Articles 8, 13, 14, and 21 of the General Data Protection Regulation – GDPR

The entity responsible for the processing of personal data, Bethera, Lda, is a sole proprietorship with its corporate purpose, contacts, and representative.

The processing of personal data by Bethera Lda complies with Regulation (EU) 2016/679 of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data.

The collected data will be used for the purpose that motivated its collection and for which it was authorized by the respective owner. The data may also be used, with the explicit consent of the owners, for contacts with information related to the purpose of data processing.

When filling out forms, the provision of your personal data is optional, free of charge, and voluntary.

However, in certain forms, the information marked with an * is mandatory. The failure to provide the information marked as mandatory will result in the inability to analyze the information for the purpose of completing the form and, consequently, the inability to provide the requested information or services, as it hinders communication.

In the provision of services and the offering of products, Bethera, Ltd. handles various categories of personal data from both Clients and non-Clients, classifying them as follows:

1. Civil identification data (for example, name, gender, date of birth, signature);
2. Tax identification data (for example, tax identification number);
3. Digital identification data (for example, IP address, geographic coordinates);
4. Other identifying information (for example, father's name, mother's name, social media);
5. Address and contact information (for example, tax address, mailing address);
6. Data on professional and academic qualifications (for example, profession, employer, income, public positions, self-employment).

Bethera Lda processes personal data of any data subject under any of the following purposes:

1. Execution of contracts entered into or carrying out pre-contractual due diligence at the request of the data subject;
2. Compliance with legal obligations to which Bethera Lda is subject;
3. Pursuit of legitimate interests of Bethera Lda;

Other situations that do not fall under the aforementioned purposes require obtaining the consent of the data subject, which must be given freely, specifically, informed, and unequivocally.

To fulfill its duties and provide quality service, Bethera Lda may need to communicate your personal data to other entities, including the following categories of recipients: Tax Authority, service providers.

In the completion and submission of forms, in addition to the information requested in the form regarding name, email, and mobile contact, the system records the IP, the date, the time, the service provider of the communications, the browser, and the device.

We use "cookies" to collect information about your visits to our website and to improve your experience. You can find more information about how we use cookies in the "Cookie Usage" section below.

The processing of data by Bethera Lda will continue as long as it is deemed necessary or mandatory to fulfill the aforementioned purposes. After the termination of the contractual relationship, personal data, data processing, and data retention will be maintained for the legally required periods or until they expire, as provided by law, the rights arising therefrom.

Under the applicable legislation, Clients, as data subjects, enjoy the following rights:

1. Right of access: whenever you request it, you can access your personal data, obtain information related to the processing of your data, and also obtain a copy of your personal data being processed.
2. Right to rectification: whenever you believe that your personal data is incomplete or incorrect, you can request its rectification or completion.
3. Right to erasure: without prejudice to the legal and regulatory obligations that may limit the exercise of this right, you may request the erasure of your personal data when one of the following situations occurs: (i) the personal data are no longer necessary for the purpose for which they were collected or processed; (ii) you withdraw the consent on which the processing of the data is based and there is no other legal basis for it; (iii) you object to the processing of the data and there are no overriding legitimate interests, assessed on a case-by-case basis, that justify the processing; (iv) the personal data must be erased under a legal obligation to which Bethera is subject; (v) the personal data have been processed unlawfully; or (vi) the personal data were collected in the context of the provision of information society services. The right to erasure does not apply when the processing is necessary for: (i) the exercise of freedom of expression and information; (ii) compliance with a legal obligation that requires processing; (iii) reasons of public interest in the area of public health; (iv) archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, to the extent that the exercise of the right to erasure is likely to make it impossible or seriously impair the achievement of the objectives of that processing; or (v) the establishment, exercise, or defense of a right in legal proceedings.
4. Right to limit processing: you can request the limitation of the processing of your personal data in the following cases: (i) if you contest the accuracy of your personal data, for a period that allows for the verification of its accuracy; (ii) if the processing is unlawful and you oppose the deletion of the data, requesting instead the limitation of its use; (iii) if Bethera no longer needs the personal data for processing purposes, but such data is necessary for the declaration, exercise, or defense of a right in legal proceedings; or (iv) if you have opposed the processing, until it is verified whether Bethera's legitimate interests prevail over yours.
5. Right to withdraw your consent: in cases where data processing is based on your consent, you can withdraw your consent at any time. In this case, your personal data will no longer be processed, unless there is another legal basis that justifies such processing by Bethera.
6. Right to file a complaint with the CNPD: you have the right to file complaints regarding matters related to the processing of your personal data with the National Data Protection Commission.

The information contained in this document may need to be changed over time. Therefore, we recommend checking it through our website, accessible at www.bethera.pt, where this information will be constantly updated, as well as in our facilities.

If you have any questions or comments regarding our privacy policy, please contact us by email at [email protected].

The authentication for database records requires two-factor authentication (2FA), meaning it is mandatory to provide a second validation to access an account, in order to ensure that the person logging in is indeed who they claim to be.

All passwords in the database are encrypted using SHA256, which makes it difficult to access the actual information in case of system entry.

The authentication endpoints are protected against brute force attacks to prevent unauthorized access to the system.

The entire system operates in an application-based and independent manner, based on a cluster system, where additionally, 3 daily backups are performed to redundant servers.

Use of Cookies

Cookies are pieces of information that a website transfers to your hard drive to store and sometimes track information about you. Cookies are common elements on the Internet and do not harm your system — they simply collect information. They help ensure that you have the best possible experience when visiting our website.

Most web browsers accept cookies, but if you prefer, you can change your settings to prevent this. You are not obligated to accept cookies, but your user experience may be limited in some features if you choose not to accept them.

Our website uses cookies to, for example, gather information about a user's journey across the website and respond to any of their requests; understand the nature of our audience and tailor the content accordingly; ensure their privacy when visiting our secure sites; store the login data for our secure sites; keep track of their preferences to improve and enhance the quality of their visit to our website.

Session Cookies: these are temporary cookies that remain in the browser's cookie file until you leave the web page, leaving no record on the user's hard drive. The information collected by these cookies is used to analyze traffic patterns on the site. Ultimately, this allows us to improve the content and enhance the usability of the site.

Analytics Cookies: these are cookies that, when properly processed by us or by third parties, allow us to quantify the number of users and perform measurement and statistical analysis of how users use the offered service. We analyze your browsing on our site with the aim of improving the availability of the products or services we provide.

Advertising Cookies: these are cookies that, when properly handled by us or by third parties, allow us to more effectively manage the offering of advertising spaces on the site, analyzing your browsing habits and showing you ads related to your browsing profile.