What are personal data?
It is defined as information relating to an identified or identifiable person, directly or indirectly. Personal data is also the collection of distinct pieces of information that can lead to the identification of a particular person.
By way of example, personal data is:
– Name;
– Email address;
– The number of an identity card;
– Location data (namely the location data function in a mobile phone);
– IP (internet protocol) address.
Who is the data subject of personal data?
The personal data subject is the natural/collective person to whom the data relates and who has used Triskelion Expeditions‘ digital platforms and services.
How is this data collection carried out?
The Triskelion Expeditions is the owner of all the intellectual and industrial property rights of its site web, as well as the elements contained therein (namely, images, audio, video, software or texts, brands or logos, color combinations, structure and design, selection of materials used, software necessary for its operation, access and use, ownership of Triskelion Expeditions
The reproduction, distribution and dissemination, in whole or in part, of the contents of this website, for commercial purposes, in any medium and by any technical means, without the prior written permission of Triskelion Expeditions, is expressly prohibited.
The USER undertakes to respect the Intellectual and Industrial Property rights held by Triskelion Expeditions.
You may view the elements of the portal and even print, copy and store them on your computer’s hard drive or any other physical or virtual support provided it is exclusively for your professional and private use.
The USER shall refrain from suppressing, altering, eluding or manipulating any protection device of the security system installed in the pages of Triskelion Expeditions.
For what purpose is your personal data used?
Triskelion Expeditions will process your personal data for the following purposes:
- a) Fulfill the contractual obligations assumed with the holder or, in case he acts on behalf of a company, with the company he represents,
- b) Comply with the obligations foreseen in the applicable legislation, namely, measures for the prevention of money laundering and financing of terrorism.
Who is responsible for the processing of personal data? - articles 4.7 and 13 RGPD
The controller, for the purposes of the application of the GDPR, other data protection laws applicable in the Member States of the European Union and other provisions related to data protection, is:
Triskelion Expeditions
22 Álvaro Galrão street
2560-305 Torres VedrasEmail: geral@triskelionexpeditions.com
How do we use your personal data and for how long?
At Triskelion Expeditions your personal data will only be kept for as long as is necessary to provide the products and services, complete the transactions or send the information you request, or for other purposes, such as to comply with our legal obligations or to resolve disputes, where applicable. By expressly subscribing to any marketing communication from Triskelion Expeditions your personal data will be kept until you unsubscribe.
If the purpose of storage is not applicable, or if a storage period expires, personal data are regularly deleted or blocked in accordance with legal requirements.
The data retention period thus depends on the purposes of the data processing. – Article 5 RGPD, namely:
– Customer Satisfaction Surveys – 10 anos
– Automated treatments with the exclusive purpose of managing contacts with clients – 10 anos
– Credit recovery – 10 anos.
– Management of litigious processes – 20 anos.
– Video surveillance – 30 dias.
– Call recording – 90 dias for proof of commercial transactions and any other communications regarding the contractual relationship and 7 years for the purposes of inspection and supervision by supervisory authorities.
– Customer Complaints Management – Finalizada a resolução.
– Fraud Prevention Treatment – With the closure of the proceedings if there is no fraud or up to six months after the decision has become final.
What are the rights of the data subjects?
To exercise the rights listed below, you should contact us at the contacts listed above.
The exercise of rights is free of charge, except in the case of a manifestly unfounded or excessive or unjustifiably repeated request, in which case an administrative fee may be charged.
A response to a request shall be provided, without undue delay, within one month of receipt of the request, unless the request is particularly complex or occurs under exceptional circumstances. This period may be extended up to two months when necessary, taking into account the complexity of the application and the number of applications received.
As part of your request, you may be asked to provide proof of your identity to ensure that personal data is only shared with the data subject.The so-called ARCO rights are as follows:
Right of access (The personal data subject has the right to obtain free of charge from Triskelion Expeditions confirmation as to whether or not data concerning him/her is being processed and, where applicable, access to his/her personal data and access to the information required by law, namely, the purposes, categories and retention periods). – article 15 RGPD
Right to rectification (The data subject has the right to obtain from Triskelion Expeditions, without undue delay, the rectification of inaccurate or incomplete personal data about him or her). – article 16 RGPD
Right to erasure |”Right to be forgotten”| (The personal data subject has the right to ask Triskelion Expeditions to erase his/her data without undue delay, and Triskelion Expeditions has the obligation to erase the data. This may occur, namely, when the purposes for which the data was collected or processed have been exhausted; when the data subject withdraws consent and there are no other legal grounds for doing so; when the data is processed unlawfully) – article 17 RGPD
Right to limitation of processing (The data subject has the right to obtain from Triskelion Expeditions the limitation of processing if, inter alia, one of the following applies:
Contest the accuracy of personal data, for a period that allows Triskelion Expeditions to verify its accuracy;
The data processing is lawful and the data subject objects to the erasure of his or her personal data and requests, in return, limitation of its use;
Triskelion Expeditions no longer needs the personal data for processing purposes, but such data is required by the data subject for the purposes of asserting, exercising or defending a right in legal proceedings;
if you have opposed the processing, until it is established that the legitimate reasons of the controller override those of the data subject.
Data processing with the consent of the data subject or for judicial purposes is excepted. – article 18 RGPD
Right to data portability (The data subject has the right to receive the personal data concerning him/her that he/she has provided to Triskelion Expeditions when the latter uses automated means for processing, in a structured, commonly used and machine-readable format, and the right to transmit such data to another controller, without the controller to whom the data have been provided being able to prevent this. If technically possible, data transmission may be made directly between controllers) – article 20 RGPD
Right to object (The data subject has the right to object to the processing of their personal data where the processing is carried out in the legitimate interest of Triskelion Expeditions for the purposes of direct marketing or profiling. Triskelion Expeditions, as the controller, shall cease the processing of personal data in the event of objection, unless there are legitimate and compelling reasons for the processing which override the interests, rights and freedoms of the data subject, or in the course of legal proceedings. Where data are processed for the purposes of direct marketing, the data subject has the right to object at any time to the processing of personal data) – article 21 RGPD
Right to withdraw consent (If consent is legally required for the processing of personal data, the data subject has the right to easily withdraw consent at any time, although this right shall not affect the lawfulness of the processing carried out on the basis of the consent previously given, nor the further processing of the same data based on another legal basis, such as compliance with a contract or legal obligation to which MPG is subject). – paragraph 3 of article 7 RGPD
Will Triskelion Expeditions be able to share personal data?
Yes. The Triskelion Expeditions may share sets of personal information, whether collected anonymously (cookies) or provided directly by you, with service providers, partners or other entities that support Triskelion Expeditions in its business and with whom it has outsourcing arrangements. In this case, Triskelion Expeditions will ensure that the data is kept confidential and that it is only used for the purpose for which it was collected by directly supervising the entity contracted by it. – Article 28 RGPD
Personal data may also be transmitted to third parties – entities other than Triskelion Expeditions or of subcontractors – such as companies with whom the Triskelion Expeditions or to entities to whom the data must be communicated by force of law, namely, the AT – Tax and Customs Authority; Judicial Authorities or Criminal Police Bodies. – article 26 RGPD
How does Triskelion Expeditions ensure data security?
At Triskelion Expeditions we implement all relevant measures to protect our users’ personal data from loss or unauthorized access, use or sharing.
All information is stored on secure servers and protected by firewall mechanisms.
However, the security of your information also depends a little on you.
Whenever you are given (or choose) a password to access certain content on our website, you are responsible for keeping this password confidential. We ask that you never share your password with third parties.
Unfortunately, in spite of implementing all the security mechanisms to our
reach, we cannot guarantee one hundred percent security of the information transmitted
through the Internet.
Any information transmitted via the Internet is the responsibility of its owner and Triskelion Expeditions cannot be held liable for external attacks that cause our website security measures to fail.
Triskelion Expeditions proposes to conduct internal audits and fraud prevention procedures in order to assess and improve the effectiveness of the company’s risk management, control and governance processes. – article 32 RGPD
What is the legal basis for processing personal data?
In accordance with Article 6 of the RGPD, the processing of personal data will have to be supported by a legal basis for this purpose, which will be framed in one of the following situations:
The data subject has given his/her consent to the processing of his/her personal data for one or more specific purposes;
processing is necessary for the performance of a contract to which the data subject is party, or for pre-contractual steps at the data subject’s request;
processing is necessary for compliance with a legal obligation to which the controller is subject;
processing is necessary in order to protect the vital interests of the data subject or of another natural person;
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
processing is necessary for the purposes of the legitimate interests pursued by the controller or a third partyunless the interests or fundamental rights and freedoms of the data subject require protection of the personal data, in particular where the data subject is a child (does not apply to data processing carried out by public authorities in the performance of their tasks by electronic means).
How can I delete my account?
In order for you to cancel your account from our site, you only need to send an email to general@triskelionexpeditions, informing us of your intention to cancel your account.
After that we will immediately cancel your user account from the Triskelion Expeditions website