1. Data Controller

The data controller is Cenários, hereinafter referred to as Cenários.

You may contact us by email at contact@cenarios.pt.

2. Scope of this Privacy Policy

This privacy policy applies to Clients, Suppliers, Partners, Application Users and other external entities with whom Cenários establishes relationships.

3. How Cenários Collects Your Personal Data

3.1 Telephone

Personal data of Clients, Suppliers, Partners, Application Users and other external entities, provided through this communication channel.

3.2 Email

Personal data of Clients, Suppliers, Partners, Application Users and other external entities.

3.3 Online Platform

Personal data (name, email, phone number, etc.) collected through the contact form or other forms made available on the platform.

4. Purposes for Processing Your Data

At Cenários, we process your data in accordance with applicable personal data protection regulations, including Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Laws No. 58/2019 and No. 59/2019, in both manual and automated ways, for the following purposes:

• Responding to enquiries, questions or any request submitted by email or through the available contact channels.
• Fulfilling legally established contractual obligations.
• Personalising communications, products or services based on the Client’s interests.

5. How Long We Retain Your Data

Cenários will retain your data only for as long as the contractual relationship exists and there is a mutual interest, and thereafter for the legally established periods required to resolve any potential liabilities arising from it.

Should a request for deletion of your data be made — and where legally permissible — the data will be deleted using appropriate security measures to ensure its pseudonymisation or complete destruction.

6. Legal Basis for Processing

Performance of a contract / Legal obligations

For service/product transactions, only the data strictly necessary for their execution is collected. The absence of such data makes the transaction impossible.

Consent

Whenever the company needs to use, store or process personal data that is not strictly necessary for the performance of the contract, or for purposes other than the original ones, the data subject’s consent will be requested.

Withdrawal of consent does not affect the performance of contracts already entered into.

Response to data subject rights

Processing carried out to respond to the exercise of data subject rights, enquiries and complaints.

7. Recipients of Your Data

Cenários does not, under any circumstances, sell data belonging to Clients, Suppliers, Partners, Application Users or other external entities to third parties.

We may share data with subcontracted companies that provide services to Cenários, under contract governing access and use exclusively for the purposes described herein.

Data may also be disclosed to Public Administrations and Bodies when required by law.

8. Technical Tools and Subprocessors

To ensure the proper functioning of our platform and to maintain the quality and stability of our services, Cenários uses third-party technical tools that may process certain personal data. These tools are used exclusively for operational and technical purposes.

Sentry (error monitoring)

We use Sentry, an error monitoring and reporting service provided by Functional Software, Inc. (Sentry.io), to detect, log and diagnose technical errors occurring in our application. Sentry may automatically collect technical information associated with failures, such as:

• User IP address;
• User identifier (when authenticated);
• Browser and operating system information;
• URL and actions performed at the time of the error;
• Technical diagnostic data (stack traces and error logs).

This data is processed solely for the purpose of identifying and fixing technical issues, thereby improving the experience and security of our platform’s users.

Sentry acts as a data subprocessor and handles information in accordance with its own privacy policy, available at https://sentry.io/privacy/. Sentry complies with the GDPR and has entered into the applicable standard contractual clauses for international data transfers.

The legal basis for this processing is the legitimate interest of Cenários in maintaining the quality, security and proper operation of the services provided (Article 6(1)(f) of the GDPR).

9. How Cenários Protects Your Data

Cenários declares that it has adopted all necessary technical and organisational measures to ensure the security and integrity of the personal data processed, preventing its loss, alteration or unauthorised access.

10. Your Rights Regarding Personal Data

You may exercise the following rights by emailing contact@cenarios.pt:

• Right of access: confirmation and access to the personal data we hold about you.
• Right to rectification: correction or updating of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): deletion of data when it is no longer necessary or when you withdraw your consent.
• Right to restriction of processing: temporary restriction of processing, retaining data only for the establishment, exercise or defence of legal claims.
• Right to data portability: receipt of your data in a structured, machine-readable format, with the ability to transmit it to another controller.
• Right to object: objection to processing based on legitimate or public interest, including profiling.
• Right to lodge a complaint: with the Portuguese Data Protection Authority (CNPD) — Rua de São Bento n.º 148-3º, 1200-821 Lisboa, email: geral@cnpd.pt.

In compliance with applicable legislation, Cenários makes the Complaints Book available in physical format at its premises and in electronic format at www.livroreclamacoes.pt. Clients may use this channel to submit complaints or suggestions regarding our services, exercising their right to participation and continuous improvement of our operations.

Cenários undertakes to respond to your request as soon as possible and within a maximum period of one month.