Compliance with the duty to provide information to data subjects

Policy 1 out of 2

Please read our Compliance with the duty to provide information to data subjects

The compliance with the duty of information is based on providing the data owner with information related to its processing in an equitable and transparent manner where the following parameters are identified: the responsible party, the basis and purpose of the data processing; the justification for the mandatory provision of data; the retention period of the data; the rights of the data owners; the contact details for exercising these rights and the identification of the procedures to be adopted in the case of a complaint, either to the Data Protection Officer or the National Data Protection Commission.

1. Controller, basis and purpose

Collected personal data are processed by the Banco de Portugal, a public-law legal person with taxpayer number 500 792 771, with head office at Rua do Comércio, 148, 1100-150 Lisbon (hereinafter referred to as “Bank”) in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter referred to as “Regulation”) and other applicable data protection legislation, based on consent under Article 6(1)(a) of the Regulation and for the purpose of giving the trainee the qualifications to handle cash under the legislation on cash recirculation activity.

2. Obligation

The provision of data is mandatory for issuing a training certificate.

3. Storage

Personal data are stored for the purpose mentioned above for 6 months following the last login or until the expiry date of all user certificates (training certificates are valid for 3 years). The training score is automatically awarded to issue the certificate; however, the trainee can challenge that score within 5 days. The score is deleted after 10 days in case the trainee is not successful in the training.

4. Rights

4.1. We further inform you that under the terms provided for in the Regulation and other applicable data protection legislation, you have the right:
  • to ask the Bank for access to your personal data, their rectification and erasure;
  • to restrict and object to data processing;
  • not to be subject exclusively to automated individual decision-making;
  • to withdraw consent without affecting the lawfulness of processing based on consent before its withdrawal.

5. Contact details for the exercise of rights

Data subjects may exercise their rights:
  • by filling in the form available in the data subject’s area, in the “Privacy and policies” menu;
  • at the Banco de Portugal’s information desks;
  • by post; or
  • by e-mail: info@bportugal.pt.

6. Complaints with the Data Protection Officer

If the data subjects consider that their rights have not been properly met and wish to submit a complaint, they can contact the Data Protection Officer by the following means:
  • by e-mail: encarregado.protecao.dados@bportugal.pt
  • by post:
    Gabinete de Proteção de Dados do Banco de Portugal
    Rua do Comércio, 148
    1100-150 Lisbon

7. Complaints with the Comissão Nacional de Proteção de Dados (CNPD)

The data subjects can always lodge a complaint with the CNPD as a supervisory authority www.cnpd.pt or by sending it to its address.

Next
Back to top