Privacy Policy
This Privacy Policy aims, in compliance with Regulation (EU) 2016/679of the European Parliament and of the Council of 27 April 2016 (hereinafter the “General Data Protection Regulation”or “GDPR”), concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as with applicable national legislation, namely Law No. 58/2019 of 8 August, which implements the GDPR into the Portuguese legal framework, to inform data subjects who interact with Lince Capital, SCR, S.A. (hereinafter “Lince Capital”), including through its website, of the most relevant information regarding the protection of their personal data. This includes their rights and how those rights may be exercised, as well as, in general, the personal data collected, the manner in which it is processed, the purposes of the processing, the associated legal bases, and the applicable retention periods.
Data Controller
Lince Capital is the Data Controller of the personal data and may be contacted via the following email address: info@lince-capital.com.
Transfer of Personal Data and Recipients
In addition to being disclosed to public authorities where required by law, personal data may also be processed by service providers acting on behalf of Lince Capital whenever legally required or contractually necessary. In such cases, only the personal data strictly necessary for the performance of the requested services will be made available to those entities.
Lince Capital ensures that any processors engaged provide sufficient guarantees that they implement appropriate technical and organisational measures to process personal data in compliance with the GDPR and are capable of safeguarding the rights of data subjects.
Where required by law and for the purposes described herein, personal data may also be disclosed to judicial, administrative, supervisory, or regulatory authorities.
Rights of Data Subjects
Data subjects have the right to:
- Request access to their personal data, as well as its rectification, erasure, or restriction of processing;
- Object to the processing of their personal data;
- Receive the personal data concerning them that they have provided to the Data Controller in a structured, commonly used, and machine-readable format, and request that such data be transmitted to another data controller, where feasible and technically possible;
- Withdraw their consent at any time, where processing is based solely on consent;
- Lodge a complaint with the supervisory authority, namely the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD).
To exercise any of these rights, data subjects should submit their request in writing by email to info@lince-capital.com.
Data subjects may also request further information regarding the processing of their personal data or submit complaints regarding the way in which their personal data is processed, without prejudice to their right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
Personal Data Security
Lince Capital implements appropriate and necessary technical and organisational security measures to protect personal data against misuse, loss, unauthorised access, disclosure, alteration, or destruction. Personal data is processed with the utmost confidentiality, in accordance with Lince Capital’s internal security and confidentiality policies and procedures, which are periodically reviewed and updated as necessary.
Minors
Minors may not use the services made available through the website without the prior authorisation of their parents, guardians, or legal representatives, who shall be solely responsible for all acts carried out through the website by the minors under their care, including the completion of forms containing the personal data of such minors.
Personal Data Breaches
In the event of a personal data breach which is likely to result in a high risk to the rights and freedoms of data subjects, Lince Capital undertakes to notify the affected data subjects, as well as the Portuguese Data Protection Authority (CNPD), within 72 hours of becoming aware of the incident, in accordance with applicable law.
Changes to the Privacy Policy
This Privacy Policy, which forms an integral part of the General Terms and Conditions of Use of the website, may be amended at any time without prior notice by publishing a new version on the website, expressly indicating the date of the latest update.
Governing Law and Jurisdiction
Any disputes arising from the validity, interpretation, or enforcement of this Privacy Policy, or relating to the collection, processing, or transfer of personal data, shall be subject exclusively to the jurisdiction of the courts of the District of Lisbon, Portugal, without prejudice to any mandatory legal provisions that may apply.