Privacy Policy
Privacy, Cookies and Data Protection Policy
For us, it is very important to ensure the privacy, security, and protection of your personal data, both in the collection process and in its processing.
To this end, we have created this privacy, cookies, and data protection policy, in order to explain what information is collected when you visit/use our website or send us a contact request, and how this information is used.
Data Controllers
The commercial company Wise Connect, S.A., legal entity no. 513112146, with registered office at Rua Alfredo Allen no. 455, in the parish of Paranhos, municipality of Porto, is the Data Controller.
Personal Data
Personal data is specific information about personal or factual characteristics relating to an individual who can be identified from that data. This includes information such as name, address, telephone number, and date of birth.
Information that does not allow your identification or that cannot be directly linked to your identity is not considered personal data.
From our clients or users of our website and our agricultural operating system, we require certain personal information to ensure that we identify you clearly.
Collection and processing of personal data
We collect your personal data when you visit our site, when you make contact through the contact form, or when you subscribe to our newsletter.
The data collected may include: name, telephone, email, IP, browser identification, Operating System identifier, and device identification.
For what purposes is your personal data used?
Your personal data is processed on the legal basis of the performance of the contract or pre-contractual steps, at your request, compliance with legal obligations, your consent, and the legitimate interest of the Data Controllers.
We use your personal data for the following purposes:
- Contacts related to requests for information and quotes;
- Sending advertising emails, provided that the data subject's consent has been obtained;
- Client management;
- Contacts within the scope of the contracted services;
- Compliance with legal obligations;
- Management of the Wisecrop system;
Disclosure of information to third parties
We only disclose personal data of users and Clients to third parties that provide us with services in the areas of email and website management, information storage, sending advertising emails, and providing solutions for the functionalities offered by the system.
Retention period
We retain your personal data for the period necessary to pursue the purposes described above and to safeguard the rights of both parties.
In the case of personal data processed solely for the purpose of sending advertising communications, it will be retained for as long as you do not withdraw your consent.
Information security
We have adopted the technical and organizational security measures necessary to protect your personal data against loss and misuse. For example, the servers we use have several levels of protection, and we use secure connections (SSL/HTTPS).
In addition, your data is stored in a secure operating environment that cannot be accessed by the public, and automatic weekly backups are made. User passwords are stored and processed in an encrypted format.
We have reviewed our information collection, processing, and storage practices, including security measures to protect against unauthorized access to systems, which are equipped with protections against specific attacks (Cross Site Scripting, Cross Site Request Forgery, SQL injection, Clickjacking).
The Wisecrop system allows the user to define various levels of access permissions for the various users they invite to their account. These permissions are the sole responsibility of the user who assigned them.
We restrict access to personal information to Wise Connect employees, partners, contractors, and agents who need to know that information for processing purposes and who are subject to strict contractual confidentiality obligations, and who may be subject to disciplinary proceedings or contract termination in the event of breach of those obligations.
The Data Privacy Policy
What is it?
The Data Privacy Policy is a corporate standard that covers the data protection standards applicable within the company and is designed to meet the legal requirements for data protection. The company is required to comply with this policy in the collection and processing of personal data of clients, employees, partners, and suppliers.
In addition to its commitment to the continuous improvement of its services and to the control and management of risks related to cybersecurity and information privacy, we strive to have good practices, knowledge, and tools to create value and meet the needs of Citizens.
That is why we comply with the principles set out in the GDPR, such as the "limitation of processing" of personal data, establishing within your organization a rule of "data minimisation" (minimizing the data collected relative to what is necessary for the purposes of the processing) and of effective accountability of the data controller (accountability principle).
Personal data: the Data Subject's rights
The right to rectification or updating of personal data may be exercised by the user/client at any time by sending an email to miguel.rodas@wisecrop.com.
We ask our clients to include their name, address, and email address when they contact us, as this helps us ensure that we accept rectifications and updates requested by the correct person. We also ask that, in the event of a change to personal data, this be promptly communicated through the same channel.
If the User/Client wishes to delete their data or exercise the right to object, we ask that they write to the address referenced above.
The User/Client has the right to access the personal data we hold and to receive a copy of it. If you wish to exercise this right, you must contact us at the address referred to above.
If the User/Client has subscribed to any service to receive commercial and promotional information about our products and services, they may withdraw their consent at any time by the same means already referenced above.
The User/Client also has the right to lodge a complaint with the Supervisory Authority.
Changes to this privacy policy
We may change this privacy policy whenever deemed appropriate and necessary. Therefore, we recommend periodically checking this page to read and review the most recent version.
Glossary:
GDPR: General Data Protection Regulation
Personal Data: Any information, of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, or one or more specific elements of their physical, physiological, mental, economic, cultural, or social identity.
Processing of Personal Data (processing): Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, as well as restriction, erasure, or destruction.
Data controller: The natural or legal person, public authority, agency, or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor (data processor): The natural or legal person, public authority, agency, or any other body which processes personal data on behalf of the data controller.
Third party: A natural or legal person, public authority, service, or any other body which, not being the data subject, the data controller, the processor, or another person under the direct authority of the data controller or processor, is authorized to process the data.
Recipient: The natural or legal person, public authority, agency, or any other body to which personal data is disclosed, whether or not it is a third party.
Consent of the Data Subject: Any freely given, specific, informed, and explicit indication of will by which the data subject accepts, through a statement or a clear affirmative action, that their personal data be processed.
Privacy by design: Means taking privacy risk into account throughout the process of designing a new product or service, rather than considering privacy issues only afterwards. This means carefully assessing and implementing appropriate technical and organizational measures and procedures from the outset to ensure that the processing complies with the GDPR and protects the rights of the data subjects concerned.
Privacy by default: Means ensuring that mechanisms are put in place within an organization to guarantee that, by default, only the necessary amount of personal data is collected, used, and retained for each task. This obligation applies to the extent of its processing, the retention period, and its accessibility. These measures ensure that personal data is not made available, without human intervention, to an indefinite number of natural persons.
Restriction of Processing: The marking of stored personal data with the aim of limiting their processing in the future.
Data minimisation: Means that the personal data collected must be limited to what is necessary in relation to the purposes for which they are processed.