Documentation Area
Isto é Expresso, Serviço de Estafetas, Lda aims to ensure that the processing of personal data is carried out in accordance with the rules established in Regulation (EU) 2016/679 of 27 April 2016. To this end, this document sets out the company's Privacy Policy and defines the main rules observed by Isto é Expresso, Serviço de Estafetas, Lda in the processing of personal data.
The collection and processing of personal data provided to Isto é Expresso, Serviço de Estafetas, Lda, as well as the exercise of data subjects' rights over such data, are governed by this Privacy Policy, by internal regulations and other instruments used by Isto é Expresso, Serviço de Estafetas, Lda, to the extent applicable to data subjects.
Data Processing Definitions
(a) "CNPD": National Data Protection Commission;
(b) "Data Subject's Consent": Any free, specific and informed expression of will by which the data subject accepts that their personal data may be processed;
(c) "Personal Data": Any information, of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identification number or to one or more specific elements of their physical, physiological, mental, economic, cultural or social identity;
(d) "Sensitive Data": Personal data relating to philosophical or political beliefs, party or trade union membership, religious faith, private life and racial or ethnic origin, as well as data relating to health and sexual life, including genetic data;
(e) "Interconnection of Personal Data": A form of processing consisting of relating data from one file with data from another file held by another controller, or relating data from a file held by the same controller for different purposes;
(f) "LPDP / RPDP": Regulation (EU) 2016/679 of 27 April 2016;
(g) "Controller": Isto é Expresso, Serviço de Estafetas, Lda or another Group company that determines the purposes and means of personal data processing;
(h) "Processor": A natural or legal person that processes personal data on behalf of and under the instructions of the Controller;
(i) "Third Party": A natural or legal person, public authority, service or any other body to whom the Controller discloses personal data;
(j) "Data Subject": The identified or identifiable natural person whose personal data is processed by Isto é Expresso, Serviço de Estafetas, Lda;
(k) "Processing of Personal Data": Any operation or set of operations performed on personal data, with or without automated means, such as collection, recording, organisation, storage, adaptation, consultation, use, disclosure by transmission or dissemination, comparison or interconnection, as well as blocking, erasure or destruction.
Principles Applicable to the Processing of Personal Data
General Principles
The processing of personal data governs the collection and processing of your personal data and the exercise of your rights in relation to such data under applicable personal data protection legislation.
The processing of personal data shall be carried out in accordance with the following principles: (i) Lawfulness and fairness; (ii) Purpose limitation; (iii) Adequacy, relevance and proportionality; (iv) Accuracy; (v) Storage limitation; (vi) Transparency; (vii) Security; (viii) Legitimacy.
Purpose
The personal data collected will be processed and stored electronically by Isto é Expresso, Serviço de Estafetas, Lda or by entities subcontracted by it, for the purpose of managing the relationship between Isto é Expresso, Serviço de Estafetas, Lda and the data subject in the context of service delivery.
Collection, Processing and Retention of Personal Data
Isto é Expresso, Serviço de Estafetas, Lda will only process personal data if necessary for the pursuit of its activities, compliance with legal or contractual obligations, or for the purposes indicated above.
Isto é Expresso, Serviço de Estafetas, Lda assumes that the data collected was provided by the data subject and that its provision was authorised by them, guaranteeing that the personal data provided is true and accurate. Nevertheless, appropriate measures will be taken to eliminate or correct inaccurate or incomplete data.
The personal data collected will be retained only for the period necessary to fulfil the purposes for which it was collected, after which it will be permanently deleted.
International Transfers of Personal Data
Isto é Expresso, Serviço de Estafetas, Lda may transfer personal data to entities located outside Portugal that agree to use it for the purposes indicated in this Privacy Policy.
Such transfers may involve sending data to third countries outside the European Union/European Economic Area, which may not have equivalent data protection legislation. In such cases, your consent will be sought before such transfers take place.
Disclosure to Third Parties
Personal data may be disclosed to third parties in the following circumstances:
- Compliance with a legal obligation, CNPD decision or court order;
- Protection of the vital interests of the data subject;
- Sales, business transfers or other transactions involving personal data;
- Any other legitimate purpose provided for under the LPDP.
Subcontracting
Isto é Expresso, Serviço de Estafetas, Lda may engage third-party entities to process personal data on its behalf. Such processors must comply with all security measures and ensure data protection.
Interconnection of Personal Data
The interconnection of personal data will not be carried out without prior authorisation from the CNPD and will follow strict security and non-discrimination measures.
Rights of Data Subjects
Data subjects have the right to access, update and rectify their personal data. They also have the right to object to the processing of data under the LPDP.
Data Collection on the Website
While browsing our website, some information may be collected automatically through technologies such as IP addresses, cookies and browsing data.
If you are a registered customer, you may access your Customer Area at any time to update your personal data or request changes.
Our website may contain links to third-party sites. Isto é Expresso, Serviço de Estafetas, Lda is not responsible for the privacy policies or content of those external sites.
Virtual Assistant (Chatbot)
Our website provides an artificial intelligence-powered virtual assistant (chatbot) designed to answer questions about our services, shipment tracking and general information.
When using the virtual assistant, your messages are transmitted to the Gemini API provided by Google LLC, which acts as a data processor to generate responses. Google LLC is certified under the EU-US Data Privacy Framework, ensuring an adequate level of protection for transferred data.
Conversations are not permanently stored by Isto é Expresso, Serviço de Estafetas, Lda. The conversation history is temporarily maintained in the browser session to allow continuity of the dialogue and is deleted when the session ends. No personal identification data is collected through the chatbot, unless the user voluntarily provides it within the message text.
The legal basis for this processing is legitimate interest (Art. 6(1)(f) GDPR) in providing an efficient customer support service. Users may at any time choose not to use the chatbot and contact us directly through the means indicated on the Contacts page.
Security Measures
Isto é Expresso, Serviço de Estafetas, Lda implements technical and organisational measures to protect personal data against destruction, accidental loss, alteration, unauthorised access or any other unlawful processing.
Final Provisions
Changes to the Privacy Policy
Isto é Expresso, Serviço de Estafetas, Lda reserves the right to modify this Privacy Policy at any time. Any changes will be communicated in writing or published on the company's website.
Contact and Complaints
For questions, complaints or comments about this Privacy Policy, contact Isto é Expresso, Serviço de Estafetas, Lda by email or written request.
If you wish to lodge a complaint regarding the processing of your personal data, you may contact the CNPD (National Data Protection Commission) via this link or at:
Rua de São Bento, 148, R/C, 1200-821 Lisbon
Date of Entry into Force
This Privacy Policy enters into force on 25 May 2018.