1. Scope of application and entity responsible for the processing of personal data
This Privacy Policy applies to all personal data provided by the user (the "User") to join and participate in the virtual event EDP Business Summit (the “Event”) on this online platform (the “Platform”), operated by Win World (“Win World”).
EDP Comercial - Comercialização de Energia, S.A. (referred to as “EDP Comercial”), registered at Conservatória do Registo Comercial with VAT code 503 504 564, registered headquarters at Avenida 24 de Julho, nº 12, 1249-300 Lisboa, and 20 842 695 EUR of share capital, shall act as data controller regarding all data process on the Platform.
This policy informs the User on how EDP Comercial collects, processes and protects personal data. EDP Comercial respects the User’s privacy and has adopted the necessary measures to protect your personal data.
The user must carefully read this privacy policy and decide freely if the intends to provide his personal data to EDP Comercial before using the Platform.
This Platform is not addressed to underage Users. The User guarantees that he or she is of legal age and that the data communicated is true, accurate, complete and current, being responsible for any nonconformity. If the data communicated belongs to a third party, the user guarantees that he informed the third party about the conditions provided in this document and that he was authorized to provide his data to EDP Comercial for the indicated purposes.
This Privacy Policy must be read together with the Platforms’ Terms and Conditions (available here).
Commented [SR1]: Nota para a EDP Comercial: por favor incluam o link para os T&C da plataforma
2. Collected personal data
EDP Comercial collects the following categories of personal data (the "Personal Data"):
3. Local Storage
To enable access to the Platform, we may make use of local storage technology. The information collected via local storage is not shared with third parties or accessible outside this domain.
You can ensure that local storage is no longer in your browser after you cease using the Platform by clearing your browsing data.
4. Data processing purposes and legal basis
EDP Comercial processes Personal Data for the purpose of allowing you to log in and access the platform.
EDP Comercial shall only process the data strictly required to join the Event and pursuant to Article 6.1(b) of the GDPR for joining the Event under our Terms and Conditions.
5. Recipients
The personal data shall be communicated to Win World, the processor in charge of maintaining the Event’s Platform. Win World resorts to Shake IT to perform its services through the Event platform, carrying out specific processing activities as a sub-subprocessor and on behalf of EDP Comercial. The use of and access to the Platform may require installing local storage on your browser. Local storage will be installed only if strictly necessary to the operation of the platform or the form.
Data may further be communicated to third parties if the transmission is required to comply with a statutory requirement, a resolution of the Comissão Nacional de Proteção de Dados (Portuguese Data Protection Commission) or of any other proper supervisory authorities, or a court order; or where the data are communicated to protect vital interests of the data subjects or any other legitimate purpose provided for by law.
6. International data transfers
Data processing for the aforementioned purposes shall occur in its entirety within the European Economic Area. The transfer of personal data is based on information systems equipped with appropriate information security measures, such as content and communication encryption and the use of secure servers. If transfers from EU to countries not considered adequate by the European Commission apply, EDP Comercial will put in place appropriate and suitable safeguards to protect the Personal Data. Accordingly, the Personal Data are transferred in compliance with the requirements and the obligations provided by applicable data protection laws, such as standard contractual clauses adopted by the European Commission as per Articles 45 and 46 of the Privacy Regulation.
7. Retention period
Collected Personal Data may be retained for the necessary period for the fulfilment of purposes for which the data was collected as outlined in this Privacy Policy.
Your personal data shall be stored until (and including) the Event and retained for 12 months. The data may be stored for a longer period if deemed required for the defense of legal claims or for historical or statistical research purposes or to acquire any other type of relevant statistics. In any event, we will store the personal data only for as long as strictly required and endeavor, whenever possible, to produce our statistics based on anonymous data.
8. User rights
The User, at any given time, can exercise the following rights:
In order to exercise the aforementioned rights, the user may contact EDP Comercial by sending a written request to the following email address: dpo.pt@edp.com.
Data subjects are further entitled to lodge a complaint with the Comissão Nacional de Proteção de Dados (Portuguese Data Protection Commission) if they consider that their personal data have been breached.
For any questions regarding this information, data subjects may contact EDP through the above email address.
9. Changes to the Privacy Policy
EDP Comercial reserves the right to change this privacy policy at any time. The changes shall be duly notified using the contact details provided by the data subjects.