Cropsys IT Consulting (hereinafter referred to as Cropsys), informs that for the establishment and execution of ongoing contractual relationships with you, it has personal and tax data, acquired through verbal or written communications maintained directly with you, relating to natural persons who relate to you, data classified as personal by law.

In accordance with art. 13 EU Regulation No. 2016/679, your data will be processed in the following ways and for the following purposes:

1. Data Controller

   The person responsible for processing the data is Cropsys, Consultoria e Serviços em Informática Lda., with headquarters at Rua Cidade de Bolama Nº10 – 7ºB 1800-079 Lisbon. The updated list of those responsible for processing and handling is maintained and can be consulted at the headquarters of the Data Controller.

2. Purpose of processing

   Your personal data is processed:

   1. Without your express consent art. 6 paragraphs b), e) of the GDPR, for the following purposes:

      1. Manage customer relationships and coordinate accounting, orders, invoicing and any disputes;

      2. Perform operations related and instrumental to the acquisition of information prior to the conclusion of contracts;

      3. Perform operations imposed by regulatory obligations inherent to contracts during the signing phase (such as in the area of ​​combating money laundering);

      4. Archive documents as required by current legislation.

   2. Only with your specific and distinct consent (art. 7 GDPR), for the following marketing purposes:

      1. send, via e-mail, post and/or text message and/or telephone contacts, newsletters, commercial communications and/or advertising material about products or services offered by Cropsys and research the degree of satisfaction with the quality of services provided;

   We collect, through our website, personal information that the visitor is free to provide by filling in specific forms, for the following purposes:

   1. Satisfy the specific request presented by the user;

   2. Sending news, updates, publicizing events and other marketing and commercial activities;

   3. Allow the sending of spontaneous applications or for any open vacancies. This may involve the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.

3. Treatment methods

   The data will be processed in electronic form and/or paper, accessible only by personnel appointed and trained by the company, through the use of duly updated and protected computer systems.

4. Data access

   The processing of collected data is carried out by internal personnel identified and authorized for this purpose in accordance with specific instructions given in compliance with current legislation.

   The data collected, if necessary or instrumental for the execution of the indicated purposes, may be processed by third parties designated as external subcontractors.

   Your data may be made available for the purposes referred to in article 2:

   1. To employees and collaborators of the Data Controller, as internal data processors and/or managers and/or system administrators;

   2. Third-party companies or other subjects (e.g. credit institutions, professional companies, consultants, etc.) that carry out outsourced activities on behalf of the Data Controller, as external data controllers.

   Your data will not be transferred outside the single European area.

5. Links to third party websites

   Users should bear in mind that the website www.cropsys.pt contains links to other websites that are not covered by this privacy policy. Visitors to our website may be directed to third party websites to obtain more information , such as events, content promotions or supplier services; Cropsys makes no guarantees regarding the way user data is stored or used by third-party servers. third parties consulted through the website www.cropsys.pt to understand their use of your personal data.

6. Mandatory nature and consequences of refusal

   The provision of the data itself is mandatory in reference to contractual or legal obligations. Any refusal to provide it will make it impossible for the undersigned to initiate or continue current and future commercial/contractual relationships.

   Failure to provide data not attributable to contractual or legal obligations will, on the other hand, be assessed on a case-by-case basis by Cropsys, which will make the consequent decisions based on the importance of the data requested and not provided.

7. Duration of treatment

   The Data Controller will process personal data for as long as necessary to fulfill the purposes mentioned above and, in any case, for a period not exceeding 10 years from the termination of contractual relationships (if any).

   The personal data provided through the website will be kept for as long as necessary to complete the request. At the end they will be deleted.

8. Data transfer

   The management and storage of personal data will take place within the territory of the European Union.

9. Rights of the interested party

   As an interested party, the user has the right referred to in art. 15 GDPR and, more precisely, the rights to:

   1. Obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible manner;

   2. Get indication:

      1. From the origin of personal data;

      2. The purposes and methods of processing;

      3. The logic applied in the case of processing carried out with the aid of electronic instruments;

      4. The identification data of the owner and administrators;

      5. Subjects or categories of subjects to whom personal data may be communicated or who may become aware of them as designated representatives in the territory of the State, managers or agents;

   3. Get also:

      1. To update, rectify or integrate data;

      2. The cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;

      3. Certification that the operations referred to in paragraphs a. and b. were brought to the attention, also with regard to their content, of those to whom the data were communicated or disclosed, except in the case where this requirement is proves impossible or involves a manifestly disproportionate use of means in relation to the protected right;

   4. Object, in whole or in part, for legitimate reasons, to the processing of personal data concerning you, even if they are relevant for the purpose of collection.

   When applicable, you also enjoy the rights mentioned in articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to limitation of processing, right to data portability, right to object), as well as the right to complain to the competent National or European Authority

10. How to exercise your rights

    As an interested party, the user has the right referred to in art. 15 GDPR.