1. Data Controller
Get Set, Lda. (hereinafter "GET SET" or "Data Controller" or “Controller”), with registered address at Travessa da Fonte de Cima, n.º 2, Asseiceira Grande, 2665-618, Venda do Pinheiro with NIF 510612571.
2. Purposes for which we will process the data, legal basis on which the processing is legitimate, category of data, retention periods
• Processing of personal data related to the management of the website.
Visiting the Website and browsing its different sections does not require you to provide any personal data or to register as an User. We also remind you that cookies may be installed on your access device in accordance with the provisions of our Cookies Policy.
The purpose of the processing of personal data is to process the queries and requests that you send us via the telephone number, email or the contact form of the Website.
Category of personal data processed
Browsing the Website does not imply the collection of personal data, except as indicated in our Cookies Policy. If you send us a request via the contact form, email or contact us by phone, GET SET will process your voice, identification and contact details and any other information you provide us with.
Legal basis
The legal bases of the processing of your data when you send us a request via the contact form, email and/or or contact us by phone, is the performance of a contract that the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Retention periods
In general, GET SET will retain users' personal data for the period necessary to fulfill the purposes described in this Privacy Policy. The data provided by the users will be kept by GET SET as long as they are necessary to process the request made, plus an additional period of 10 years in order to attend to the possible responsibilities arising from processing.
We will keep anonymized data for longer periods of time in order to carry out audiometries and analysis to improve our services.
• Execution of the contractual relationship with customers, suppliers, partners and any third parties.
Purposes of the processing
The personal data relating to the legal representatives, as well as those of third parties who may be designated as interlocutors by the legal persons or professionals with whom GET SET maintains a contractual relationship, will be processed by GET SET to carry out the management, development, fulfilment and control of the contractual relationship and the invoicing of the corresponding services. Likewise, GET SET may process such data and those of third parties designated for the provision and development of the services for the control and supervision of compliance with the applicable regulations and its Code of Conduct available at the following link https://ethics.mediapro.tv/and the internal corporate rules. GET SET may also process personal data for professional contact purposes and to send you congratulations.
Category of personal data processed
In general, GET SET will mainly process identification and contact data (name, surname, e-mail and phone number) and, where appropriate, data relating to the function or position held. However, it may process any other data that may be necessary for the execution of the contractual relationship.
Legal basis
The legal basis for this processing is the performance of the contract and the legitimate interest of GET SET for professional contact and compliance with internal corporate rules.
Retention periods
Personal data shall be retained for the duration of the contract and for as long as liabilities may arise from the performance of the contract.
3. Data provided by third parties
GET SET asks Users to avoid communicating personal data of third parties through any system, application, medium or format. However, if for the management or performance of a contract, the legal entity or, where appropriate, the professional with whom GET SET maintains a contractual relationship communicates the data of one or more persons as an interlocutor in the terms set out in clause "Execution of the contractual relationship with customers, suppliers, partners and any third parties", such legal entity or professional must first comply with the obligations of information and obtaining consent or have another legal basis that legitimizes such communication.
The User who breaches the above provisions, especially with regard to data of minors, may incur liability to that third party and to GET SET. For further information, please consult the Terms of Use of the website.
4. Data recipients
GET SET has various service providers who may process your personal data in order to fulfill their contractual obligations with GET SET. Our main service providers are companies that are part of the Grup Mediapro (you can consult the list of legal entities that are part of our group at https://entidades.grupmediapro.tv and www.mediapro.tv) which may also process the data for the Grup Mediapro's internal administrative management on the basis of the legitimate interest according to the recital 48 of the General Data Protection Regulation.
Users' personal data may also be communicated, by virtue of a legal provision, to Tax Authorities, Data Protection Supervisory Authorities (e.g. National Data Protection Commission) and/or the State Security Forces and Corps, Judges and Courts if it is required.
5. Individual rights. Withdrawal of consent. Data Protection Officer
Users have the following rights in relation to their personal data:
(i) Right of access to personal data or right to contact the data controller to find out whether or not the data controller is processing their personal data and, if the data controller is processing the data, the right to obtain, among others, the following information:
(i) a copy of the personal data; (ii) purposes of the processing; (iii) categories of personal data concerned; (iv) the recipients or categories of recipients to whom the personal data have been or will be disclosed, —in particular, the recipients in third countries international organizations—; the retention period for storing the personal data or, where this is not possible, the criteria for determining how long the data will store it.
(ii) Right to have inaccurate personal data rectified or completed if it is incomplete (for which the User must indicate the data concerned and the correction to be made, and provide supporting documentation with the request, where necessary).
(iii) Right to object, in certain circumstances, to the processing of the User’s personal data by the data controller, for example when the User’s personal data is processed to send commercial communications.
(iv) Right to erasure the User’s personal data or right “to be forgotten”, which allows Users to ask the data controller to erase their personal data in the following circumstances, among others: (i) the personal data is no longer necessary for the purpose which data controller originally collected or processed it for; (ii) User withdraws the consent for the processing of the personal data and there is no other reason justifying further processing by the controller; (iii) whether the data of the User have been processed unlawfully. In any case, Users should be aware that it may be feasible not to comply with a request for deletion of data when the processing is necessary for the exercise of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or in the exercise of public powers vested in the controller, for reasons of public interest, in the field of public health, for archiving purposes in the public interest or for the formulation, exercise or defense of claims.
(v) Right to restrict processing of the User’s personal data, which allows the User to ask the data controller:
(a) the restriction of the processing of its personal data — when the User contest its accuracy or in cases in which he has opposed the processing, under certain conditions—; or
(b) the retention of the data for a specific period—when the processing is illegal and the User opposes the deletion, but requests the limitation of the processing, or when the person in charge no longer needs this data for the purposes of the processing, but the User does, to raise claims or defend himself—.
(vi) Right to data portability regarding the User’ personal data, which allows the User, when the processing is carry out by automated means, (i) to receive personal data they have provided to a controller in a structured, commonly used and machine readable format, and (ii) the right to request that a controller transmits these data directly to another controller, when the legal basis of the processing is the consent of the User or the execution of a contract (as these Terms of Use).
(vii) The User’s right not to be subject to automated individual decisions making based solely on the processing of the User’s personal data, which means that the User is entitled to request not to be subject to a decision based solely on the processing of its personal data, including profiling, which produces legal effects on the User or similarly significantly affects him or her. This right does not apply where such decisions are necessary for the conclusion or performance of a contract between the User and the data controller, or where the processing of the data is based on the prior consent of the User.
(viii) Right to withdraw the consent. If the legal basis for the processing is the consent, the User has the right to withdraw or revoke consent at any time. The withdrawal or revocation of consent does not have retroactive effect. Therefore, it does not affect the lawfulness of the processing based on the consent prior to the withdrawal.
To exercise these rights, as well as to contact the Data Protection Officer of GET SET for any queries you may have about this Privacy Policy or about how GET SET processes your personal data, you can contact GET SET through:
(i) Postal mail: GET SET, Travessa da Fonte de Cima, n.º 2, Asseiceira Grande, 2665-618, Venda do Pinheiro.
ii) Email: dpd.pt@mediapro.tv (this email address is only intended for questions related to data protection, so any other unrelated question or query will not be answered).
In both cases, we ask you to indicate the following as a reference: “Ref. Data Protection – GET SET”.
Notwithstanding the foregoing, GET SET may reject those applications of rights that are unfounded or excessive.
In addition to the above, you have the right to file a complaint with the National Data Protection Commission (https://www.cnpd.pt/) if you consider that your rights have not been properly addressed or that the applicable regulations have not been complied with in the processing of your personal data.