Privacy Policy

Introduction

Ius Omnibus Association, owner of the website www.iusomnibus.eu, respects the privacy of the data subjects and is committed to protecting the personal data entrusted to it, through strict compliance with legislation on the processing of personal data and information security.

This Privacy Policy determines how we collect, use, store, and protect personal data, in accordance with current legislation and best practices for privacy and personal data protection.

Our Privacy Policy applies both to the personal data you provide to us and to all personal data you make available to us when you access any of the services available on the Ius Omnibus website.

The processing of your personal data is guided by strict compliance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability.

Data controller

Data controller is Ius Omnibus Association with a registered office at Avenida 24 de Julho - Second Home Lisboa, Mercado da Ribeira, 1200-479 Lisbon, Portugal.

Ius Omnibus individually determines the purposes and means of processing of the personal data it collects and uses.

Data subjects may contact Ius Omnibus for all matters relating to the processing of their personal data and the exercise of their rights under the GDPR and Law No. 58/2019 of August 8, through the following contact details:

Mobile phone: +351 910 977 799

Email address: info@iusomnibus.eu

Postal address: Avenida 24 de Julho - Second Home Lisboa, Mercado da Ribeira, 1200-479 Lisbon, Portugal

Processing of personal data

How we collect your personal data

Ius Omnibus collects your personal data on several occasions:

i) when you register as a member of Ius Omnibus;

ii) when you fill out the forms on the “Cases” pages;

iii) when you fill out the forms on the “Contact” page;

iv) when you send us communications, request information or clarification, or submit complaints by email or other contact channels provided by Ius Omnibus;

v) when you subscribe to the Ius Omnibus newsletter.

Categories of personal data

When you provide us with personal data through any form available on our website or through any other means of communication, we will process you identification and contact details.

The following personal data is collected on the “Contact” and “Cases” pages: name, email address, and phone number.

On the “Become a member” page, the following personal data is collected: name, country of residence, and email address.

In order to ensure that the personal data we collect and process remains accurate and up to date for the purposes for which it is processed, we ask you to notify us as soon as possible of any inaccuracies, changes, or corrections to your personal data. If you personal data is inaccurate or out of date, Ius Omnibus promptly delete or correct it.

Purposes for the processing of personal data

Ius Omnibus processes personal data for different purposes:

i) Membership management: processing of personal data for the purposes of registering, updating and storing the members database and convening members for general meetings;

ii) Sending communications related to the activity of Ius Omnibus: processing of personal data for sending communications and information about claims, activities, and initiatives of Ius Omnibus;

iii) Responding to requests, requests for information or clarification, or complaints: processing of personal data to respond to requests, requests for information, clarification, or complaints;

iv) Providing advice and support to consumers: processing personal data to clarify consumers’ rights and provide support in resolving consumer disputes;

v) Organizing of collective actions, consultation processes, and public hearings: processing personal data in the organisation of collection actions, consultation processes and public hearings, with the aim of proposing, monitoring, and representing consumers in these initiatives;

vi) Promotion of education on consumption and development of projects and conferences: processing of personal data necessary for the development of activities related to the promotion of education and literacy on consumption and the development of projects, conferences, and studies;

vii) Compliance with legal obligations to which Ius Omnibus is bound: processing of personal data to comply with obligations arising from national or European Union legislation;

viii) Exercise or defense of rights in administrative, judicial or extrajudicial proceedings: processing of personal data for purposes related to the exercise or defense of rights in administrative, judicial or extrajudicial proceedings, whenever necessary.

Ius Omnibus collects and processes only personal data that is adequate, relevant, and strictly necessary for the purposes for which it was collected and mentioned in this Privacy Policy.

Ius Omnibus will not use the personal data collected for purposes other than or incompatible with those mentioned above.

Ius Omnibus keeps a record of all personal data processing activities it carries out.

Legal basis for the processing of personal data

The processing of personal data for the purposes described above is based on the following grounds:

i) Consent: when the data subject expresses their consent to the processing of their personal data for the purposes mentioned above by entering their personal data in the forms available on the Ius Omnibus website;

The data subject accepts the conditions set out in the Privacy Policy and gives their consent to the processing of their personal data by Ius Omnibus when they click on the “SEND” or “REGISTER” buttons on the forms available on the Ius Omnibus website.

The data subject may withdraw their consent at any time by expressing this intention through the contact details provided by Ius Omnibus. Withdrawal of consent does not compromise the lawfulness of the processing already carried out based on the consent previously obtained.

ii) Contractual necessity: when the processing of personal data is necessary for the execution and maintenance of the relationship with consumers, whether or not they are members of Ius Omnibus, for the management of members, to respond to requests, requests for information or clarification, for the judicial and extrajudicial defense of consumers.

iii) Compliance with legal obligations: when the processing of personal data is necessary for Ius Omnibus to comply with legal obligations arising from national or European Union legislation.

iv) Legitimate interest: when the processing of personal data is justified for the pursuit of a legitimate interest pursued by Ius Omnibus.

The main legitimate interest pursued by Ius Omnibus consists of the pursuit of its consumer protection activity, namely through the execution and maintenance of the relationship with consumers, whether or not they are member of Ius Omnibus, management of members, response to requests, requests for information or clarification, and the judicial and extrajudicial defense of consumers.

Ius Omnibus ensures that the processing of data for the pursuit of legitimate interests is limited to what is necessary and respects the rights, freedoms, and reasonable expectations of data subjects.

There may be situations where processing is based on other legal basis. In such cases, Ius Omnibus will identify the applicable legal basis for processing and communicate it to the data subjects.

Retention period for personal data

Your personal data will be stored and retained by Ius Omnibus only for the period strictly necessary to fulfil the purposes for which it was collected or, where applicable, for the period required by law.

The period for which we retain your personal data may vary depending on the purpose for which it was collected and processed. Therefore, we retain toy personal data for the following periods:

i) Membership management: until the member withdraws from the association, at their own request;

ii) Sending communications related to our initiatives and activities: until you exercise your right to object or withdraw your consent, as applicable;

iii) Responding to requests, requests for information or clarification, or complaints: until the personal data in no longer necessary for these purposes;

iv) Providing advice and support to consumers: during the provision of advice and support;

v) Organizing of collective actions, consultation processes, and public hearings: until the personal data is no longer necessary for these purposes or for the legally required period;

vi) Promotion of education on consumption and development of projects and conferences: until the personal data is no longer necessary for these purposes;

vii) Compliance with legal obligations to which Ius Omnibus is bound: for as long as necessary to comply with the legal obligations applicable in each case or until the limitation period for the respective rights expires;

viii) Exercise or defense of rights in administrative, judicial, or extrajudicial proceedings: until the date of the administrative decision, the final judgment of the decision in question, or the date of the extrajudicial resolution.

Personal data may be retained for longer periods in the case of processing exclusively for public achieve purposes, or for scientific or historical research or statistical purposes.

If personal data is used for different purposes with different retention periods, the longest period shall apply.

When the purpose for which the data was processed ceases to exist or after the retention periods have expired, the personal data shall be destroyed or anonymized.

Rights of personal data subjects

Ius Omnibus guarantees respect for the rights recognized to data subjects in the privacy and data protection legislation in force:

i) Right of access: you may obtain confirmation as to whether or not your personal data is being processed and, if so, you may access your personal data, including information regarding the purposes of the processing of your personal data and the categories of personal data processed;

ii) Right of rectification: you have the right to rectify your personal data when it is incorrect or inaccurate, as well as the right to complete any data that is incomplete;

iii) Right to erasure of data (“right to be forgotten”): you may request the erasure of your personal data when, among other reasons, (i) your personal data is no longer necessary for the purposes for which it was collected or processed; (ii) you have withdrawn your consent to the processing of your personal data and there is no other legal basis for the processing; (iii) you have exercised your right to object to the processing of your personal data and there are no overriding legitimate interests that justify the processing of the data; (iv) your personal data has been processed unlawfully;

iv) right to restriction of processing: you may request the restriction of the processing of your personal data in the following situations: (i) if you contest the accuracy of your personal data, for a period enabling Ius Omnibus to verify the accuracy of such data; (ii) when your personal data has been unlawfully processed and, having opposed the erasure of such data, you request the restriction of the use of your personal data; (iii) when Ius Omnibus no longer needs to process your personal data, but you need it for the exercise or defense of rights in an administrative, judicial, or extrajudicial proceeding; (iv) when you have objected to the processing of your personal data for the fulfilment of a public interest obligation or for the satisfaction of a legitimate interest, until it is verified that these legitimate reasons for processing prevail over your reasons;

v) right to data portability: you have the right to receive the personal data concerning you that you have provided to Ius Omnibus, in a structured, commonly used, and machine-readable format, as well as the right to transmit those data to another controller;

vi) right to object: you have the right to object, at any time, on grounds relating to your particular situation, to the processing of your personal data, including when such processing is based on the legitimate interests of Ius Omnibus or third parties, provided that such grounds prevail over the legitimate interests pursued;

vii) right not to be subject to exclusively automated decisions: you have the right not to be subject to any decision made exclusively on the basis of automated processing, including profiling, unless that decision is based on your explicit consent;

viii) right to withdraw consent: you may withdraw your consent to the processing of your personal data for a specific purpose at any time. Withdrawal of consent does not compromise the lawfulness of the processing of your personal data carried out on the basis of the consent previously given.

These rights may be exercised at any time and free of charge, except in the case of manifestly unfounded or excessive requests, particularly due to their repetitive nature, in which case Ius Omnibus may charge a fee or refuse to comply with your request.

To exercise your rights, if necessary, you must provide a copy of a document proving your identity. You must also indicate the right you wish to exercise.

Responses to your requests will be provided within one month of receipt, and this period may be extended to two months, if necessary, in cases of more complex requests or a high number of requests.

The exercise of these rights may be subject to legally established exceptions, namely for reasons of public interest or to defend the legitimate rights of Ius Omnibus.

If you have any questions or wish to exercise these rights, you can contact Ius Omnibus through the following contact details:

Mobile phone: +351 910 977 799

Email address: info@iusomnibus.eu

Postal address: Avenida 24 de Julho - Second Home Lisboa, Mercado da Ribeira, 1200-479 Lisbon, Portugal.

Recipients of personal data

Ius Omnibus does not transmit or communicate your personal data to third parties, except in cases of compliance with the legal obligations applicable in each case and in the context of legal proceedings or by order of administrative authorities.

Ius Omnibus may hire external service providers to provide services that involve the processing of personal data, authorizing them to access personal data within the restrictive and necessary scope of providing those services.

Ius Omnibus remains responsible for the processing, ensuring strict compliance with its obligations regarding the protection of personal data, adopting strict criteria in the selection of service providers, as well as defining and transmitting clear and specific instructions regarding data processing, requiring the adoption of appropriate technical and organizational measures to ensure the protection of personal data processed on its behalf, and requiring the deletion of personal data from Ius Omnibus after the completion of services.

International transfers of personal data

Ius Omnibus does not transfer personal data outside the European Economic Area (“EEA”).

If it transfers personal data outside the EEA, Ius Omnibus undertakes to strictly comply with the applicable legal provisions, including verifying that the third country or international organization ensures an adequate level of protection of personal data and that data subjects enjoy enforceable rights and effective legal remedies.

If necessary, Ius Omnibus enters into appropriate legally binding instruments to ensure compliance with applicable legal provisions, guaranteeing the protection of personal data during the transfer or that will be processed after the transfer, in accordance with data protection legislation.

Personal data security

Ius Omnibus adopts and implements strict technical and organizational measures to ensure the protection, integrity, and security of your personal data against improper or unauthorized access, loss, destruction, or improper disclosure of your personal data.

These measures include:

i) Encryption of personal data;

ii) Restricted access control;

iii) Continuous monitoring of systems to detect, prevent, and mitigate risks;

iv) Security policies and response to physical or technical incidents.

In implementing and evaluating the adequacy of technical and organizational measures to ensure the security of data subjects' personal data, Ius Omnibus takes into account the state of the art, the nature of the personal data, and the risks to which it is exposed.

In cases where you are provided with or have chosen a password to access certain areas of the website, you are responsible for keeping that password confidential and for complying with all security procedures communicated to you by Ius Omnibus.

Complaints

National Data Protection Commission (CNPD) is the independent supervisory authority responsible for personal data protection in Portugal, with powers to supervise and enforce compliance with the GDPR and other applicable legislation, ensuring the protection of the fundamental rights and freedoms of individuals.

Without prejudice to contacting Ius Omnibus in advance, if you consider that the processing of your personal data does not comply with the legislation in force regarding personal data protection, you have the right to lodge a complaint with the CNPD:

Address: Avenida D. Carlos I, n.º 134 – 1.º, 1200-651 Lisbon, Portugal

Telephone: (+351) 213 928 400

Email address: geral@cnpd.pt

Website: http://www.cnpd.pt/

Links to third-party websites

This Privacy Policy applies exclusively to the website www.iusomnibus.eu.

Any access to third-party websites from links on the Ius Omnibus website is not covered by this Privacy Policy. We advise you to consult the respective Privacy Policies.

Validity and changes to the privacy policy

Ius Omnibus may, at any time, make changes to this Privacy Policy.

Any changes will be duly updated and made available on the Ius Omnibus website, under the “Privacy Policy” tab, and communicated with reasonable notice before they come into effect. However, we recommend that you revisit the Privacy Policy page from time to time.

Any revision subsequent to the latest published version will take effect immediately upon publication, revoking previous versions in their entirety.

This Privacy Policy was last updated on of and is updated in accordance with the General Data Protection Regulation (“GDPR”) and other applicable legislation.