Our commitment to the protection of personal data
Oriente Business Tower SIGI, with registered office at Lugar do Espido – Via Norte, Maia, and registered under tax identification number 516614347 (hereinafter referred to as the “Company”), is the Data Controller of the personal data of users of this website (hereinafter “Users” or “Data Subjects”), including its restricted area (hereinafter the “Website”).
The Company is committed to processing Users’ personal data in a responsible, fair and transparent manner. We are strongly committed to protecting your privacy and your personal data. We collect, store and use your data strictly in accordance with this Personal Data Protection Commitment and with the applicable legal provisions, including, but not limited to, the General Data Protection Regulation (GDPR) and national data protection legislation.
As part of our commitment, the Company will always seek to provide you with clear information on how and under what conditions your personal data is processed.
This document aims to provide Users with the necessary information regarding the processing of their personal data in the context of using our Website.
2. Personal Data
Personal data means any information relating to an identified or identifiable individual. This includes data such as name, email address or postal address. Information that cannot be directly associated with your identity (for example, statistical data on the number of website visitors) is not considered personal data.
In general, you may use our Website without revealing your identity or providing any personal data. In such cases, we will only collect general information about your visit. However, certain services may require the provision of specific personal data, which will be processed exclusively for purposes related to the use of this Website — namely to provide the information requested by you.
Whenever personal data is requested, only the essential information will be required. Additional information may be requested on an optional basis. We will always indicate which fields are mandatory and which are optional.
There is no automated decision-making based on your personal data in the context of this Website.
3. Processing of Personal Data
The data provided is stored on secure servers located within the European Union. We have implemented appropriate technical and organisational measures to protect these servers against loss, destruction, unauthorised access, alteration or disclosure. Access is restricted to a limited number of persons responsible for technical, commercial or editorial maintenance.
The transmission of personal data is carried out in encrypted form via SSL (Secure Socket Layer).
This Website is intended for individuals aged 16 or over. We do not knowingly collect data from minors. If such data is identified, it will be deleted immediately.
4. Disclosure of Personal Data to Third Parties
Your personal data is used exclusively to provide the requested services. Where external service providers are engaged, they will only have access to the data to the extent necessary to perform the contracted service and will be bound by contractual obligations of confidentiality and security.
Categories of recipients may include:
i. Entities providing website management services;
ii. Hosting and data storage providers (data centres);
iii. Marketing, design and media service providers;
iv. Entities responsible for infrastructure, technical support and website maintenance.
Data may also be transferred in the event of a merger, demerger, sale or change of control of the Company, with the assurance that the receiving entity adheres to the same data protection principles described herein.
Outside these situations, personal data will not be disclosed to third parties without your consent, unless required by law.
5. Legal Basis for Processing
The legal basis for processing your data will be communicated in each specific case, in accordance with Article 6 of the GDPR.
6. Data Retention and Deletion
Personal data will be deleted or anonymised as soon as it is no longer necessary for the purpose for which it was collected, unless there is a legal obligation to retain it. Once the legal retention period has expired, the data will be securely deleted.
7. Communications
You may contact us through the means provided on the Website, namely email or telephone.
7.1 Contact by Email
When contacting us by email, we collect the personal data provided (name and email address). This data will be processed solely to respond to your request.
The legal basis is the data subject’s consent (Article 6(1)(a) GDPR).
The data will be deleted once the matter has been resolved.
8. Additional Information on the Use of the Website
8.1 Technical Information
Each time you access the Website, data such as IP address, browser request, date/time, browser type and version, and operating system are collected. The IP address is deleted or anonymised after use.
8.2 Use of Cookies
This Website uses cookies to store preferences and facilitate navigation. Further details are available in our Cookie Policy.
8.3 Links to Other Websites
The Website may contain links to external websites (e.g. Google, Google Maps, App Store, etc.). The Company is not responsible for their privacy policies and recommends that you review them before accessing such websites.
9. Exercise of Data Subjects’ Rights
9.1 Data Subject Rights
Data subjects may exercise their rights by contacting the Company via email: dataprotection@sonaesierra.com
Recognised rights include:
- Right of access
- Right to rectification
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to erasure (“right to be forgotten”)
You also have the right to lodge a complaint with the supervisory authority, which in Portugal is the Comissão Nacional de Proteção de Dados (CNPD).
9.2 Additional Information on Withdrawal of Consent and Objection to Processing
You may withdraw, at any time, the consent you have given for the processing of your personal data, with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
Where the processing of your personal data is not based on consent but on another legal basis, you may object to such processing. Your objection will be assessed and, if the legal conditions are met, processing will be discontinued. You will be informed of the outcome of this assessment and, if processing continues, you will receive further information on the reasons justifying it.
10. Updates to this Personal Data Protection Commitment
The terms of this Personal Data Protection Commitment may be amended or updated and will always be published on our Website.
Each revision is identified by the date on which it occurs (see below).
We reserve the right to amend this Commitment at any time, with effect for the future.
Changes may result, among other reasons, from technical modifications to the Website or changes in data protection legislation.
The most recent version of this Personal Data Protection Commitment will always be available on the Website, and regular consultation is recommended.
11. Document Updates
| Date | Version | Country | Comment |
|---|---|---|---|
| 01/04/2026 | 1.0 | PT | Initial Version |