geral@aprova.pt

Animação do Logótipo Aprova

Privacy Policy

Table of Contents

Your personal data is important to us

APROVA respects your privacy and is fully aware of your rights, which require us to fulfil the obligations we are under to safeguard the integrity of the data we collect. APROVA follows the laws on privacy by implementing several procedures whose goal is to guarantee the legislation is respected.

This privacy policy informs our clients, suppliers, employees, and other partners about how we manage data.

We invite you to analyze this information to understand how we collect, use, and share your personal data.

Who is responsible for treating the data

Aprova – Intermediação de Crédito, Unipessoal, Lda., with the fiscal number 515 039 381 and headquartered at Praça Engenheiro José Vaz Guedes, 3 Loja 4C. 2615-399 Alverca do Ribatejo.

Treatment of personal data

Personal data refers to any information about a natural person, identified or identifiable. identifiable. A natural person is identifiable if they can be identified, directly or indirectly, especially through an identifier, such as a name, an identification number, location data, electronic identifiers, or any other specific elements about their physical, physiological, genetic, mental, economic, cultural, or social identity.

All the data provided to APROVA are treated in accordance with the applicable legislation. Therefore, they are:

  • Subject to a licit, loyal, and transparent treatment.

  • Collected for specific, explicit, and legitimate purposes and will not

    be treated in a way that is not compatible with those purposes.

  • Suitable, pertinent, and limited to what is strictly necessary for the

    purposes for which they are being treated

  • Exact and updated whenever necessary:

  • Kept during the period that is strictly necessary and legally

    authorized for the pursuit of the purposes.

Purpose and legitimacy of the data treatment and conservation period

Personal data are treated for the purposes we identify in the table below. These vary accord to specific context and based on the explicit grounds. These are kept during the period that is strictly necessary for the pursuit of the respective purposes:

PurposeLegalityErasure Deadlines
Marketing, Communications, and
information submission
Explicit consentUntil the end of one year
after the end of the
contractual relationship
Starting processesExecution of a contract to
which the data subject is a
party, or for pre-contractual
measures at the request of
the data subject.
Legal deadlines
Invoicing and commercial managementCompliance with a legal
obligation by the Controller
Legal deadlines
Complaints managementFulfillment of a legal
obligation of the party
responsible for the
treatment
Legal deadlines
Treatment of the data holder exercise of
rights requests
Defense of the data holder’s
interests
Until the end of one year
after the end of the
contractual relationship
Purpose
Marketing, Communications, and
information submission
Starting processes
Invoicing and commercial management
Complaints management
Treatment of the data holder exercise of
rights requests
Legality
Explicit consent
Execution of a contract to
which the data subject is a
party, or for pre-contractual
measures at the request of
the data subject.
Compliance with a legal
obligation by the Controller
Fulfillment of a legal
obligation of the party
responsible for the
treatment
Defense of the data holder’s
interests
Erasure Deadlines
Until the end of one year
after the end of the
contractual relationship
Legal deadlines
Legal deadlines
Legal deadlines
Until the end of one year
after the end of the
contractual relationship

Data transmission

APROVA does not transmit your personal data to other entities, except in cases where this is necessary for us to provide the agreed upon services and always with the identified purposes or in pursuit of the fulfilment of legal obligations to which APROVA is subject.

APROVA can share your personal data with the following entities:

To banking entities with whom APROVA has credit intermediation agreements.

  • Service providers that are providing a service to Aprova

  • Judicial, administrative, supervision or regulatory authorities

    Aprova does not share personal data with international entities (i.e., outside of the European Union).

Collecting data from third parties

In case APROVA treats personal data that is collected in an indirect manner, we will provide the holders of such data with information regarding the treatment of said data as soon as possible.

What are your rights?

At any moment, the holder of the personal data can exercise their right to access, rectify, delete, limit, and transfer their data whenever the conditions provided for by the law are guaranteed. To do so, they need to contact APROVA with a written request address to the person responsible for data protection through the communication channels mentioned below (see “How can you contact us”).

The rights referenced above are:

Access right

The holder of the data has the right to be advised regarding which personal data is treated and receive information about said data, such as the purpose of treating the data, which is the period during which the data is kept, amongst others. ́

Rectification right

The right to request the rectification of personal data that is inexact or the right to request that the data which is incomplete be completed, such as address, fiscal number, contacts, amongst others.Deletion right or “right to be forgotten” is the right to request the suppression of your personal data whenever there are no fundamental grounds for these to be kept, such as in the case of the fulfilment of a legal obligation.

The right to request the limitation of treatment of personal data, which might mean: (i) treatment suspension; or (ii) limiting the scope of the treatment to certain types of data or purposes.

Deletion right or “right to be forgotten” is the right to request the suppression of your personal data whenever there are no fundamental grounds for these to be kept, such as in the case of the fulfilment of a legal obligation.

Treatment limitation right

The right to request the limitation of treatment of personal data, which might mean: (i) treatment suspension; (ii) limiting the scope of the treatment to certain types of data or purposes.

Transferability right

The right to receive the data you have shared in a digital format and to read them or the right to request the transfer of your data to another entity, indicated by you.

Opposition right

The right to, at any moment, oppose the treatment of your personal data whenever there are no legitimate interests that prevail over your interests, rights, and freedoms, such as the right to defense in a legal proceeding.

Consent withdrawal right

The holder of the data can, at any moment, and without the need for an explanation, withdraw the previously granted consent.

The exercise of these rights is limited and restrained by the rights and freedoms of third parties, by the existence of legal obligations and by the prevalence of existing interests or confidentiality on the part of APROVA or third parties, under current law.

If you wish to submit a grievance or complaint regarding data protection you can do so with the Comissão Nacional de Proteção de Dados (www.cnpd.pt) at Rua D. Carlos I, 134 – 1o 1200-651 Lisboa. Phone number: +351 213 928 400. Email address: geral@cnpd.pt.

Safety of your personal data

APROVA guarantees the adoption and implementation of the appropriate technical, organizational, and security-related measures to protect your personal data against loss, destruction, or damage, accidental or illicit. Furthermore, we guarantee that the treated data is safeguarded from non-authorized third-party access or use. Likewise, we require that those partners and service providers that might treat personal data on behalf of APROVA adopt these technical measures.

APROVA guarantees privacy and safety when transmitting clients and website users’ data. Namely, we use SSL (Secure Sockets Layer) cryptography in all the exchanged information via website.

If you wish to receive further clarification regarding our data safety policy, or if you are aware of any irregularities, please contact us.

Automated decisions

We do not process personal data using automated decision-making or profile setups.

How can you exercise your rights?

Email: you can exercise your rights via email by writing to privacidade@aprova.pt.

Letter: you can exercise your rights by writing a letter address to the person responsible for data protection at APROVA and mailed to the following postal address:

Praça Engenheiro José́Vaz Guedes, no 3 Loja 4C. 2615-399 Alverca do Ribatejo.

In person: you can exercise your rights by filling out a form, which we make available to you at APROVA.

How can you contact us:

  • Email: privacidade@aprova.pt;

  • Letter:
    Praça Engenheiro José́Vaz Guedes, no 3 Loja 4C. 2615-399 Alverca do Ribatejo.

How can you know about changes in how we treat your personal data?

  • Website: https://aprova.pt