INTRODUCTION
The Grupo Galileu – Recursos Humanos (group companies) (hereinafter referred to as Grupo Galileu RH), in order to be able to provide the services it offers, has the need to collect certain types of personal data in the following areas; Recruitment and Selection; Consulting and Training; Salesforce Rentals; Temporary Work and Outsourcing.
Grupo Galileu RH – Consultores de Recursos Humanos, Lda., a subsidiary of Grupo Galileu RH is the entity responsible for the collection and processing of personal data, as well as ensuring compliance with the General Data Protection and Regulation (EU Regulation 2016/679).
Grupo Galileu RH recognizes the importance of the protection and privacy of data collected. We are committed to data protection through the planning, development and implementation of new technical and organizational measures focused on security.
FROM WHOM WE COLLECT DATA
Users of our Site (www.grupogalileu.com)
Applicants / Contributors
Customers
Providers
Others – with the main goal of acquiring additional information about applicants, including references.
HOW WE COLLECT YOUR DATA
SITE USERS
When visiting our site certain information is automatically collected, this occurs when browsing in the site itself. Learn more in our Cookies Policy.
APPLICANTS / EMPLOYEES
Data provided directly, through other sources or automatically, including:
- Through the completion of our CV, in our offices;
- Sending your CV by email to a recruiter or to the company’s general contacts;
- Through third-party sources such as LinkedIn, job aggregators, portals and / or job pages;
- Through the contacts listed as references;
- Through our Clients;
- By browsing in our site.
CLIENTS
Data provided directly, through other sources or automatically, including:
- Through the completion of our curriculum, in our offices;
- Sending your CV by email to a recruiter or to the company’s general contacts;
- Through third-party sources such as LinkedIn, job aggregators, portals and / or job pages;
- Through the contacts listed as references;
- Through our Clients;
- By browsing in our site.
SUPPLIERS
Data provided directly, through other sources or automatically, including:
- When you contact us expressing interest in presenting your services, by email or telephone;
- When you are contacted by us to present your services proposal;
- Through contract signature;
- Online searches;
- Press;
- Through applicants;
- Customers;
- Other suppliers;
- By browsing in our site.
HOW WE USE YOUR DATA
SITE USERS
Data automatically collected is used for statistical purposes with the goal of bettering the site experience. Learn more in our Cookies Policy.
APPLICANTS / EMPLOYEES
Recruitment processes, namely when sending your personal data to our clients;
Within the scope of consulting and training projects;
Processes inherent to the signature of an employment contract;
Through other legal obligations that are imposed to us.
CLIENTS
Data is used within the scope of provisioning and billing services provided.
SUPPLIERS
Data is used within the realm of the current contact or to request proposals depending on specific needs.
WITH WHOM WE SHARE YOUR DATA
Grupo Galileu RH is part of a group of companies, this entails that personal data may be shared between companies in the group;
Grupo Galileu RH employees who require the use of personal data in the execution of their job duties will have access to personal data;
The personal data of Applicants is shared with individuals from our Client companies who are responsible for the selection of candidates;
Personal data is shared with official and / or legal entities in situations involving a contract celebration;
Data may be shared with third-party entities (accounting, IT, lawyers, among others);
Within the scope of legal obligations, for example external audits;
When necessary, Grupo Galileu RH will take the necessary measures to ensure the full protection of personal data.
FOR HOW LONG WE SAVE YOUR DATA
The personal data of the APPLICANTS shall be kept as long as absolutely necessary, in accordance with their respective purpose for having been collected. When there is no longer a need to maintain the data, it will be eliminated.
The personal data of Clients and Suppliers shall be kept as long as they are necessary.
Relevance is considered to entail whether or not there was contact during the timeframe that the data was gathered.
For legal reasons, when a work contract is finished, the personal data of the APPLICANTS/EMPLOYEES shall be kept for a period of 10 years, beginning with the date of resignation or termination.
YOUR RIGHTS
Galileu RH – Consultores de Recursos Humanos, Lda., a company within Grupo Galileu RH, assumes the responsibility of processing personal data in compliance with the General Data Protection Regulation, with the data subject having the following rights:
The right of the data subject to ACCESS their data (Article 15, GDPR) – “The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and if this is the case, the right to access their personal data”.
Right to RECTIFICATION (Article 16 of the GDPR) – “The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.”
Right to erasure (‘right to be forgotten’) (Article 17 of the GDPR) –
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed:
b) the data subject withdraws consent on which the data processing is based and where there is no other legal ground for the processing;
c) the data subject objects to the data processing and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing;
d) the personal data have been unlawfully processed;
e) the personal data have to be erased for compliance with a legal obligation in European Union or Member State law to which the controller is subject;
f) the personal data have been collected in relation to the offer of information society services;
Right to RESTRICTION OF PROCESSING (Article 18 of the GDPR) – “he data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
d) the data subject has objected to data processing pending the verification whether the legitimate grounds of the controller override those of the data subject.”
Right to data PORTABILITY (Article 20 of the GDPR) – “The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
a) the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and
b) the processing is carried out by automated means”;
The right to OBJECT Article 21 of the GDPR) – “The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.”;
Right to LODGE A COMPLAINT with a supervisory authority (Article 77 of the GDPR) – “Without injury to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation”. .
HOW TO GET IN TOUCH WITH US REGARDING YOUR RIGHTS
Galileu RH – Consultores de Recursos Humanos, Lda., Av. Sidónio Pais, 16 – 3º Dto., 1050 – 215 Lisboa or via [email protected].
We may request that you prove your identity in order to ensure that the information is shared with the data subject.
All requests will be reviewed and will have a response within a maximum period of 1 month.
HOW TO CONTACT THE LOCAL CONTROLLER AUTHORITY
National Commission for Data Protection: https://www.cnpd.pt/bin/rgpd/rgpd.htm
LEGAL REASONS FOR USING YOUR DATA
LEGITIMATE INTERESTS
The lawfulness regarding the processing of personal data within our company activities complies with Article 6 (1) (f) of the GDPR: “Treatment is necessary for the legitimate interests pursued by the controller or by third parties, except for the interests or fundamental rights and freedoms of the holder that require the protection of personal data shall prevail.”
We consider that the processing of data of the data subjects to be legitimate within the realm of executing Grupo Galileu RH company activities.
CONSENT
In certain situations we may be obligated to obtain the express consent regarding the processing of your personal data, be it through written consent or through digital means (checking a box).
Article 4 (11) of the GDPR, states that the consent of the data subject must be “freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her”.
SECURITY
Several measures are taken by Grupo Galileu RH to ensure data security regarding unauthorized access, alteration, disclosure and destruction, specifically, through automatic mechanisms that perform daily backups, as well as by retaining information on certified external servers.
By submitting your personal data through third parties, such as platforms, websites and job portals, we suggest that you review their specific Privacy Policy, and note that at this point our Privacy Policy will no longer apply and that of the third party will become applicable.
This Privacy Policy may be changed without prior notice. If you have any questions please contact us at the following:
Galileu RH – Consultores de Recursos Humanos, Lda.
Av. Sidónio Pais, 16 – 3º Dto.
1050 – 215 Lisbon
[email protected]
Lisbon, July 16, 2020