Data Protection

The processing of personal data by Carlos Roma complies with Regulation (EU) 2016/679 of the European Parliament and Council (General Data Protection Regulation — GDPR) and Law No. 58/2019, of 8 August, which ensures its enforcement in Portugal.

This information complements the Privacy Policy and details your rights as a data subject.

• Lawfulness, fairness and transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality

The categories of personal data processed are:

• Identification data: name
• Contact data: email and phone
• Economic and financial data: income, expenses, assets (credit simulations)
• Technical data: IP address, browser type, cookies

Data is processed for the following specific purposes:

• Credit consulting: analysis, simulation and submission of proposals to financial institutions
• Insurance consulting: presentation of insurance proposals
• Marketing: sending newsletters and commercial information (with consent)
• Legal compliance: fiscal, accounting and regulatory obligations

• Consent: Art. 6(1)(a) GDPR — for marketing and simulations
• Contract performance: Art. 6(1)(b) GDPR — provision of requested services
• Legal obligation: Art. 6(1)(c) GDPR — compliance with legal duties
• Legitimate interest: Art. 6(1)(f) GDPR — defence of rights and fraud prevention

Your data may be transferred to service providers located in the European Economic Area (EEA). Any transfers to third countries only occur with adequate safeguards under the GDPR.

You may request information about such transfers through the contacts provided.

• Access — obtain confirmation and a copy of the processed data
• Rectification — correct inaccurate or incomplete data
• Erasure — request the deletion of data
• Restriction — restrict processing under certain conditions
• Portability — receive data in a structured format
• Objection — object to processing for reasons relating to your particular situation
• Not to be subject to automated decisions — including profiling
• Withdraw consent — at any time, without affecting the lawfulness of processing already carried out

Exercising these rights is free of charge and should be requested through the contacts provided.

You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out based on the previously given consent.

Withdrawing consent does not prevent the continuation of the contractual relationship, insofar as processing is necessary for its performance.

• Contact data (form): up to 2 years after last contact, unless deletion is requested
• Credit simulations: up to 5 years, or for the applicable limitation period
• Newsletter: until consent is withdrawn

We adopt the following security measures:

• Data encryption in transit (HTTPS/TLS)
• Restricted access to personal data (authentication and authorisation)
• Periodic backups
• Data retention and deletion policy

For matters relating to the protection of your personal data, contact:

Carlos Roma — DS Intermediários de Crédito

Email: carlosroma@dsicredito.pt

Phone:: +351 961 782 999

If you consider that the processing of your data violates your rights, you may lodge a complaint with the competent supervisory authority:

CNPD — Comissão Nacional de Proteção de Dados

https://www.cnpd.pt