established between the data subject and Business Config.

Personal data collected

In general terms, personal data may be collected in situations directly resulting from Business Config’s activity, namely through contact forms, email communications, and the use of digital platforms made available on the website.

Contact forms and communications

When using the contact channels provided on the website, the user may be asked to provide personal information such as name, email address, telephone number, or other details necessary to respond to enquiries and provide requested information.

The mandatory fields in the available forms are marked with an asterisk (*).

Business Config undertakes to protect personal data and it will never be made available to third parties without the knowledge or consent of the data subject, except where legally required.

Purpose of data processing

Personal data is processed to carry out actions such as responding to requests for information, providing support, improving website functionality, conducting surveys, and evaluating interactions for statistical purposes.

Communications and informational messages

Business Config may, periodically and only where legally permitted, send communications regarding its services, updates, campaigns or relevant information. The data subject may, at any time, request that such communications cease by contacting Business Config through the appropriate channels.

Redirection

Some hyperlinks on this site may redirect the user to external websites that are partners or service providers of Business Config. By clicking on these hyperlinks, the visitor will leave the Business Config website. As Business Config has no control over these websites, it shall not be responsible for any content made available therein. Browsing and use of any external platform constitutes acceptance of the respective terms of use as specifically defined for that purpose.

Security, lawfulness, fairness and transparency

Business Config uses appropriate technical and organisational measures to ensure the security of personal data and is constantly improving its systems to ensure efficient processing and maintain user trust. A server certificate, also known as a digital certificate, guarantees Business Config’s identity, as well as SSL (Secure Sockets Layer) encryption of transmitted data.

All personal data will be processed lawfully, fairly and transparently in relation to the data subject. Accordingly, the data subject may always contact Business Config to clarify any questions relating to this matter, as provided for in this privacy policy.

Access and purpose limitation

Business Config undertakes to use personal data solely for the purposes strictly necessary for the pursuit of its activity, without prejudice to the limitations arising from the scope of such activity or the extent of the consent expressly granted by the respective data subject. Data will not be transmitted to third parties without the knowledge and/or authorisation of the data subject, except where Business Config is legally obliged to do so.

Business Config also ensures that access to such data by its employees or authorised service providers is granted only to the extent necessary to perform the relevant action, in accordance with their assigned functions and tasks.

All personal data processed by Business Config, whether provided directly and voluntarily by the data subject, or collected for the operation of any functionality made available through the website, will be permanently deleted as soon as it is confirmed that it is no longer necessary. Retention of personal data shall comply with the principles of data minimisation and storage limitation.

Rights of personal data subjects

Right to information and access to personal data

At any time, the data subject may request information regarding stored personal data, including the category of personal data concerned, its source and recipient(s), the retention period and underlying purposes, as well as the identification of the data controller, the data protection officer and their respective contact details.

Right to rectification and right to erasure of personal data

If the data subject wishes to exercise their right to data rectification, they must submit the respective request, identifying the data to be amended and the new declaration thereof, via email to hello@businessconfig.com. The same procedure must be followed if the data subject wishes to exercise their right to erasure of personal data. In both cases, the data subject will receive confirmation that their request has been fulfilled as requested.

Right to restrict processing, object and withdraw prior consent

To reinforce the principle of transparency in the processing of personal data and in communications with the user, Business Config allows the data subject to modify, at any time, the data processing permissions granted for each of the indicated purposes.

Subsidiary application

This text governs all matters relating to privacy and the protection of personal data processed within the scope of the use of the website, applications and other functionalities made available by Business Config, whether accessible through a hyperlink on the website or on any other platform owned by Business Config, and shall apply directly and subsidiarily to all situations not specifically regulated.

Changes to the Privacy Policy and Contacts

Any changes to this Privacy and Data Protection Policy will be published on the Business Config website, and all previous versions will be made available upon the data subject’s express request.

Irregularities, non-compliance situations and any security restrictions in the processing of personal data must be immediately reported by sending an email to: hello@businessconfig.com.