The protection, security, and privacy of your personal data are very important to Galeria São Roque. Given our firm commitment to the protection of privacy and personal data, we would like to provide you with updated information on how we process your personal data and ensure compliance with Regulation 2016/679/EU (General Data Protection Regulation - GDPR).
What we may do with your data - The personal data you provide to us may be processed by Galeria São Roque, Lda., NIF 504090119, as Data Controller, with headquarters at Rua de São Bento, 199 B in Lisbon, for the following purposes:
(A) Communication and outreach activities, namely, sending invitations, information, or news about exhibitions and other events we organize, as well as newsletters, through any of the contact details provided;
(B) Institutional communication activities and information about initiatives we promote, organize, or participate in, through any of the contact details provided;
C) Customer support activities, namely, sending information, providing clarifications, and answering questions and queries, whether submitted in person, by email, by phone, or through our website.
What personal data we collect and process - The personal data we collect and process is as follows: first name; last name; address; email address; telephone number; tax identification number (when purchasing products and/or services); information and history of transactions, including a description of the products or services purchased. Consent to the processing of your personal data, as indicated above, is essential for us to maintain your data and contact you.
Your consent to the collection of the data indicated above and to process it for the additional purposes is required. When purchasing products and/or services, the legal basis for processing the corresponding personal data is the contract entered into. Furthermore, your data may also be processed without your consent, to comply with obligations arising from national and European Union legislation and regulations, to enforce or defend a right in court, to pursue legitimate interests and in other cases provided for in articles six to nine of the GDPR, where applicable.
How We Process Your Data - Your personal data is processed both on paper and electronically, and entered into Galeria São Roque, Lda.'s systems in accordance with applicable legislation—including with regard to data security and confidentiality—and in accordance with the principles of appropriate and lawful processing. We are committed to ensuring the security of the personal data provided to us, having implemented various physical, logical, technical, and organizational security measures to protect the personal data provided to us against dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of unlawful processing.
We would like to inform you that we do not combine personal data and that we do not make decisions based solely on automated data processing, including profiling.
It is also important to note that we regularly update our databases to ensure that your personal data is always correct and accurate.
How we retain and maintain your data - Your data may be processed by management and any other employee who needs to do so as a result of their assigned duties. We do not transmit your personal data to third parties except to accounting or transportation service providers, and there are no recipients or categories of recipients established in third countries to whom personal data is disclosed.
Your personal data will be retained for the period strictly necessary to fulfill the purposes for which it is collected; in any case, the criteria used to determine the length of time for which it will be retained take into account the need to comply with legal obligations and the principle of data minimization, and must always be related to the purpose of the respective processing, as outlined below. When multiple criteria are applied simultaneously, the one that determines the retention of personal data for the longest period will prevail.
i. If you purchase products and/or services from us, your personal data will be retained for the duration of the entire commercial relationship, including the period for any complaints, as well as for the period necessary to comply with any legal obligations to which we are subject.
ii. If you contact us with questions or concerns, we will retain your personal data collected for the period during which the matter remains open.
iii. If you have consented to the sending of invitations, information, or news about exhibitions and other events we organize, your personal data will be retained until you request deletion.
iv. If you have subscribed to our newsletter, your data will be retained until you unsubscribe.
Rights that allow you to control your personal data - Under applicable legislation, the data subject is guaranteed, at no additional cost, the right to know whether we are processing any personal data concerning them; the right to access their personal data; the right to rectify and update their personal data, directly or upon written request, as well as the right to object to the use of said personal data for purposes other than those authorized. The data subject also has the right to request erasure, and at any time the right to limit the scope of the respective processing, to object to the processing itself or, if they so wish, the right to request the portability of the data provided. Likewise, you may withdraw your consent at any time (although withdrawing your consent will not affect the legitimacy of the processing operations carried out before it was withdrawn) and file a complaint with the National Data Protection Commission, at the following addresses: Av. D. Carlos I, nº 134 – 1º, 1200-651 Lisbon and geral@cnpd.pt. If you wish to exercise any of these rights, you must inform Galeria São Roque, Lda., through the following contacts: geral@saoroquearte.pt or by post to Rua de São Bento, 199 B in Lisbon.