PRIVACY AND COOKIES POLICY

1. Privacy Commitment

   BS Solutions®¹ governs its activity through transparency and security in the processing of personal data. It is therefore committed and dedicated to protecting the security and privacy of personal data. In this context, BS Solutions® has drawn up this Privacy Policy for the purpose of disclosing the terms under which it collects and processes personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation – “GDPR”) and other personal data protection legislation.
   The privacy and security of the data you entrust to us is a priority for us.
   We are committed to only collecting, storing, processing, transmitting, or deleting contractors' personal data transparently and only when such personal data is essential to providing the best services. We inform you how we use your personal data and for what purposes, with the assurance that we collect, share, and store it in accordance with best practices in the field of security and personal data protection.
   When personal data is collected, stored, processed, transmitted, or deleted by other entities, we demand the same level of privacy and security.
   Our goal is for you to feel confident that your data is safe with us, as we are always committed to protecting your privacy and take our responsibilities regarding the protection of your personal data very seriously and with great commitment.

2. Who is responsible for processing your personal data?
   BS Solutions® is responsible for processing your personal data in accordance with the General Data Protection Regulation and supplementary legislation on personal data protection in force in the countries in which it operates.
3. What personal data may be collected?

   BS Solutions®1 may collect the following categories of personal data:

   1. Identification and contact details (for example): name, numbers and expiry dates of civil, tax, or banking identification documents (and respective images), payment details, addresses (correspondence, residence, and tax), telephone number, email address, signature, date of birth, nationality; (others as necessary)
   In addition to this data, any other data that may be necessary to satisfy legitimate interests shall also be collected.
4. What are the purposes of collecting your personal data and what is the basis for its processing?
   Users' personal data is used exclusively within the scope of the contract for use of the “TNET” application. However, users may, with their consent, make their personal data available for other purposes, such as receiving information about new products and features developed, distributed, or marketed by BS Solutions®.
5. How long will your personal data be stored?
   The personal data collected is processed in strict compliance with applicable legislation and stored in databases designed for this purpose.
   Personal data will be retained for the purposes identified in the previous point and for up to 12 (twelve) months after the end of the contract for use of the “TNET” application – unless the right to object, the right to erasure, or the data subject's withdrawal of consent is exercised within the legal limits.
   Once this maximum retention period has been reached, personal data will be securely deleted.
6. With whom may your personal data be shared?
   BS Solutions® may use third parties that have access to users' personal data.
   These entities—subcontractors—may have access to personal data, following BS Solutions®'s instructions for this purpose. These entities are essentially partners and service providers, including contractors, as well as IT, archiving, and back-office support service providers.
   BS Solutions® ensures that such subcontractors offer sufficient guarantees of the implementation of appropriate technical and organizational measures so that the processing meets the requirements of applicable law and ensures the security and protection of the rights of data subjects, under the terms of the subcontracting agreement entered into with the aforementioned subcontractors.
   BS Solutions® may also transmit users' personal data to third parties when such data communications are necessary or appropriate:
   1. in light of applicable law,
   2. in compliance with legal obligations/court orders,
   3. to respond to requests from public or government authorities, or
   4. when you have given us your consent.
7. What are the rights of data subjects?
   Under applicable law, data subjects may exercise the following rights:
   1. Right of Access: obtain confirmation of which of your personal data is being processed and obtain a copy of the personal data being processed.
   2. Right of Rectification: request the rectification of your personal data that is inaccurate or request that incomplete personal data be completed.
   3. Right to Erasure: obtain the erasure of your personal data, provided that there are no valid grounds for its retention.
   4. Right to Restriction of Processing: request the restriction of the processing of your personal data, requesting the suspension of processing or the restriction of the scope of processing to certain categories of data or purposes of processing.
   5. Right to Portability: receive the data you have provided to us in a commonly used and machine-readable digital format or request the direct transmission of your data to another entity that will become the new controller of your personal data.
   6. Right to Object: object, at any time, to data processing, such as in the case of data processing for marketing purposes;
   7. Right to Object to Decision-Making Based on Exclusively Automated Processing: not to be subject to any decision made exclusively on the basis of automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
   Under the terms of the law, the owner of personal data is guaranteed the right to withdraw their consent for the processing of data legitimized by consent, through the means mentioned above, or, if they have given their consent through an online channel, they may withdraw it through the same channel. However, the withdrawal of consent does not invalidate the processing carried out up to that date based on the consent previously given.
   To exercise your personal data protection rights or if you have any questions about how we use your personal data, please contact us using the following methods:
   • Email address: gpdr@bs-solutions.net
   If you are dissatisfied with how we use your personal data or with our response to your request to exercise your rights, you may file a complaint:
   • to the National Data Protection Commission (CNPD) – Address: Avenida D. Carlos I, 134, 1.º, 1200-651 Lisbon – Telephone: +351213928400 – Fax: +351213976832 – Email address: geral@cnpd.pt.
8. How is personal data protected?
   BS Solutions® is committed to ensuring the confidentiality, protection, and security of users' personal data by implementing appropriate technical and organizational measures to protect their data against any form of improper or unlawful processing and against any accidental loss or destruction of such data.
   To this end, the company carries out its activities using systems designed to guarantee the security of the personal data processed, creating and updating procedures that prevent unauthorized access, accidental loss, and/or destruction of personal data, undertaking to comply with legislation on the protection of candidates' personal data and to process this data only for the purposes for which it was collected, as well as ensuring that this data is processed with appropriate levels of security and confidentiality.
   Among others, we highlight the following measures:
   • Restricted access to personal data only by those who need it for the purposes set out above;
   • Secure storage and transfer of personal data;
   • Protection of information systems to prevent unauthorized access to your personal data;
   • Implementation of mechanisms to ensure the integrity and quality of your personal data;
   • Permanent monitoring of information systems, with the aim of preventing, detecting, and stopping the misuse of your personal data;
   • Redundancy of equipment for storing, processing, and communicating personal data, to avoid loss of availability.
9. Update to the privacy policy
   This privacy policy may be updated from time to time, which will be disclosed on the website.

• ¹ Trademark owned by the commercial company BSNEGÓCIOS, LDA.