Home / Privacy Policy
The privacy and protection of the personal data of all users of the services provided by Engenatura, including clients, suppliers, partners, collaborators, owners, tenants, etc. (the “Data Subjects”), at all times, constitute an essential aspect of how the company operates and organizes itself. Engenatura aims to ensure that all its Data Subjects are aware, at all times, of the rules and principles regarding the protection and processing of personal data, making every possible effort to guarantee the security of such data, in accordance with the standards and procedures defined in applicable legislation, namely the General Data Protection Regulation and the Personal Data Protection Act (Law no. 67/98, October 26). Accordingly, the company adopts the best technical and organizational practices to protect the personal data of Data Subjects against loss, involuntary or unlawful destruction, and unauthorized alteration, as well as against breaches of data integrity, unauthorized access, or disclosure. On Engenatura’s portal, you may find links to other portals that are not managed by our company. The provision of such links is done in good faith, and Engenatura cannot be held responsible for the collection and processing of personal data carried out on those portals, nor for the accuracy, credibility, and functionality of portals owned by third parties. Thus, providing links to other portals unrelated to Engenatura does not imply any assumption of responsibility concerning them and, consequently, this Privacy Policy does not apply to them. Engenatura also recommends that its Data Subjects adopt additional security measures, including keeping equipment and software duly updated and configured, using protections against malicious software and firewalls, and avoiding browsing portals for which they do not have assured authenticity. We advise a careful reading of this Privacy Policy, Acceptable Use Policy (AUP), General Terms of Service, as well as the Terms and Conditions of each service provided by the company. This Privacy Policy may be amended or revised at any time, and any such changes or revisions will be duly disclosed and communicated on Engenatura’s portal.
Personal data is information of any kind and regardless of its format, including sound and image, relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified directly or indirectly, notably by reference to an identification number or to one or more specific elements of their physical, physiological, mental, economic, cultural, or social identity.
The data processed by Engenatura are collected within the scope of recruitment and human resources management, vehicle provision, invoicing, marketing, provision and supply of services and goods, namely real estate research and commercialization, client representation, architectural and specialty project execution, licensing studies, project management, oversight, supervision and site management, and preparation of evaluation reports and market studies. These data may include identification data such as document identification numbers and validity — or duly authorized copies thereof — taxpayer and social security numbers, role and capacity in which individuals act, signatures, names, email addresses, phone numbers, addresses, functions, household composition, civil status, educational qualifications, IBANs, and information on clients’ contractual objectives and interests.
Within the business relationships it establishes, Engenatura may carry out different actions involving the processing of personal data, with the following purposes, among others legally admissible:
Administrative, commercial, labor, tax, accounting, or invoicing management;
Management of complaints/suggestions;
Execution and performance of contracts, including sending relevant information requested by the counterparty in a business relationship, information on contract, product, or service modifications; requests for authorizations, service payments; requests for issuance of documentation to public and/or private entities;
Forecasting new supplies or services related to previous ones;
Conducting studies to improve the supply or services provided;
Sending information about new products or services similar to previously contracted ones or that may interest clients through any means, including electronic, even after the business relationship with the counterparty has ended;
Compliance with legal obligations regarding document retention and preservation that apply to Engenatura;
Disclosure and invitation to initiatives, conferences, and other events related to Engenatura’s activity, in which Data Subjects may have an interest, based on the existing contractual relationship with Engenatura. By accepting the business/contractual relationship, Data Subjects consent to the processing of their data for the stated purposes, without prejudice to the rights to which they are entitled. This data processing will always be carried out with the prior consent of the Data Subject, except when there is a legal obligation for Engenatura.
Engenatura is responsible for collecting and processing the personal data of Data Subjects, pursuant to article 4(7) of the General Data Protection Regulation, deciding within the context of the provision of services established with the Data Subject which personal data are collected, the means of data processing, and the purposes for which they are used.
In carrying out its activities and within the scope of the services it provides, Engenatura may subcontract third parties to pursue the aforementioned purposes and for the development and management of its IT systems, which may entail these entities having access to the personal data of its Data Subjects. When this occurs, Engenatura takes appropriate measures to ensure that these entities offer the highest technical, organizational, and human guarantees in this regard. Thus, third parties subcontracted by Engenatura will be legally bound, as well as by agreements signed with Engenatura, to implement adequate technical and organizational measures to protect personal data against accidental or unlawful destruction, dissemination, alteration, disclosure, unauthorized access, and any other form of unlawful processing. They will also be bound by special duties of professional secrecy and confidentiality. Outside these cases, Engenatura will only disclose personal data of its Data Subjects to third parties when:
It is obliged by law to do so and only to the extent of its obligations; or, in cases where the law expressly permits it, if the Data Subject expressly and specifically authorizes such transmission and is duly informed, in writing, about the recipients of the personal data and the purposes of the data transmitted.
In all cases, Engenatura remains responsible for the personal data made available by Data Subjects. Providing certain services by Engenatura may require transferring personal data outside Portugal. In such cases, the company declares that it will strictly comply with the determination of the adequacy of the destination country regarding personal data protection and applicable requirements for such transfers, as legally provided.
Engenatura collects and processes the personal data of Data Subjects only with their express consent, according to each specific purpose of the processing concerned, as provided for in the General Data Protection Regulation and Personal Data Protection Act. Consent given by Data Subjects may be withdrawn at any time, free of charge. Data Subjects are also aware that, as a last recourse, they may always exercise their rights regarding the processing of personal data handled by Engenatura, through the National Data Protection Commission (CNPD). However, there are personal data that are indispensable for the provision of services by Engenatura (mandatory data), and Data Subjects are duly and beforehand informed of this need and the consequences of not providing such data. If indispensable personal data are not provided by Data Subjects or are insufficient, incorrect, or outdated, Engenatura will not be able to provide the subscribed service(s), and Data Subjects will assume full and exclusive responsibility for any insufficiency or incorrectness of the data transmitted.
Engenatura will only retain the personal data of Data Subjects for the strictly necessary period to allow:
the provision of the service(s);
compliance with legal obligations to which Engenatura is subject;
the pursuit of the purposes of the collection and/or processing;
the exercise of the rights of Data Subjects and compliance with the corresponding obligations.
In cases where the National Data Protection Commission (CNPD) authorizes retaining personal data of Data Subjects for periods longer than the duration of the service contract, considering the specific purpose of the processing involved, the Data Subject will be timely and duly informed of such purpose and retention period. After expiration of the retention/storage time as described above, the personal data of Data Subjects will be permanently deleted by Engenatura.
In accordance with the provisions of the General Data Protection Regulation and the Personal Data Protection Act, Data Subjects are guaranteed, free of charge, the right to access, rectify, update, and delete their personal data. In any of the cases mentioned above, Data Subjects may exercise their legitimate rights by sending a written request to the email contact engenatura@engenatura.pt.
Contact details of the Data Subject may be used by Engenatura, if expressly authorized, for direct marketing and promotion of services it provides, in accordance with the law. If the Data Subject is a legal entity, Engenatura may send unsolicited communications for direct marketing purposes related to goods and services provided by itself or a company within the same Group, except if the Data Subject expressly refuses to receive such communications in the future and registers on the national list of legal entities opposing unsolicited communications for direct marketing purposes, maintained and updated by the Directorate-General for Consumer Protection (DGC). In any of the above cases, the Data Subject shall have the right to oppose, free of charge and expressly, via email, to the sending by Engenatura of electronic communications for direct marketing, by sending a written request to the email contact engenatura@engenatura.pt.
Engenatura uses cookies on its portal to enhance performance and user experience.
Cookies are small text files stored on the Data Subject’s computer through the web browser, storing only information related to user preferences (generic information), and do not include personal data. The cookies used by Engenatura adhere to the principles of anonymity and confidentiality and have the sole purpose of recognizing the user; they are never used to collect personally identifiable information or for direct marketing purposes. Cookies help the Engenatura portal recognize the user’s device on subsequent visits. At any time, the user can configure their internet browser to notify about cookie receipt or block their acceptance. It should be noted that refusing cookies on the portal may result in the user being unable to access certain areas and/or receive personalized information.
Cookies serve to help determine the usefulness, interest, and usage volume of Engenatura’s portal, allowing for faster and more efficient navigation, removing the need to re-enter the same information repeatedly.
Engenatura uses cookies with different functions, classified as follows:
Cookies can be permanent or session: Permanent cookies are stored for varying times on the internet browser of your access devices and are used whenever the user visits the portal again. They are usually used to guide navigation according to user interests, allowing a more personalized service. Session cookies are temporary and remain in the browser cookies until the portal is exited. The information obtained helps identify problems and provide a better browsing experience.
All internet browsers allow users to accept, refuse, or delete cookies, notably through the selection of appropriate settings in their internet browser. After authorizing cookie use, users may deactivate part or all of Engenatura’s cookies at any time.
Engenatura applies the necessary technical and organizational measures to ensure that, by default, only personal data of Data Subjects necessary for each specific processing purpose are processed, with these measures being reviewed and updated periodically by the responsible department. Engenatura has implemented sufficient, necessary, and appropriate technical, physical, organizational, and security measures to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure, unauthorized access, and any other form of unlawful processing. Engenatura thus adopts various security mechanisms and procedures, following best practices in information security on the systems supporting the services provided and storing the personal data of Data Subjects, namely the use of firewalls and intrusion detection systems, restricted physical and logical access, operation logging and respective monitoring and auditing, and secure collection and transmission of personal data. Personal data collected by Engenatura is securely stored within its systems, which in turn are housed in the company’s own data center, covered by all necessary physical and logical security measures essential to protect personal data. Whenever communicating personal data of its Data Subjects to third parties is necessary, Engenatura remains responsible for the data and guarantees that: • the sharing of personal information complies with the applicable legal provisions; • the transmission is done securely, namely through encryption protocols; and • all third parties are contractually obligated to observe confidentiality and secrecy duties and to ensure the security of the personal data communicated to them for this purpose, not using such data for any other purposes, for their own benefit or that of third parties, nor correlating it with other data available to them.
For more information on how Engenatura processes the personal data of its Data Subjects, to clarify any doubts, to submit a complaint, or to leave feedback regarding Privacy and Personal Data Protection matters, please send your communications to: engenatura@engenatura.pt.
