Inspeção-Geral do Ministério do Trabalho, Solidariedade e Segurança Social

This policy aims to define the general principles and rules to be applied by the General Inspectorate of the Ministry of Labour, Solidarity and Social Security (IGMTSSS) as Data Controller and to Instituto de Informática, IP as data processor, to the Personal Data collected by you within the scope of the Ministry of Labour, Solidarity and Social Security General Inspection Portal.

This policy considers the applicable standards, standards and legal requirements, including a specific, explicit and informed notification about the processing of the data to its holders.

The Privacy Policy of IGMTSSS It is effective as of 22 June 2020.

The Privacy Policy applies to all Personal Data collected and processed belonging to the users of the IGMTSSS portal.

The Privacy Policy has as audience the users of the IGMTSSS portal, the Holders of Personal Data, the IGMTSSS and the Institute of Informatics, IP.

Description:

A IGMTSSS and Instituto de Informática, I.P. process Personal Data in accordance with the following principles, set out in Article 5(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, General Data Protection Regulation (GDPR):

• Lawfulness, Loyalty and Transparency
• Purpose Limitation
• Data minimisation
• Accuracy
• Limitation of conservation
• Integrity and Confidentiality

A IGMTSSS and the Institute of Informatics, I.P. define appropriate technical and organizational security measures to effectively implement the principles of data protection

Personal, complying with the legislation in force, and protecting the rights, freedoms and guarantees of the Data Subjects.

A IGMTSSS and Instituto de Informática, I.P. impose the same level of protection of Personal Data on all its suppliers or providers through appropriate contracts.

A IGMTSSS and Instituto de Informática, I.P. have an internal organization for the Protection of Personal Data to ensure compliance with the rules for the protection of Personal Data, supported by Data Protection Officers.

General principles

A IGMTSSS and the Instituto de Informática, I.P. undertake to process Personal Data in accordance with the applicable rules and legislation. Therefore, they develop tools and implement actions with the aim of ensuring and monitoring the effectiveness of the protection of Personal Data.

A IGMTSSS and Instituto de Informática, I.P. have several internal policies and procedures that make its employees aware of the importance of Personal Data Protection, providing them with operational guidance on how to comply with Data Protection legislation and monitor compliance with Personal Data Protection.

A IGMTSSS and the Instituto de Informática, I.P. establishes, in this document, a Privacy Notice to the holders of Personal Data that complies with the requirements of the legislation in force and guarantees a specific, explicit and informed communication about the processing of their data. Responsibilities to notify any breach of Personal Data to the competent supervisory authorities are also defined.

A IGMTSSS and the Institute of Informatics, I.P. undertake to carry out a training/communication program that sensitizes its employees on the subject of information security and privacy of Personal Data.

Privacy Notice

A IGMTSSS and Instituto de Informática, I.P. process Personal Data lawfully, pursuant to Article 6(1) of the GDPR.

The holders of Personal Data may exercise, at any time, the right of information, access, rectification, erasure, updating, limitation of processing, portability, as well as opposition and non-subjection to automated individual decisions regarding their personal data, including the revocation of consent, under the terms of the GDPR or the applicable legislation. To do so, they should refer to the “Contact” chapter of this document.

Data Subjects have the right to complain to the competent Supervisory Authority in case of violation of the applicable rules regarding the protection of Personal Data.

In the event of a breach of Personal Data, the Data Protection Officer of the IGMTSSS notify it to the competent supervisory authorities and communicate it to the data subject when justified, in accordance with Articles 33 and 34 of the GDPR.

Collection and Processing of Personal Data

Within the framework of IGMTSSS portal, a IGMTSSS and the Instituto de Informática, I.P. treat Personal Data related to the fulfillment of its duties.

The collection is done by interconnection, communication or with the Data Subject.

A IGMTSSS and the Instituto de Informática, I.P. only process Personal Data if the lawful processing situations provided for in the GDPR occur.

A IGMTSSS and the Instituto de Informática, I.P. retain Personal Data in accordance with the periods imposed by the legislation in force, in particular taking into account its missions and duties.

A IGMTSSS and Instituto de Informática, I.P. never retain Personal Data for longer than necessary, according to the purposes for which they were collected and are being processed, namely, compliance with legal obligations (eg: archiving, auditing, public procurement, accounting and tax obligations), and settling legal disputes. Circumstances may vary depending on the context and type of Personal Data.

A IGMTSSS and the Instituto de Informática, I.P. ensure that:

• Personal Data is not made available to third parties without the prior consent of its holders whenever this is legally necessary;
• Personal Data is not made available, free of charge or costly, for purposes such as direct marketing, including mailing lists for advertising products and/or services.
• The processing of aggregated data (such as locality, age and other) for purposes considered to be in the public interest, in particular in the context of statistical production, is carried out in a lawful manner, in accordance with Article 89 of the GDPR. In this context, personal identification elements, such as the Name, ID Number, Citizen Card or Tax Identification, or private information are not available.
• Personal Data will only be made available upon request by a judicial authority or public authority with legal powers to do so, in accordance with the legislation in force.
• Ensures the confidentiality and security of Personal Data when making it available to the aforementioned recipients.

Security measures

A IGMTSSS and the Institute of Informatics, I.P. follow organizational and technological security standards, and effective practices in information security management, to protect the confidentiality, integrity and availability of information, and to provide confidence in inter-organizational exchanges.

The Instituto de Informática, I.P applies the international standard ISO/IEC 27001, Community standards, legislation, as well as specific national recommendations on information security.

A IGMTSSS and Instituto de Informática, I.P. have all the necessary technical and organizational measures to ensure a level of security of Personal Data appropriate to the risk and, in particular, to protect Personal Data against destruction, loss, alteration, unauthorized disclosure or accidental or unlawful access.

Within the framework of IGMTSSS portal, a IGMTSSS and Instituto de Informática, I.P. have the appropriate technical and organizational measures to ensure the security of Personal Data.

The same level of protection is contractually imposed by IGMTSSS and Instituto de Informática I.P. to its suppliers and providers.

Any employee of the IGMTSSS or the Instituto de Informática, I.P. that, during its work, has access to Personal Data agrees to keep them in the strictest confidentiality under the confidentiality agreements signed.

Rights of the Data Subject

In accordance with the applicable rules regarding the protection of Personal Data, if requested, the Data Subject may exercise, at any time, their right to obtain access, rectify, forget and transfer pursuant to article 20 of the GDPR, their Personal Data and also to restrict and oppose the Processing of their Personal Data.

The exercise of the rights of the Data Subject must be carried out with the IGMTSSS, using the chapter “Contact” of this document.

When the Treatment is based on the authorization of the Holder, he has the right to withdraw his authorization at any time.

In his/her own interest, the Data Subject should try to keep his/her data up-to-date and may, for this purpose, contact the IGMTSSS, using the chapter “Contact” of this document.

Data Subjects have the right to complain to the competent Supervisory Authority in case of violation of the applicable rules regarding the protection of Personal Data.

The Data Protection Officer

The Data Protection Officer informs and advises on the applicable requirements for the protection of Personal Data, monitors compliance with these requirements at the Instituto de Informática, IP.

The Data Protection Officer shall cooperate and act as a contact point with the competent Supervisory Authorities and data subjects.

Changes to the Privacy Policy

The Personal Data Protection Policy can be changed whenever there is a need or change in the regulatory framework, and a notice of such changes is published in a revised version of the current Policy, with entry into force at the time of its publication or on a date set therein.

Contact

In case of questions related to the rights and guarantees in the field of data protection, you may contact the Data Protection Officer of the IGMTSSS, via the following e-mail address: IGMTSSS-EPD@seg-social.pt.

This policy aims to define the general principles to be applied by the General Inspectorate of the Ministry of Labour, Solidarity and Social Security (IGMTSSS), on the websites it manages, with regard to the use of cookies.

The latest approved version of this document is available on the websites managed by you.

The "cookies" policy applies to all websites managed by IGMTSSS.

This document is intended for all users of websites managed by IGMTSSS and their collaborators.

What are "Cookies"?

Many websites use "cookies" or similar technologies, mainly to improve your browsing experience. "Cookies" are information stored on your terminal equipment by the websites you visit. They are sometimes stored in a plain text file, accessed by a server that reads and records the information.

Websites can only read and write "cookies" held by them.

Function of "Cookies"

"Cookies" allow to know the user's activity on a website or on several related websites, recording, for example, the place of access, the connection time, the type of device (fixed or mobile), the operating system, the browser used, the pages visited, the numbers of clicks and visits and, generally, other aspects regarding the behavior and interests of the visitor.

"Cookies" allow the owner or manager of a website to improve the visitor's experience as well as the efficiency of access to the site, namely, for example, by configuring the appropriate visualization by device, operating system or browser, and by directing navigation by the user's preferences. The website, including the integrated access domains and subdomains identified herein, is only accessible when at least session cookies are enabled in the browser.

Types of "Cookies" Used

This website uses the "cookies" necessary to improve navigation on it and the effective loading of its contents, namely for content localization, language and pre-filling of forms.

Session "cookies" are also used to facilitate the operation of the different websites, such as to allow the user to browse the different sites without having to provide credentials repeatedly. These "cookies" lose their validity when the user's session expires.

Personalization cookies may also be used for the purpose of compiling statistical and anonymous data on the activity and browsing habits of users of the website for analysis and improvement in order to improve access and user experience. These "cookies" are installed by third parties (such as search engines).

Use of "Cookies"

When you browse our websites, we use "cookies" to "recognize" your browser, only during your visit ("session cookie") or during all your visits ("permanent cookie"). On our website, "cookies" are used for the following purposes:

• For technical reasons (identifying sessions, remembering settings, etc.) to, for example, adapt the presentation of the website to your device;
• For statistical analysis and online traffic management purposes, for example, to improve the usability of a website and the relevance of our services.

Shared devices

As "cookies" are linked to the device and the browser used, we cannot be absolutely sure of the identity of the person using the device. Thus, some services offered on this device may not correspond to your use (the settings/browsing habits of other users of the device may influence the content offered).

You can choose the level of confidentiality of your device when deciding who can use it (persons authorized to access the device) and change your settings (in particular, the settings of "cookies").

Definitions of "Cookies"

You can change your cookie settings at any time, allowing most browsers to control the cookies stored on the visitor's devices, as well as their immediate deletion if the user wishes to leave their local storage.

The settings you choose may affect your browsing experience and the operation of some services that require the use of "cookies". In this sense, we reject any responsibility for the consequences of any limited operation of our service caused by the deactivation/deletion of cookies on your device.

In accordance with current legislation, we provide the information that allows you to configure your browser to manage and maintain your privacy and security in relation to cookies. Therefore, we provide information and links to the official support websites of the main browsers so that the user can decide whether or not to accept the use of cookies.

The settings of “cookies” can be changed in the browser preferences, following the indications in the links:

Chrome

Firefox

Internet Explorer

Safari

Authorization for the use of "Cookies"

By accessing this website, the visitor is requested to consent to the use of "cookies" and to the terms of this Policy. By giving your consent, the visitor declares their express agreement to the use of "cookies" and the terms of this Policy. The visitor may, however, cancel or refuse the subsequent use of "cookies".

Management of "Cookies" Online

Cookies can be managed online through tools (browser plug-ins or add-ons) to manage the collection and use of cookies.

“Cookies“ used and their purposes

A IGMTSSS sets out below the information on the cookies used on the website and the purposes for which the personal data are processed.

• Cookie: Google Analytics;
• Responsible entity: Google;
• Reason/purpose: Collect information about the use of the website. This information is collected to create reports of visits to the website, in order to improve its functionalities

The portal of the General Inspectorate of the Ministry of Labour, Solidarity and Social Security (IGMTSSS) was developed in compliance with the accessibility criteria, taking into account version 2.0 of the Web Content Accessibility Guidelines (WCAG), a recommendation of the World Wide Web Consortium (W3C) dated 11 December 2008 and which aims to increase the accessibility of content mainly to persons with disabilities or disabilities.

The SGMTSSS portal follows the success criteria established for the AA (double-A) compliance level of WCAG 2.0.

If you have any comments or suggestions about the accessibility of the Portal, please fill in the form "Talk to us".

Accessibility framework:

ACCESS Unit of the Information Society Department of the FCT

Web Content Accessibility Guidelines (WCAG) 2.0, English version authorised by W3C/WAI.