B-Zen®

Lisbon, Portugal & Online

Top
 

Privacy Policy

1. The protection of privacy and personal data is a B-Zen® commitment

The protection of privacy and personal data is a fundamental commitment of B-Zen® to the holder of personal data (or simply “holder”) who uses B-Zen® digital platforms and services. With the application of the new General Data Protection Regulation (GDPR)as of May 25, 2018, B-Zen® expresses that it remains strongly committed to protecting the privacy and personal data of the respective data subjects who use B-Zen® digital platforms and services and, to that extent, updates its Privacy Policy in accordance with all the data protection principles and standards that underpin the GDPR.

In this document, we seek to explain what personal data we collect, for what purposes we may use it, how we treat it, with whom we share it, how long we retain it, and how we may contact you and exercise your rights.

B-Zen® suggests and invites you to consult the pages dedicated to privacy and personal data protection, whose updates will be made available on the B-Zen® digital platforms.

2. General Data Protection Regulation

The new GDPR establishes rules regarding the processing, by an individual, company, or organization, of personal data concerning individuals in the European Union (EU).

GDPR protects personal data regardless of the technology used for processing that data; the protection is technologically neutral and applies to both automated and manual processing, as long as the data is organized according to predefined criteria (e.g., alphabetical order).” It is also irrelevant how the data is stored, whether in a computer system, through video surveillance, or on paper; in all these cases, personal data is subject to the protection requirements outlined in the GDPR.

3. Who is the data controller?

B-Zen® is the data controller within the scope of the GDPR.

4. Data Protection Officer

B-Zen® has a Data Protection Officer (DPO) who (i) provides information and advice to the data controller or processor regarding their obligations in the field of privacy and data protection; (ii) oversees the compliance of data processing with applicable standards; (iii) provides advice, upon request, regarding the assessment of data protection impact and oversees its implementation; (iv) serves as a point of contact for the data subject to address inquiries regarding the processing of their data by B-Zen®; and (v) serves as the point of contact for the supervisory authority (National Data Protection Commission – CNPD) regarding issues related to processing and cooperates with this entity.

The Data Protection Officer of B-Zen® can be contacted via the email epd@b-zen.com.

5. Processing of personal data, scope, and amendment of the Privacy Policy

By providing their personal data to B-Zen®, the data subject consents to the processing of such data in accordance with this Privacy Policy and the rules and principles set forth in the Terms and Conditions of the B-Zen® Digital Platforms.

This Privacy Policy applies to data that has been directly provided by the respective data subject or collected during the data subject’s access to digital platforms, B-Zen® services and products, or in the normal course of its functions. Therefore, it is noted that B-Zen®’s digital platforms and services have links to other digital platforms and refer to third-party content that is not covered by B-Zen®’s Privacy Policy. It is advisable that whenever the data subject navigates these platforms, they inform themselves about the content of their respective privacy policies, as well as the applicable terms and conditions.

B-Zen® reserves the right to change its Privacy Policy, so we advise regularly consulting this document, as well as the Cookie Policy and the Terms and Conditions of the B-Zen® Digital Platforms. If the Privacy Policy is changed, we will post a notice on our digital platforms.

6. What is personal data?

Personal data is information relating to an identified or identifiable person. A person who can be identified directly or indirectly is considered identifiable. Also, personal data is the set of distinct information that can lead to the identification of a particular person.

Examples of personal data:

  • First name and surname;
  • Address of a residence;
  • E-mail address;
  • Number of an identification card;
  • Location data (for example, the location data function on a mobile phone);
  • IP address (internet protocol);
  • Cookies;
  • Advertising identifier of your phone;
  • Data held by a hospital or doctor, which makes it possible to unambiguously identify a person;
  • Sound or picture.

7. Who is the holder of personal data?

The data subject is the individual to whom the data relates and who has used the B-Zen® digital platforms and services.

8. Categories of Personal Data

Examples (not exhaustive):

TYPESDATA
Main IdentifiersName, civil or tax identification number, passport number, date of birth, marital status, address, phone number, email address, nationality, photographs and files from the mobile device, data related to the family unit, data related to kinship.
Additional identifiersIBAN, geolocation, educational level, gender, occupation, socioeconomic data, personal ID, IP address, social network addresses, mobile device type, operating system, operating system version.
Special protectionPersonal data of individuals under 16 years old.
Special CategoriesBiometric or genetic data, racial or ethnic orientation, political opinion, trade union affiliation, philosophical or religious belief, health or sexual life data or sexual orientation of a person.

9. What type of information does B-Zen® collect and how?

B-Zen® collects two types of information: personal information and anonymous information. The collection of anonymous information occurs when the data subject visits the digital platforms and aims to improve their operation, including content management and prioritization.

We collect personal data, namely, when you contact B-Zen® directly for clarification, participate in B-Zen® content (programs, contests, etc.), apply for positions, purchase B-Zen® products or services, download or use B-Zen® products, services, and applications, through contacts with our customer service line. The collection can be done orally, in writing, through the completion of forms or sending communications by email, or through the use of B-Zen® digital platforms.

Personal information is sometimes collected automatically (IP addresses for service analysis / improvement).

The data collected by B-Zen® on digital platforms is processed automatically, and the information collected from the data subject is encrypted and managed with advanced security.

10. For what purposes does B-Zen® process your personal data?

Examples (not exhaustive):

PURPOSESDATA TREATMENTS
Content ManagementCollection of data for the reception, consultation, and publication of content and management of interactive participations in B-Zen® programs.
Newsletter SubmissionData collection to enable newsletters to be sent to holders of service subscribers.
Subscribe to alerts / notificationsData collection to enable users to subscribe to alerts and service notifications.
Participation in contests and gamesCollection of data through the completion of online forms for the submission of registration requests for contests organized by B-Zen®.
Participation in events and programs of B-Zen®.Registration and management of guests at events and programs of B-Zen®.
Awarding ManagementContacts with contests and games winners to prizes delivery.
Participation in B-Zen® internship programs.Collection of data through the completion of online forms for the submission of internship program registration requests promoted by B-Zen®.
Application ManagementRegistration and management of spontaneous applications for recruitment processes.
PublicityPlacement of advertising on B-Zen® digital platforms and analysis of browsing profiles.
Marketing Actions DevelopmentAnalysis of the use of B-Zen® digital platforms and services, definition of target audience in event preparation, brand activation, and market studies.
Placement of cookies, web beacons or unique device identifiersData collection to determine the number of users and to understand how users use digital platforms and to identify the route within them for continuous improvement to provide an optimal experience.
ProfilingDesign of navigation profiles on B-Zen® digital platforms, aiming at providing content and generating personalized suggestions.
Engineering, Systems and TechnologyTechnical answers and complaints.

In cases where it appears necessary, we will ask your express consent before using the information for purposes other than those expressly provided in this Privacy Policy.

11. What is the basis for the processing of your personal data?

Consent

Your consent must be expressed – in writing, orally or through the validation of an option – and prior, freely, informed, specific and unambiguous.
As an example: your consent for B-Zen® to analyze the use of services and browsing profile (to display personalized advertising).

Specifically: consent by minors (16 years)

In the case of processing personal data of minors, B-Zen® will require consent from the holders of parental responsibilities, particularly for the purpose of participating in contests.

Contract performance and pre-contractual steps

When the processing of personal data is necessary for the conclusion, execution, and management of a contract entered into with B-Zen®, such as for the acquisition of content; or

Compliance with legal obligation

When the processing of personal data is necessary to comply with a legal obligation to which B-Zen® is subject, such as, for example, the communication of identification or traffic data to police, judicial, tax, or regulatory entities; or

Legitimate interest

The processing of personal data by B-Zen® may be justified for legitimate interests related to the execution of tasks concerning its business activities, such as data processing for service quality improvement.

12. For how long does B-Zen® process and retain your personal data?

B-Zen® processes and retains your personal data according to the purposes for which they are processed and only for the period necessary to fulfill the purposes that led to their collection and retention, always in accordance with the law, guidelines, and decisions of CNPD (National Data Protection Commission), or, as applicable, until you exercise your right to object, the right to be forgotten, or withdraw your consent.

There are situations where the law mandates the retention of data for a minimum period of time, such as the duty to retain business correspondence for 10 years or the duty to retain data relevant for tax purposes for periods of up to 12 years.

After the respective retention period, B-Zen® will delete or anonymize the data whenever they should not be retained for a different purpose that may still exist.

13. Rights of the personal data subject

The data subject has the rights to information, access, and rectification or erasure of personal data, as well as the right to data portability, the right to limit or object to the processing of their data, within the scope and terms of the GDPR and other applicable legislation.

The data subject may withdraw, at any time, the consent given for the processing of their personal data, within the framework of the GDPR. The revocation of consent will not affect the lawfulness of the processing of personal data that was carried out before that date based on the consent previously provided.

He also has the right to file a complaint regarding the processing of his data, addressed to the CNPD (National Data Protection Commission).

Exercise your rights through the following contacts:

E-mail
epd@b-zen.com

 

B-Zen® seeks to respond to requests promptly, without undue delay, within one month from the receipt of the request. In the case of a particularly complex order or under exceptional circumstances, this period may be extended to two months, where necessary, taking into account the complexity of the order and the number of requests received.

As part of your request, you may be required to provide proof of your identity to ensure that the sharing of personal data is only with the respective holder.

The exercise of some of the rights mentioned above depends on the verification of certain circumstances provided for in the GDPR. Accordingly, some requests for exercise of rights may not be satisfied because their legal assumptions are not met. In particular:

  1. As for the right to erasure (‘right to be forgotten’), please note that it is not applicable whenever processing is necessary for the exercise of the freedom of expression and information, which encompasses a significant part of B-Zen®’s activity.
  2. With regard to the exercise of the right to object to data processing, B-Zen® informs that it will only take effect from the date of receipt of the respective request, and its exercise does not affect the legitimacy of the processing carried out until then;
  3. With regard to the exercise of the right to data portability, please note that under applicable law the same applies only to data collected on the basis of your consent.

14. Transmission of personal data

Personal data may be transferred to subcontractors so that they process it on behalf and on behalf of B-Zen®. In this case, B-Zen® will take the necessary contractual measures to ensure that subcontractors respect and protect the personal data of the data subject.

The data may also be transferred to third parties – entities distinct from B-Zen® or subcontractors – such as companies within B-Zen®, companies with whom B-Zen® develops partnerships, in case the data subject has given consent – or entities to whom the data must be communicated by law, such as the Tax Authority, judicial authorities, criminal police bodies, among others.

B-Zen® may occasionally have to transfer your personal data to a third country outside the EU space that is not on the list of countries that the EU has already deemed to have adequate levels of personal data protection. In such cases, B-Zen® will ensure that data transfers are carried out securely, in strict compliance with applicable legal standards.

15. Data processing in the scope of the development of advertising activities and analysis of behaviors on B-Zen® digital platforms

Regarding the collection, use, and processing of personal data of users within the scope of the analysis of the use of B-Zen® digital platforms and placement of advertising, please refer to the B-Zen® Cookie Policy.

As part of the advertising placement activity on its digital platforms, B-Zen® may use the services ‘Google Ads’ and ‘Google Ad Manager’. These services are provided by Google, which assumes the role of data controller for the users of B-Zen® platforms. You should consult the terms and conditions and privacy policy applicable to these services, available here.

In these cases, B-Zen® is not responsible for the data processing activities carried out by third-party service providers, who assume full responsibility for these activities.

16. What security procedures ensure the protection of your data?

B-Zen® takes all necessary and legally required precautions to ensure the privacy of the personal data processed and/or transmitted through its digital platforms. These precautions ensure the online and offline security of this information.

When sensitive information is collected or used, the data will be encrypted using the SSL protocol. This technology, called Secure Socket Layer, is used to enhance the security of data transmission over the Internet, encrypting and protecting sensitive data and information using the HTTPS protocol. SSL ensures to the data subject that the data will not be fraudulently intercepted and that all information is treated with the utmost security.

B-Zen® is not responsible for the content accessed through any link that leads the data subject to navigate outside the digital platforms of B-Zen®, and for the processing of personal data carried out in such cases, whenever such links are the responsibility of third parties. Third parties websites and content are not covered by this Privacy Policy, so we advise that whenever you navigate on those sites, you seek and read their privacy policies, as well as the applicable terms and conditions.

More information