EDP - Energias de Portugal, SA (hereinafter EDP S.A.) is committed to respect for the privacy of data owners, to the protection and security of their personal data. The purpose of this document is to inform users about the way EDP SA processes personal data provided through the portugal.edp.com website. Before using the portugal.edp.com website, the user must read this Privacy Policy carefully and decide if he/she wishes to provide his/her personal data to EDP S.A..
The user warrants that he/she is of legal age and that the information he/she provides is true, accurate, complete and up-to-date; the user is solely responsible for any inconsistencies in this regard. If such data belongs to a third party, the user warrants that he/she has informed said third party about the provisions set forth in this document and that he/she has obtained permission to provide such data to EDP S.A. for the aforementioned purposes.
1. Scope of application and entity responsible for the processing of personal data
This Privacy Policy applies to all personal data collected through the forms available on the portugal.edp.com website.
The entity responsible for processing this data is:
EDP - Energias de Portugal SA, with the single Commercial Registry and legal person number 500697256, headquartered at Avenida 24 de Julho no. 12, 1249-300 Lisbon, with share capital of €3.965.681.012;
You may contact EDP S.A. on any matter related to this privacy policy by using the following channels and indicating the subject "EDP S.A. - Personal Data Privacy".
- Postal Address: Avenida 24 de Julho, 12 1249-300 Lisbon
- Email Address: comunicacao@edp.pt
2. Data processing purposes and legal basis
Personal data collected through the forms available on the portugal.edp.com website will be used in the following operations:
- Analyzing and responding to messages/solicitations proactively sent by users
- Mailing of newsletter on financial information relating to EDP, which may be requested using the form on the web page "Investors".
The processing of personal data is necessary to carry out the aforementioned operations. Its legal basis is the permission of the respective owner when addressing the matter to EDP S.A., requesting that it be subject to appraisal or when the newsletter is requested.
3. Recipients
The user's personal data may be transferred to a suitable service provider outsourced by EDP S.A., or to other companies within the EDP Group, which will process the data solely for the purposes determined by EDP S.A. and under its instructions.
4. International data transfers
Data processing for the aforementioned purposes may require that it be shared with EDP Group companies operating in countries outside the European Economic Area (more information about the regions where EDP operates at portugal.edp.com).The responsible entities will use their best endeavours to ensure that such transfers meet appropriate safeguards to guarantee that the level of protection of individuals as required by the applicable data protection rules is not compromised. Should the data Subject wish to obtain further information about the processing of personal data carried out outside the EEE he or she may contact the responsible entities.
5. Retention period
Collected personal data will be retained for a period of 5 years, although such data may be kept beyond that period for the fulfillment of legal obligations or archiving purposes; in the latter case, appropriate technical and organizational measures will be implemented. The personal data collected for sending the newsletter will be kept for the period of time during which the newsletter is sent, until the subscriber unsubscribes to it.
6. User rights
Pursuant to personal data laws, the user has the right to access, rectify and delete any personal data concerning him/her. Moreover, the user may also exercise his/her data portability rights or the right to limit or oppose the processing of his/her personal data.
In order to exercise the aforementioned rights, the user may contact the entity responsible for the processing of personal data by sending a written request to the addresses listed in paragraph 1 of this Privacy Policy.
The user also has the right to submit a complaint to the National Data Protection Commission if he/she believes that his/her personal data rights in the current policy have been violated.
For any question related to this Privacy Policy, the user may also contact the EDP Data Protection Officer (DPO), whose contact details are:
- Email address: dpo.pt@edp.com
7. Changes to the Privacy Policy
This Privacy Policy may be amended at any time by EDP S. A.. When these changes occur, they will be disclosed through the Digital Channels and/or communicated to users through the contacts provided.
Date of last update: 20.01.2022