Openskills – Enterprise Communications, Lda, headquartered at Via Engenheiro Belmiro Mendes de Azevedo, no. 47, 2nd floor, room 8, Maia, Porto, Portugal, registered under the single registration number 513163107 at the Porto Commercial Registry Office (hereinafter referred to as Openskills), collects and processes personal data (information relating to an identified or identifiable natural person) of clients, suppliers, and partners in the course of its business activities.

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, Openskills adopts this policy regarding the processing of personal data, whether by automated or non-automated means, for the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or any other form of making available, alignment or combination, restriction, erasure, or destruction of such data.

This policy applies to Openskills’ headquarters, its branches, employees (regardless of their employment relationship), subcontractors, suppliers, and partners, as well as to any organizations or individuals acting on behalf of Openskills.

Through this policy, Openskills ensures that the principles of personal data protection are applied, namely:

1. Lawfulness, fairness, and transparency: Personal data is processed only when explicit, informed, and transparent consent has been obtained from the data subject regarding the purpose of its use.

2. Purpose limitation: Data is collected for specific, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.

3. Data minimization: Data collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.

4. Accuracy: Data must be accurate and kept up to date where necessary. Every reasonable step must be taken to ensure that inaccurate personal data, having regard to the purposes for which it is processed, is erased or rectified without delay.

5. Storage limitation: Data is kept only for as long as necessary for the purposes for which it is processed, with retention periods defined according to its purpose.

6. Integrity and confidentiality: Data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing, through appropriate technical or organizational measures.

7. Accountability: All parties involved in the processing of personal data are responsible for ensuring compliance with these data protection principles.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, data subjects have the right to request access to their personal data, as well as its rectification or erasure (“right to be forgotten”), and to request restriction of processing concerning the data subject, or to object to processing, including automated individual decision-making and profiling, as well as the right to data portability.

The data subject also has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal, and the right to lodge a complaint with a supervisory authority.

Openskills may request proof of identity before responding to a data subject wishing to exercise any of these rights and will then forward the matter for appropriate handling.

Pursuant to and for the purposes of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, personal data may be shared by Openskills without the knowledge of the data subjects where processing by competent authorities is required for the prevention, investigation, detection, or prosecution of criminal offences, or the execution of criminal penalties, including the safeguarding and prevention of threats to public security.

For any inquiries, please contact us at: gdpr@openskills.pt