PRIVACY AND SECURITY POLICY
The Municipality of Mafra takes the privacy and protection of data registered by its users very seriously.
The Municipality of Mafra takes the privacy and protection of data registered by its users very seriously.
In its various portals, there are areas and services that are only accessible through user registration. Depending on the case, only the data necessary for the provision of the service is requested and collected, in accordance with the explicit indications on the portal and the user's options.
The personal or other information collected through registration is intended exclusively for administrative and IT use within the strict scope of the services requested by the user through the Portal. If required, the data subject has the right to access, rectify, update or delete the data provided and should therefore contact the Municipality of Mafra.
The user undertakes to provide the Municipality of Mafra with accurate and complete registration information, in particular the email address, and to notify the Municipality of Mafra of any changes to this information.
The user can access or request access to their data, verify its accuracy and, if necessary, request its rectification.
Other services that may arise later and that require the introduction of personal data are covered by the privacy and security policy of the services that the Municipality of Mafra will implement.
The Municipality of Mafra is committed to respecting current legislation on the protection of personal data and not to transfer, in any form or condition, this information to third-party entities. The Municipality of Mafra is also committed to adopting the necessary security measures to guarantee the safeguarding of users' personal data against its possible misuse or unauthorized access.
COOKIE POLICY
This website adopts different security mechanisms and procedures and follows best practices in terms of information security in the systems that support the services it provides and that store and process users' personal data, namely the use of firewalls and intrusion detection systems, the existence of restricted access – physical and logical –, the logging of operations and their monitoring and auditing, the collection and transmission of personal data through secure means.
The cookies used are valid for 60 minutes and do not contain personal or user identification data.
What are cookies?
"Cookies" are small text files that are stored on access devices through the browser, retaining only information related to preferences, not including personal data. They serve to help determine the usefulness, interest and number of uses of websites, allowing for faster and more efficient navigation, eliminating the need to repeatedly enter the same information.
How can you manage cookies?
At any time, the user can, through their internet browser, decide to be notified about the receipt of “cookies” and/or block their entry into their system. Refusal to use “cookies” on the site may result in the inability to access some areas or receive personalized information.
By disabling cookies, you may prevent some web services from functioning correctly, affecting, partially or totally, navigation on the site.
PRIVACY POLICY OF THE MUNICIPALITY OF MAFRA
The Municipality of Mafra (“Municipality”), aware of the importance of data protection, especially in the context of an increasingly digital and globalized society, undertakes to protect the privacy and rights of the holders of personal data (“holders”), in particular its citizens, employees, and suppliers.
Thus, the Municipality makes and will make every effort to observe and enforce the legal provisions regarding the protection of personal data, as set out in current legislation, in particular the European General Data Protection Regulation (GDPR), approved by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, safeguarding any more specific measures and/or provisions that may be adopted in the national legal system to adapt national legislation to the GDPR, in accordance with the provisions of paragraph 2 of Article 6 of the GDPR.
This Privacy Policy defines and publicizes the practices regarding how the Municipality processes personal data, without prejudice to the rights enjoyed by Data Subjects.
Please therefore pay attention to the following information, as providing your personal data implies knowledge and acceptance of the terms and conditions set out here:
Personal Data
Information relating to an identified or identifiable natural person (“data subject”) is personal data. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifiers or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Responsible for the processing of personal data
The Municipality of Mafra is the entity responsible for processing the personal data of the Data Subjects.
Collection, Processing, and Purpose of Personal Data Collection
The data collected and processed by the Municipality, indicated and completed in the approved applications available at the service counters and/or on the Municipality's website, such as name, tax identification number, Citizen Card number and validity, telephone and/or mobile phone number, address and/or email address, which the Municipality assumes are provided by the holder or by another person authorized by them, are true and up-to-date, are the minimum necessary for the fulfillment of the Municipality's obligations and in accordance with the respective conditions of legality, whether those resulting from the law, namely the Code of Administrative Procedure, approved by Decree-Law No. 4/2015, of January 7, as well as the Legal Regime of Local Authorities, approved by Law No. 75/2013, of September 12, in its current wording, and/or other municipal regulations and the Special applicable legislation, such as those resulting from contractual obligations, specifically the General Law on Public Service Employment, approved by Law No. 35/2014 of June 20, as amended, and/or the Public Contracts Code, approved by Decree-Law No.
Personal data may also be collected by other means to which you have access, in particular email, telephone calls, digital counters and computer applications of the Municipality or by the Municipality or by contractors managed or to which they have access or may consult within the scope of the Municipality's duties and powers, especially delegated or shared ones.
The collected data is processed and stored electronically in a database of the Municipality or by entities co-contracted by it. To achieve the purposes identified above, the Municipality may interconnect the collected data in order to update and complete such data.
Sharing of Personal Data
The Municipality does not share personal data with third parties or entities, except for legally foreseen exceptions, always in accordance with applicable data protection laws and in light of the Municipality's duties and powers, especially and as applicable, for the fulfillment of legal obligations, particularly with the services of the Tax Authority, the General Pension Fund and Social Security, and/or within the scope of the execution of contracts, especially with insurance companies and public transport companies as applicable.
These parties will, however, act as data controllers in their own right, and will be responsible for compliance with applicable data protection laws, and must immediately inform the Municipality of Mafra in the event of non-compliance or defective compliance, for any reason, with personal data protection obligations, for the applicable legal purposes.
In cases where the Municipality shares data with third parties or entities, this is done in accordance with applicable legislation and in accordance with privacy standards deemed appropriate, taking into account the associated risk.
The Municipality does not sell personal data.
Retention period for personal data
The Municipality will retain personal data for the period strictly necessary to achieve the legitimate and specific purpose for which it was collected and/or in accordance with the time limits provided for in applicable legislation for this purpose.
Rights of Data Subjects
Data Subjects may, at any time, access, update, rectify, limit, delete and object to the processing, without prejudice to the rights of the Municipality.
Whenever data processing is carried out based on the Data Subject's consent, the Data Subject has the right to withdraw their consent at any time, or to limit the scope to which the consent refers. Data Subjects may, in particular, object to the use of data for communication and disclosure purposes.
The Data Subject may object to the processing of their personal data, request additional information, or raise any questions related to this Privacy Policy by formalizing their request and/or formulating their question via email addressed to the designated Data Protection Officer of the Municipality of Mafra (geral@cm-mafra.pt) or by letter addressed to the aforementioned Data Protection Officer of the Municipality of Mafra, to the following address: Praça do Município, 2644-001 Mafra.
Data Subjects have the right to lodge a complaint with the competent supervisory authority, namely the National Data Protection Commission, whose contact information can be found at www.cnpd.pt, especially when they have not obtained satisfaction from the data controller regarding the exercise of their rights.
Changes to the Privacy Policy
The Municipality reserves the right, at any time and whenever justified, particularly for the adoption of any measures and/or in light of more specific provisions that may be adopted in the national legal system to adapt national legislation to the GDPR, to amend and/or supplement this Privacy Policy, publishing its full version on the Municipality's website, which will take effect, with the respective amendments, from the date of its availability on said website, with express mention of the date of the last update.
The Municipality recommends that the Data Subject consult the Privacy Policy to stay informed and updated on how personal data is protected and the rights to which they are entitled.