Privacy Policy

Mezzegra – Green Energy, S.A. may, unilaterally and at any time, alter, modify, add to or rectify this Privacy Policy, without the need for any prior notice.

1. Data controller
Mezzegra – Green Energy, S.A. is the data controller, with offices at Rua João de Deus, Nº. 51 8150-152 São Brás de Alportel. You can contact the data controller at any time with any questions about data protection by e-mail to info@mezzegragreenenergy.com.

2. Legal basis for the collection and processing of personal data
By accessing and using https://mezzegragreenenergy.com, its content and/or our services, the user freely and expressly accepts and consents, by means of an unequivocal positive act, to their personal data, requested or optionally provided by them, being collected and processed by Mezzegra – Green Energy, S.A., under the terms set out herein.

3. Purposes of processing personal data
The purpose of the data provided and collected by Mezzegra – Green Energy, S.A. is to:

• Sending informative communications about our services.
• Developing our business and services.
• Sending promotional communications.
• Requesting additional information.
• Distributing requested reference materials.
• Sending CVs.
• Enrolment in courses and seminars.

Demographic information, including gender and occupation, is not usually required, however it may be submitted when a visitor responds to an online job application. It is Mezzegra – Green Energy, S.A.’s policy to limit the collection of information so that it is only sufficient to fulfil the visitor’s requests. In cases where non-mandatory information is requested, the website visitor will be notified of this at the time the data is collected.

Visitors can also send e-mails via the website. Each message will contain the user’s name and e-mail address, as well as additional information that the user considers important to include in the message. Since our site is a recruitment tool, a visit to our site may also result in the user sending a CV to a recipient at Mezzegra – Green Energy, S.A.

Apart from the cases provided for by law, the processing of personal data relating to philosophical or political beliefs, party or trade union membership, religious faith, private life and racial or ethnic origin is prohibited, as is the processing of data relating to health and sex life, including genetic data. At no time is the collection of sensitive data requested or encouraged. If the user voluntarily provides them, Mezzegra – Green Energy, S.A. will not be held responsible for their processing under this policy.

In accordance with the data protection legislation in force in the European Union (GDPR), the use of personal data must be justified by at least one legal basis for the processing of personal data. You can consult the explanation of the scope of each of these grounds. *

The legal basis applicable to the collection and use of your personal data for customer service and marketing purposes is your consent.

*Legal bases for processing personal data

• When you have given your consent to the processing of your personal data (for these purposes you will be presented with a consent form for the use of your data, which you can subsequently withdraw);
• When the processing is necessary to enter into a contract or perform a contract;
• When processing is necessary to fulfil legal obligations to which Mezzegra – Green Energy, S.A. is subject;
• When processing is necessary to fulfil a legitimate interest and our reasons for using it outweigh your data protection rights;
• When processing is necessary for us to assert, exercise or defend a legal claim against you, us or a third party.

4. Categories of personal data we process

Name and contact details: We collect your first and last name, e-mail address, address, telephone number and other similar contact details.

Demographic data: Age, gender, country and preferred language.

Usage data: We collect data about how you interact with our Services. This includes data such as the features you use, the items you purchase, the web pages you visit and the search terms you enter. This also includes data about your device and the network you use to connect to our Services, including IP address, device identifiers (such as IMEI number for phones), regional and language settings. It includes information about the operating systems and other software installed on your device, including product keys. And it includes data about the performance of the services and any problems that have arisen from your experience with those services.

Location data: We collect data about your location, which can be accurate or inaccurate. Accurate location data can be Global Position System (GPS) data, as well as data identifying mobile communications towers and Wi-Fi hotspots, which is collected when you activate location-based services or features. Inaccurate location data includes, for example, a location derived from your IP address or data that indicates your location less precisely, such as a city or postcode.

Content: We collect content from your files and communications whenever it is necessary to provide you with Services.

5. Cookie Policy
Please read our Cookie Policy

6. Security of the processing of your personal data
All Mezzegra – Green Energy, S.A. employees follow a network security policy. Only authorised Mezzegra – Green Energy, S.A. employees have access to personal data, and they are also bound by the duty of secrecy and confidentiality.
Mezzegra – Green Energy, S.A. employs measures to protect the information collected from loss, destruction, disclosure, unauthorised access, misuse and alteration.
Although the transmission of data via the internet or website cannot guarantee total security against intrusion, Mezzegra – Green Energy, S.A. and our service providers and business partners endeavour to implement and maintain physical, electronic and procedural security measures designed to protect your personal data in accordance with applicable data protection requirements.

Mezzegra – Green Energy, S.A. adopts internal procedures and those at subcontractor level (where applicable) to deal with cases of personal data breaches (which may result in a risk to the rights of data subjects), namely in the detection, identification and investigation of the circumstances, mitigating measures, information circuits between data controller and subcontractor, involvement of Mezzegra – Green Energy, S. A. and notification to the CNPD of the occurrence of personal data breaches (within 72 hours of becoming aware of it). A. and notification to the CNPD of the occurrence of personal data breaches, in accordance with the deadlines laid down in the regulation (up to 72 hours after becoming aware of it).

The Mezzegra – Green Energy, S.A. website is not intended for use by minors. It is neither the policy nor the intention of Mezzegra – Green Energy, S.A. to intentionally collect and process the personal data of minors.

7. Personal data retention period
Mezzegra – Green Energy, S.A. only keeps your data for as long as is necessary for the purpose for which it was collected.

Once the maximum retention period has been reached, your personal data will be irreversibly anonymised (the anonymised data may be retained) or securely destroyed.

For the purposes described in this Privacy Policy (customer service and marketing) your personal data will be kept for a maximum period of 12 to 18 months from the collection of your consent or the last contact made (whichever occurs last) and if, within this period, you have not withdrawn your consent.

8. Right of Access, Rectification, Cancellation and Opposition (ARCO) of personal data.
Under the terms of the GDPR, the data subject has the right to request access to personal data concerning them from the data controller, as well as their rectification or erasure.

The data subject also has the right to withdraw their consent to the processing of their data at any time, without jeopardising the lawfulness of the processing carried out on the basis of the consent previously given.

You can exercise these rights of access, rectification, erasure, restriction of processing, objection to processing, portability or withdrawal of consent with Mezzegra – Green Energy, S.A. by sending an email to info@mezzegragreenenergy.com or a written communication by registered post to the address Mezzegra – Green Energy, S.A, Rua João de Deus, Nº. 51 8150-152 São Brás de Alportel.

9. Right to lodge a complaint with a supervisory authority
Under the terms of the GDPR, the data subject has the right to lodge a complaint with the competent supervisory authority, in this case the National Data Protection Commission.

If you have any questions regarding our use of your personal data, you should first contact us by sending an email to info@mezzegragreenenergy.com or a written communication by registered post to Mezzegra – Green Energy, S.A. Rua João de Deus, Nº. 51 8150-152 São Brás de Alportel.

Subject to certain conditions, you may have the right to ask us to:

• provide you with additional information about our use of your personal data;
• provide you with a copy of the personal data you have provided to us;
• provide the personal data you have given us to another controller at your request;
• update any inaccuracies in the personal data we hold;
• delete personal data whose use is no longer legitimate;
• limit the way we use your personal data until the complaint has been investigated.

Your exercise of these rights is subject to certain exceptions designed to safeguard the public interest (prevention or detection of criminal offences) or our interest (maintenance of professional secrecy).

If you exercise any of these rights, we will analyse them and respond within one (1) month. If you are dissatisfied with our use of your personal data or with our response after exercising any of these rights, you have the right to lodge a complaint with your supervisory authority (Comissão Nacional de Proteção de Dados – CNPD, Rua de São Bento, n.º 148, 3º, 1200-821 Lisboa | Tel: 213928400, e-mail: geral@cnpd.pt).

10. Changes to the Privacy Policy
Mezzegra – Green Energy, S.A. reserves the right, at any time, to update or revise this Privacy Policy in order to adjust it to any legislative changes and/or other constraints. Any changes made will be published in this space, so the user should visit this area frequently to keep informed of the Privacy Policy in force.

Date of last revision: 29/08/2024