1. Identification of the data controller

The controller of the personal data collected through this website is Minerva Insights, SA, a public limited company with registered office at Rua Padre Luís Aparício 10 – 1º, 1150–248 Lisbon, Portugal, with CIF 517 188 627, registered in the Commercial Registry of Lisbon. In accordance with Regulation (EU) 2016/679 (GDPR) and  Law no. 58/2019, Minerva Insights SA acts as the data controller.

For any questions related to the protection of personal data, you can contact us via email: contact@minervainsightsgroup.com 

2. Purposes of data processing

The personal data collected through this website are processed for the following purposes:

• Contact and request management: respond to queries, requests for information or quotes sent by users.
• Sending institutional or promotional communications: only with the prior and explicit consent of the user.
• Improvement of the browsing experience: through the use of technical and analytical cookies (see Cookies Policy).
• Compliance with legal and regulatory obligations: such as tax, accounting or data protection obligations.
• Personnel selection processes: collection and analysis of CVs, contact details, academic and professional history, as well as any other information voluntarily provided by candidates. This data is used exclusively to assess the suitability of candidates for vacant positions and for possible future contacts in the context of employment opportunities.

The data will not be used for purposes other than those described herein without the prior consent of the interested party.

3. Legal basis for processing

The processing of personal data is based on:

• The consent of the data subject (Art. 6 para. 1 GDPR), e.g. for the sending of commercial communications or participation in selection processes.
• The performance of a contract or the implementation of pre-contractual measures (Art. 6 para. 1 lit. b) GDPR), such as in the case of requests for information or the contracting of services.
• Compliance with legal obligations (Art. 6.1.c GDPR), such as tax or data retention obligations.
• The legitimate interest of the controller (Art. 6.1.f GDPR), such as improving the website or preventing fraud.

4. Categories of data processed

Depending on the user’s interaction with the website, the following categories of data may be processed:

• Identification data: name, surname, company.
• Contact details: email, phone.
• Professional data: position, sector of activity, curriculum vitae, letter of motivation.
• Browsing data: IP address, browser type, pages visited, cookies.

No special categories of personal data are processed unless you provide it voluntarily and with your explicit consent.

5. Data recipients

Personal data may be communicated to:

• Data processors: providers of technological services, web hosting, recruitment platforms, email services, among others. All of them are subject to contracts that guarantee the confidentiality and security of the data.
• Public authorities: where required by applicable law.

Under no circumstances will personal data be transferred to third parties for commercial purposes without the consent of the data subject.

6. International Data Transfers

Minerva Insights SA does not carry out international data transfers outside the European Economic Area. If necessary, compliance with legal requirements will be ensured by standard contractual clauses or other mechanisms recognised by the GDPR.

7. Data retention period

Personal data will only be kept for as long as necessary to fulfil the purpose for which they were collected:

• Inquiries and requests: up to 12 months after the last interaction.
• Commercial communications: until the user revokes their consent.
• Applications: up to 1 year after receipt, unless the candidate requests their withdrawal.
• Contractual data: during statutory retention periods (usually 10 years for tax and accounting purposes).

After the deadline has elapsed, the data will be securely deleted or anonymized.

8. Rights of data subjects

The user may exercise at any time the rights recognized by the GDPR and Portuguese legislation:

• Access: to find out what data we process and for what purpose.
• Rectification: correction of inaccurate or incomplete data.
• Deletion: Request deletion of your data when it is no longer needed.
• Objection: object to processing based on legitimate interests.
• Limitation: Restrict processing in certain circumstances.
• Portability: Receive your data in a structured format and transfer it to another data controller.
• Revocation of consent: without affecting the lawfulness of the previous processing.

To exercise these rights, you can send a request to contact@minervainsightsgroup.com. You can also file a complaint with the National Data Protection Commission (CNPD) via www.cnpd.pt.

9. Data security

Minerva Insights SA implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or destruction. These measures include:

• Access control and authentication.
• Encryption of sensitive data.
• Regular backups.
• Continuous training of staff in data protection matters.

10. Modifications to the Privacy Policy

Minerva Insights SA reserves the right to modify this Privacy Policy to adapt it to legislative or technical changes. Modifications will be posted on this page and, if significant, users will be notified by appropriate means. We encourage you to periodically review this policy to understand how we protect your data.