Data protection policy

Amline needs to collect and process personal data from individuals for its activity. This includes information from customers, suppliers, commercial contacts, employees and other people and members of organizations that you have contacted or may need to contact.

This policy describes how personal data must be collected, handled and stored in accordance with Amline's data protection requirements and the law, regardless of its medium (electronic, paper or any other).

This policy applies to:

• Amline headquarters
• All Amline branches.
• All Amline employees regradless of the type of contract.
• All subcontractors, suppliers and other person or organization acting on behalf of amline

This policy ensures that Amline:

• Complies with legislation relating to the protection of personal data, especially EU Regulation 2016/679, of 27/04
• Protects the rights of employees, customers and other partners
• Is transparent about how it handles personal data
• Protect yourself from the risk of personal data breaches.

The principles applicable to data protection are:

1. Lawfulness, loyalty and transparency: it is necessary to identify the legal basis for each data processing and inform data subjects in advance in clear and accessible language about the purposes and how we do so.
2. Limitation of purposes: the specific purposes of processing personal data must be explicit, legitimate and determined at the time of collection of personal data. Data collected for one purpose must not be used for another purpose other than the first.
3. Adequacy, relevance and minimization: only personal data that is necessary and appropriate for the purposes intended to be achieved will be processed.
4. Accuracy and updating: necessary measures must be taken to ensure that inaccurate data is corrected or deleted.
5. Retention limitation: personal data will only be stored for as long as necessary for the purpose for which it is intended. A deadline for erasure or destruction will be defined for each set.
6. Security and confidentiality: personal data will be stored to ensure its protection and access will be conditioned to ensure that only authorized personnel can process it.
7. Privacy by design and by default: before any data processing takes place, measures will be taken to ensure that privacy is a concern from the beginning and throughout the entire processing process.

Data subjects have the right to access, rectification, purpose limitation, portability, erasure and opposition to automated decisions.

The employee who receives contact from a holder who intends to exercise any of these rights must verify their identity before providing any information, in accordance with the rights exercise procedure. After that, you must forward the request to the Privacy Coordinator for processing.

Amline may share the data with public authorities without the holders’ knowledge in compliance with a legal or judicial obligation.

Santa Maria da Feira, February 12, 2024

(last update 12.02.2024)

For any questions related to Personal Data Protection, please contact privacidade@amline.pt